Jul 2 00:43:33.924499 kernel: Booting Linux on physical CPU 0x0000000000 [0x410fd083] Jul 2 00:43:33.924535 kernel: Linux version 5.15.161-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Mon Jul 1 23:37:37 -00 2024 Jul 2 00:43:33.924557 kernel: efi: EFI v2.70 by EDK II Jul 2 00:43:33.924588 kernel: efi: SMBIOS=0x7bed0000 SMBIOS 3.0=0x7beb0000 ACPI=0x786e0000 ACPI 2.0=0x786e0014 MEMATTR=0x7ac1aa98 MEMRESERVE=0x7173cf98 Jul 2 00:43:33.924602 kernel: ACPI: Early table checksum verification disabled Jul 2 00:43:33.924615 kernel: ACPI: RSDP 0x00000000786E0014 000024 (v02 AMAZON) Jul 2 00:43:33.924631 kernel: ACPI: XSDT 0x00000000786D00E8 000064 (v01 AMAZON AMZNFACP 00000001 01000013) Jul 2 00:43:33.924645 kernel: ACPI: FACP 0x00000000786B0000 000114 (v06 AMAZON AMZNFACP 00000001 AMZN 00000001) Jul 2 00:43:33.924659 kernel: ACPI: DSDT 0x0000000078640000 00159D (v02 AMAZON AMZNDSDT 00000001 INTL 20160527) Jul 2 00:43:33.924672 kernel: ACPI: APIC 0x00000000786C0000 000108 (v04 AMAZON AMZNAPIC 00000001 AMZN 00000001) Jul 2 00:43:33.924691 kernel: ACPI: SPCR 0x00000000786A0000 000050 (v02 AMAZON AMZNSPCR 00000001 AMZN 00000001) Jul 2 00:43:33.924705 kernel: ACPI: GTDT 0x0000000078690000 000060 (v02 AMAZON AMZNGTDT 00000001 AMZN 00000001) Jul 2 00:43:33.924718 kernel: ACPI: MCFG 0x0000000078680000 00003C (v02 AMAZON AMZNMCFG 00000001 AMZN 00000001) Jul 2 00:43:33.924732 kernel: ACPI: SLIT 0x0000000078670000 00002D (v01 AMAZON AMZNSLIT 00000001 AMZN 00000001) Jul 2 00:43:33.924749 kernel: ACPI: IORT 0x0000000078660000 000078 (v01 AMAZON AMZNIORT 00000001 AMZN 00000001) Jul 2 00:43:33.924768 kernel: ACPI: PPTT 0x0000000078650000 0000EC (v01 AMAZON AMZNPPTT 00000001 AMZN 00000001) Jul 2 00:43:33.924782 kernel: ACPI: SPCR: console: uart,mmio,0x90a0000,115200 Jul 2 00:43:33.924796 kernel: earlycon: uart0 at MMIO 0x00000000090a0000 (options '115200') Jul 2 00:43:33.924811 kernel: printk: bootconsole [uart0] enabled Jul 2 00:43:33.924825 kernel: NUMA: Failed to initialise from firmware Jul 2 00:43:33.924839 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000004b5ffffff] Jul 2 00:43:33.924854 kernel: NUMA: NODE_DATA [mem 0x4b5843900-0x4b5848fff] Jul 2 00:43:33.924868 kernel: Zone ranges: Jul 2 00:43:33.924883 kernel: DMA [mem 0x0000000040000000-0x00000000ffffffff] Jul 2 00:43:33.924897 kernel: DMA32 empty Jul 2 00:43:33.924911 kernel: Normal [mem 0x0000000100000000-0x00000004b5ffffff] Jul 2 00:43:33.924929 kernel: Movable zone start for each node Jul 2 00:43:33.924944 kernel: Early memory node ranges Jul 2 00:43:33.924958 kernel: node 0: [mem 0x0000000040000000-0x000000007862ffff] Jul 2 00:43:33.924972 kernel: node 0: [mem 0x0000000078630000-0x000000007863ffff] Jul 2 00:43:33.924987 kernel: node 0: [mem 0x0000000078640000-0x00000000786effff] Jul 2 00:43:33.925001 kernel: node 0: [mem 0x00000000786f0000-0x000000007872ffff] Jul 2 00:43:33.925015 kernel: node 0: [mem 0x0000000078730000-0x000000007bbfffff] Jul 2 00:43:33.925029 kernel: node 0: [mem 0x000000007bc00000-0x000000007bfdffff] Jul 2 00:43:33.925044 kernel: node 0: [mem 0x000000007bfe0000-0x000000007fffffff] Jul 2 00:43:33.925058 kernel: node 0: [mem 0x0000000400000000-0x00000004b5ffffff] Jul 2 00:43:33.925072 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000004b5ffffff] Jul 2 00:43:33.925087 kernel: On node 0, zone Normal: 8192 pages in unavailable ranges Jul 2 00:43:33.925105 kernel: psci: probing for conduit method from ACPI. Jul 2 00:43:33.935324 kernel: psci: PSCIv1.0 detected in firmware. Jul 2 00:43:33.935370 kernel: psci: Using standard PSCI v0.2 function IDs Jul 2 00:43:33.935388 kernel: psci: Trusted OS migration not required Jul 2 00:43:33.935404 kernel: psci: SMC Calling Convention v1.1 Jul 2 00:43:33.935425 kernel: ACPI: SRAT not present Jul 2 00:43:33.935442 kernel: percpu: Embedded 30 pages/cpu s83032 r8192 d31656 u122880 Jul 2 00:43:33.935458 kernel: pcpu-alloc: s83032 r8192 d31656 u122880 alloc=30*4096 Jul 2 00:43:33.935474 kernel: pcpu-alloc: [0] 0 [0] 1 Jul 2 00:43:33.935489 kernel: Detected PIPT I-cache on CPU0 Jul 2 00:43:33.935505 kernel: CPU features: detected: GIC system register CPU interface Jul 2 00:43:33.935520 kernel: CPU features: detected: Spectre-v2 Jul 2 00:43:33.935535 kernel: CPU features: detected: Spectre-v3a Jul 2 00:43:33.935550 kernel: CPU features: detected: Spectre-BHB Jul 2 00:43:33.935565 kernel: CPU features: kernel page table isolation forced ON by KASLR Jul 2 00:43:33.935580 kernel: CPU features: detected: Kernel page table isolation (KPTI) Jul 2 00:43:33.935600 kernel: CPU features: detected: ARM erratum 1742098 Jul 2 00:43:33.935615 kernel: CPU features: detected: ARM errata 1165522, 1319367, or 1530923 Jul 2 00:43:33.935630 kernel: Built 1 zonelists, mobility grouping on. Total pages: 991872 Jul 2 00:43:33.935645 kernel: Policy zone: Normal Jul 2 00:43:33.935663 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlycon flatcar.first_boot=detected acpi=force flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=7b86ecfcd4701bdf4668db795601b20c118ac0b117c34a9b3836e0a5236b73b0 Jul 2 00:43:33.935680 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Jul 2 00:43:33.935695 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Jul 2 00:43:33.935711 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Jul 2 00:43:33.935726 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Jul 2 00:43:33.935741 kernel: software IO TLB: mapped [mem 0x000000007c000000-0x0000000080000000] (64MB) Jul 2 00:43:33.935762 kernel: Memory: 3824588K/4030464K available (9792K kernel code, 2092K rwdata, 7572K rodata, 36352K init, 777K bss, 205876K reserved, 0K cma-reserved) Jul 2 00:43:33.935778 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Jul 2 00:43:33.935793 kernel: trace event string verifier disabled Jul 2 00:43:33.935808 kernel: rcu: Preemptible hierarchical RCU implementation. Jul 2 00:43:33.935824 kernel: rcu: RCU event tracing is enabled. Jul 2 00:43:33.935840 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Jul 2 00:43:33.935856 kernel: Trampoline variant of Tasks RCU enabled. Jul 2 00:43:33.935871 kernel: Tracing variant of Tasks RCU enabled. Jul 2 00:43:33.935887 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Jul 2 00:43:33.935902 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Jul 2 00:43:33.935917 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Jul 2 00:43:33.935932 kernel: GICv3: 96 SPIs implemented Jul 2 00:43:33.935951 kernel: GICv3: 0 Extended SPIs implemented Jul 2 00:43:33.935966 kernel: GICv3: Distributor has no Range Selector support Jul 2 00:43:33.935981 kernel: Root IRQ handler: gic_handle_irq Jul 2 00:43:33.935996 kernel: GICv3: 16 PPIs implemented Jul 2 00:43:33.936011 kernel: GICv3: CPU0: found redistributor 0 region 0:0x0000000010200000 Jul 2 00:43:33.936026 kernel: ACPI: SRAT not present Jul 2 00:43:33.936041 kernel: ITS [mem 0x10080000-0x1009ffff] Jul 2 00:43:33.936056 kernel: ITS@0x0000000010080000: allocated 8192 Devices @4000a0000 (indirect, esz 8, psz 64K, shr 1) Jul 2 00:43:33.936071 kernel: ITS@0x0000000010080000: allocated 8192 Interrupt Collections @4000b0000 (flat, esz 8, psz 64K, shr 1) Jul 2 00:43:33.936102 kernel: GICv3: using LPI property table @0x00000004000c0000 Jul 2 00:43:33.936143 kernel: ITS: Using hypervisor restricted LPI range [128] Jul 2 00:43:33.936166 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000004000d0000 Jul 2 00:43:33.936182 kernel: arch_timer: cp15 timer(s) running at 83.33MHz (virt). Jul 2 00:43:33.936198 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x13381ebeec, max_idle_ns: 440795203145 ns Jul 2 00:43:33.936213 kernel: sched_clock: 56 bits at 83MHz, resolution 12ns, wraps every 4398046511100ns Jul 2 00:43:33.936229 kernel: Console: colour dummy device 80x25 Jul 2 00:43:33.936244 kernel: printk: console [tty1] enabled Jul 2 00:43:33.936260 kernel: ACPI: Core revision 20210730 Jul 2 00:43:33.936276 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 166.66 BogoMIPS (lpj=83333) Jul 2 00:43:33.936292 kernel: pid_max: default: 32768 minimum: 301 Jul 2 00:43:33.936307 kernel: LSM: Security Framework initializing Jul 2 00:43:33.936326 kernel: SELinux: Initializing. Jul 2 00:43:33.936342 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 2 00:43:33.936358 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 2 00:43:33.936377 kernel: rcu: Hierarchical SRCU implementation. Jul 2 00:43:33.936393 kernel: Platform MSI: ITS@0x10080000 domain created Jul 2 00:43:33.936408 kernel: PCI/MSI: ITS@0x10080000 domain created Jul 2 00:43:33.936424 kernel: Remapping and enabling EFI services. Jul 2 00:43:33.936439 kernel: smp: Bringing up secondary CPUs ... Jul 2 00:43:33.936454 kernel: Detected PIPT I-cache on CPU1 Jul 2 00:43:33.936470 kernel: GICv3: CPU1: found redistributor 1 region 0:0x0000000010220000 Jul 2 00:43:33.936490 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000004000e0000 Jul 2 00:43:33.936506 kernel: CPU1: Booted secondary processor 0x0000000001 [0x410fd083] Jul 2 00:43:33.936521 kernel: smp: Brought up 1 node, 2 CPUs Jul 2 00:43:33.936537 kernel: SMP: Total of 2 processors activated. Jul 2 00:43:33.936552 kernel: CPU features: detected: 32-bit EL0 Support Jul 2 00:43:33.936568 kernel: CPU features: detected: 32-bit EL1 Support Jul 2 00:43:33.936584 kernel: CPU features: detected: CRC32 instructions Jul 2 00:43:33.936599 kernel: CPU: All CPU(s) started at EL1 Jul 2 00:43:33.936614 kernel: alternatives: patching kernel code Jul 2 00:43:33.936634 kernel: devtmpfs: initialized Jul 2 00:43:33.936650 kernel: KASLR disabled due to lack of seed Jul 2 00:43:33.936676 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Jul 2 00:43:33.936697 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Jul 2 00:43:33.936713 kernel: pinctrl core: initialized pinctrl subsystem Jul 2 00:43:33.936729 kernel: SMBIOS 3.0.0 present. Jul 2 00:43:33.936745 kernel: DMI: Amazon EC2 a1.large/, BIOS 1.0 11/1/2018 Jul 2 00:43:33.936761 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Jul 2 00:43:33.936777 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Jul 2 00:43:33.936793 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Jul 2 00:43:33.936810 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Jul 2 00:43:33.936830 kernel: audit: initializing netlink subsys (disabled) Jul 2 00:43:33.936846 kernel: audit: type=2000 audit(0.248:1): state=initialized audit_enabled=0 res=1 Jul 2 00:43:33.936862 kernel: thermal_sys: Registered thermal governor 'step_wise' Jul 2 00:43:33.936878 kernel: cpuidle: using governor menu Jul 2 00:43:33.936894 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Jul 2 00:43:33.936914 kernel: ASID allocator initialised with 32768 entries Jul 2 00:43:33.936931 kernel: ACPI: bus type PCI registered Jul 2 00:43:33.936947 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Jul 2 00:43:33.936963 kernel: Serial: AMBA PL011 UART driver Jul 2 00:43:33.936979 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Jul 2 00:43:33.936995 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Jul 2 00:43:33.937011 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Jul 2 00:43:33.937027 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Jul 2 00:43:33.937043 kernel: cryptd: max_cpu_qlen set to 1000 Jul 2 00:43:33.937063 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Jul 2 00:43:33.937080 kernel: ACPI: Added _OSI(Module Device) Jul 2 00:43:33.937095 kernel: ACPI: Added _OSI(Processor Device) Jul 2 00:43:33.937111 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Jul 2 00:43:33.937155 kernel: ACPI: Added _OSI(Processor Aggregator Device) Jul 2 00:43:33.937172 kernel: ACPI: Added _OSI(Linux-Dell-Video) Jul 2 00:43:33.937188 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Jul 2 00:43:33.937204 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Jul 2 00:43:33.937220 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Jul 2 00:43:33.937241 kernel: ACPI: Interpreter enabled Jul 2 00:43:33.937258 kernel: ACPI: Using GIC for interrupt routing Jul 2 00:43:33.937274 kernel: ACPI: MCFG table detected, 1 entries Jul 2 00:43:33.937290 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-0f]) Jul 2 00:43:33.937575 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Jul 2 00:43:33.937780 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Jul 2 00:43:33.937978 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Jul 2 00:43:33.938201 kernel: acpi PNP0A08:00: ECAM area [mem 0x20000000-0x20ffffff] reserved by PNP0C02:00 Jul 2 00:43:33.938407 kernel: acpi PNP0A08:00: ECAM at [mem 0x20000000-0x20ffffff] for [bus 00-0f] Jul 2 00:43:33.938430 kernel: ACPI: Remapped I/O 0x000000001fff0000 to [io 0x0000-0xffff window] Jul 2 00:43:33.938446 kernel: acpiphp: Slot [1] registered Jul 2 00:43:33.938462 kernel: acpiphp: Slot [2] registered Jul 2 00:43:33.938479 kernel: acpiphp: Slot [3] registered Jul 2 00:43:33.938494 kernel: acpiphp: Slot [4] registered Jul 2 00:43:33.938510 kernel: acpiphp: Slot [5] registered Jul 2 00:43:33.938526 kernel: acpiphp: Slot [6] registered Jul 2 00:43:33.938542 kernel: acpiphp: Slot [7] registered Jul 2 00:43:33.938562 kernel: acpiphp: Slot [8] registered Jul 2 00:43:33.938579 kernel: acpiphp: Slot [9] registered Jul 2 00:43:33.938595 kernel: acpiphp: Slot [10] registered Jul 2 00:43:33.938610 kernel: acpiphp: Slot [11] registered Jul 2 00:43:33.938627 kernel: acpiphp: Slot [12] registered Jul 2 00:43:33.938643 kernel: acpiphp: Slot [13] registered Jul 2 00:43:33.938658 kernel: acpiphp: Slot [14] registered Jul 2 00:43:33.938674 kernel: acpiphp: Slot [15] registered Jul 2 00:43:33.938690 kernel: acpiphp: Slot [16] registered Jul 2 00:43:33.938709 kernel: acpiphp: Slot [17] registered Jul 2 00:43:33.938726 kernel: acpiphp: Slot [18] registered Jul 2 00:43:33.938742 kernel: acpiphp: Slot [19] registered Jul 2 00:43:33.938758 kernel: acpiphp: Slot [20] registered Jul 2 00:43:33.938774 kernel: acpiphp: Slot [21] registered Jul 2 00:43:33.938805 kernel: acpiphp: Slot [22] registered Jul 2 00:43:33.938827 kernel: acpiphp: Slot [23] registered Jul 2 00:43:33.938843 kernel: acpiphp: Slot [24] registered Jul 2 00:43:33.938859 kernel: acpiphp: Slot [25] registered Jul 2 00:43:33.938875 kernel: acpiphp: Slot [26] registered Jul 2 00:43:33.938896 kernel: acpiphp: Slot [27] registered Jul 2 00:43:33.938912 kernel: acpiphp: Slot [28] registered Jul 2 00:43:33.938929 kernel: acpiphp: Slot [29] registered Jul 2 00:43:33.938944 kernel: acpiphp: Slot [30] registered Jul 2 00:43:33.938960 kernel: acpiphp: Slot [31] registered Jul 2 00:43:33.938977 kernel: PCI host bridge to bus 0000:00 Jul 2 00:43:33.939212 kernel: pci_bus 0000:00: root bus resource [mem 0x80000000-0xffffffff window] Jul 2 00:43:33.939396 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Jul 2 00:43:33.939588 kernel: pci_bus 0000:00: root bus resource [mem 0x400000000000-0x407fffffffff window] Jul 2 00:43:33.939772 kernel: pci_bus 0000:00: root bus resource [bus 00-0f] Jul 2 00:43:33.940003 kernel: pci 0000:00:00.0: [1d0f:0200] type 00 class 0x060000 Jul 2 00:43:33.940262 kernel: pci 0000:00:01.0: [1d0f:8250] type 00 class 0x070003 Jul 2 00:43:33.940474 kernel: pci 0000:00:01.0: reg 0x10: [mem 0x80118000-0x80118fff] Jul 2 00:43:33.940690 kernel: pci 0000:00:04.0: [1d0f:8061] type 00 class 0x010802 Jul 2 00:43:33.940894 kernel: pci 0000:00:04.0: reg 0x10: [mem 0x80114000-0x80117fff] Jul 2 00:43:33.941096 kernel: pci 0000:00:04.0: PME# supported from D0 D1 D2 D3hot D3cold Jul 2 00:43:33.941339 kernel: pci 0000:00:05.0: [1d0f:ec20] type 00 class 0x020000 Jul 2 00:43:33.941550 kernel: pci 0000:00:05.0: reg 0x10: [mem 0x80110000-0x80113fff] Jul 2 00:43:33.941838 kernel: pci 0000:00:05.0: reg 0x18: [mem 0x80000000-0x800fffff pref] Jul 2 00:43:33.942331 kernel: pci 0000:00:05.0: reg 0x20: [mem 0x80100000-0x8010ffff] Jul 2 00:43:33.957667 kernel: pci 0000:00:05.0: PME# supported from D0 D1 D2 D3hot D3cold Jul 2 00:43:33.957946 kernel: pci 0000:00:05.0: BAR 2: assigned [mem 0x80000000-0x800fffff pref] Jul 2 00:43:33.958184 kernel: pci 0000:00:05.0: BAR 4: assigned [mem 0x80100000-0x8010ffff] Jul 2 00:43:33.958411 kernel: pci 0000:00:04.0: BAR 0: assigned [mem 0x80110000-0x80113fff] Jul 2 00:43:33.958613 kernel: pci 0000:00:05.0: BAR 0: assigned [mem 0x80114000-0x80117fff] Jul 2 00:43:33.958835 kernel: pci 0000:00:01.0: BAR 0: assigned [mem 0x80118000-0x80118fff] Jul 2 00:43:33.959026 kernel: pci_bus 0000:00: resource 4 [mem 0x80000000-0xffffffff window] Jul 2 00:43:33.959252 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Jul 2 00:43:33.959441 kernel: pci_bus 0000:00: resource 6 [mem 0x400000000000-0x407fffffffff window] Jul 2 00:43:33.959464 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Jul 2 00:43:33.959482 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Jul 2 00:43:33.959498 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Jul 2 00:43:33.959515 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Jul 2 00:43:33.959531 kernel: iommu: Default domain type: Translated Jul 2 00:43:33.959547 kernel: iommu: DMA domain TLB invalidation policy: strict mode Jul 2 00:43:33.959564 kernel: vgaarb: loaded Jul 2 00:43:33.959580 kernel: pps_core: LinuxPPS API ver. 1 registered Jul 2 00:43:33.959602 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Jul 2 00:43:33.959619 kernel: PTP clock support registered Jul 2 00:43:33.959635 kernel: Registered efivars operations Jul 2 00:43:33.959651 kernel: clocksource: Switched to clocksource arch_sys_counter Jul 2 00:43:33.959667 kernel: VFS: Disk quotas dquot_6.6.0 Jul 2 00:43:33.959683 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Jul 2 00:43:33.959700 kernel: pnp: PnP ACPI init Jul 2 00:43:33.959901 kernel: system 00:00: [mem 0x20000000-0x2fffffff] could not be reserved Jul 2 00:43:33.959930 kernel: pnp: PnP ACPI: found 1 devices Jul 2 00:43:33.959948 kernel: NET: Registered PF_INET protocol family Jul 2 00:43:33.959964 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Jul 2 00:43:33.959980 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Jul 2 00:43:33.959997 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Jul 2 00:43:33.960013 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Jul 2 00:43:33.960030 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Jul 2 00:43:33.960046 kernel: TCP: Hash tables configured (established 32768 bind 32768) Jul 2 00:43:33.960063 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 2 00:43:33.960083 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 2 00:43:33.960100 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Jul 2 00:43:33.960176 kernel: PCI: CLS 0 bytes, default 64 Jul 2 00:43:33.960199 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 3 counters available Jul 2 00:43:33.960215 kernel: kvm [1]: HYP mode not available Jul 2 00:43:33.960232 kernel: Initialise system trusted keyrings Jul 2 00:43:33.960248 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Jul 2 00:43:33.960265 kernel: Key type asymmetric registered Jul 2 00:43:33.960281 kernel: Asymmetric key parser 'x509' registered Jul 2 00:43:33.960302 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Jul 2 00:43:33.960318 kernel: io scheduler mq-deadline registered Jul 2 00:43:33.960334 kernel: io scheduler kyber registered Jul 2 00:43:33.960350 kernel: io scheduler bfq registered Jul 2 00:43:33.960554 kernel: pl061_gpio ARMH0061:00: PL061 GPIO chip registered Jul 2 00:43:33.960580 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Jul 2 00:43:33.960597 kernel: ACPI: button: Power Button [PWRB] Jul 2 00:43:33.960613 kernel: input: Sleep Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0E:00/input/input1 Jul 2 00:43:33.960634 kernel: ACPI: button: Sleep Button [SLPB] Jul 2 00:43:33.960651 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Jul 2 00:43:33.960668 kernel: ACPI: \_SB_.PCI0.GSI2: Enabled at IRQ 37 Jul 2 00:43:33.960866 kernel: serial 0000:00:01.0: enabling device (0010 -> 0012) Jul 2 00:43:33.960888 kernel: printk: console [ttyS0] disabled Jul 2 00:43:33.960905 kernel: 0000:00:01.0: ttyS0 at MMIO 0x80118000 (irq = 14, base_baud = 115200) is a 16550A Jul 2 00:43:33.960922 kernel: printk: console [ttyS0] enabled Jul 2 00:43:33.960938 kernel: printk: bootconsole [uart0] disabled Jul 2 00:43:33.960954 kernel: thunder_xcv, ver 1.0 Jul 2 00:43:33.960970 kernel: thunder_bgx, ver 1.0 Jul 2 00:43:33.960990 kernel: nicpf, ver 1.0 Jul 2 00:43:33.961006 kernel: nicvf, ver 1.0 Jul 2 00:43:33.961254 kernel: rtc-efi rtc-efi.0: registered as rtc0 Jul 2 00:43:33.961450 kernel: rtc-efi rtc-efi.0: setting system clock to 2024-07-02T00:43:33 UTC (1719881013) Jul 2 00:43:33.961473 kernel: hid: raw HID events driver (C) Jiri Kosina Jul 2 00:43:33.961490 kernel: NET: Registered PF_INET6 protocol family Jul 2 00:43:33.961506 kernel: Segment Routing with IPv6 Jul 2 00:43:33.961522 kernel: In-situ OAM (IOAM) with IPv6 Jul 2 00:43:33.961543 kernel: NET: Registered PF_PACKET protocol family Jul 2 00:43:33.961560 kernel: Key type dns_resolver registered Jul 2 00:43:33.961576 kernel: registered taskstats version 1 Jul 2 00:43:33.961592 kernel: Loading compiled-in X.509 certificates Jul 2 00:43:33.961608 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.161-flatcar: c418313b450e4055b23e41c11cb6dc415de0265d' Jul 2 00:43:33.961625 kernel: Key type .fscrypt registered Jul 2 00:43:33.961640 kernel: Key type fscrypt-provisioning registered Jul 2 00:43:33.961656 kernel: ima: No TPM chip found, activating TPM-bypass! Jul 2 00:43:33.961672 kernel: ima: Allocated hash algorithm: sha1 Jul 2 00:43:33.961693 kernel: ima: No architecture policies found Jul 2 00:43:33.961709 kernel: clk: Disabling unused clocks Jul 2 00:43:33.961725 kernel: Freeing unused kernel memory: 36352K Jul 2 00:43:33.961740 kernel: Run /init as init process Jul 2 00:43:33.961756 kernel: with arguments: Jul 2 00:43:33.961772 kernel: /init Jul 2 00:43:33.961787 kernel: with environment: Jul 2 00:43:33.961803 kernel: HOME=/ Jul 2 00:43:33.961818 kernel: TERM=linux Jul 2 00:43:33.961838 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Jul 2 00:43:33.961859 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 2 00:43:33.961880 systemd[1]: Detected virtualization amazon. Jul 2 00:43:33.961898 systemd[1]: Detected architecture arm64. Jul 2 00:43:33.961915 systemd[1]: Running in initrd. Jul 2 00:43:33.961932 systemd[1]: No hostname configured, using default hostname. Jul 2 00:43:33.961950 systemd[1]: Hostname set to . Jul 2 00:43:33.961972 systemd[1]: Initializing machine ID from VM UUID. Jul 2 00:43:33.961990 systemd[1]: Queued start job for default target initrd.target. Jul 2 00:43:33.962007 systemd[1]: Started systemd-ask-password-console.path. Jul 2 00:43:33.962024 systemd[1]: Reached target cryptsetup.target. Jul 2 00:43:33.962041 systemd[1]: Reached target paths.target. Jul 2 00:43:33.962058 systemd[1]: Reached target slices.target. Jul 2 00:43:33.962076 systemd[1]: Reached target swap.target. Jul 2 00:43:33.962093 systemd[1]: Reached target timers.target. Jul 2 00:43:33.962148 systemd[1]: Listening on iscsid.socket. Jul 2 00:43:33.962173 systemd[1]: Listening on iscsiuio.socket. Jul 2 00:43:33.962191 systemd[1]: Listening on systemd-journald-audit.socket. Jul 2 00:43:33.962209 systemd[1]: Listening on systemd-journald-dev-log.socket. Jul 2 00:43:33.962227 systemd[1]: Listening on systemd-journald.socket. Jul 2 00:43:33.962245 systemd[1]: Listening on systemd-networkd.socket. Jul 2 00:43:33.962262 systemd[1]: Listening on systemd-udevd-control.socket. Jul 2 00:43:33.962280 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 2 00:43:33.962303 systemd[1]: Reached target sockets.target. Jul 2 00:43:33.962321 systemd[1]: Starting kmod-static-nodes.service... Jul 2 00:43:33.962338 systemd[1]: Finished network-cleanup.service. Jul 2 00:43:33.962356 systemd[1]: Starting systemd-fsck-usr.service... Jul 2 00:43:33.962373 systemd[1]: Starting systemd-journald.service... Jul 2 00:43:33.962391 systemd[1]: Starting systemd-modules-load.service... Jul 2 00:43:33.962408 systemd[1]: Starting systemd-resolved.service... Jul 2 00:43:33.962426 systemd[1]: Starting systemd-vconsole-setup.service... Jul 2 00:43:33.962443 systemd[1]: Finished kmod-static-nodes.service. Jul 2 00:43:33.962465 kernel: audit: type=1130 audit(1719881013.948:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:33.962483 systemd[1]: Finished systemd-fsck-usr.service. Jul 2 00:43:33.962504 systemd-journald[309]: Journal started Jul 2 00:43:33.962587 systemd-journald[309]: Runtime Journal (/run/log/journal/ec279d6ab822baaa7c4b202b9531b196) is 8.0M, max 75.4M, 67.4M free. Jul 2 00:43:33.948000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:33.943548 systemd-modules-load[310]: Inserted module 'overlay' Jul 2 00:43:33.979073 kernel: audit: type=1130 audit(1719881013.970:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:33.979145 systemd[1]: Started systemd-journald.service. Jul 2 00:43:33.970000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:33.981000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:33.983690 systemd[1]: Finished systemd-vconsole-setup.service. Jul 2 00:43:33.993153 kernel: audit: type=1130 audit(1719881013.981:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:33.998000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:34.007398 systemd[1]: Starting dracut-cmdline-ask.service... Jul 2 00:43:34.013896 kernel: audit: type=1130 audit(1719881013.998:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:34.016764 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 2 00:43:34.030139 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Jul 2 00:43:34.049163 kernel: Bridge firewalling registered Jul 2 00:43:34.049414 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 2 00:43:34.063135 kernel: audit: type=1130 audit(1719881014.048:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:34.048000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:34.056622 systemd-modules-load[310]: Inserted module 'br_netfilter' Jul 2 00:43:34.075843 systemd-resolved[311]: Positive Trust Anchors: Jul 2 00:43:34.080651 kernel: SCSI subsystem initialized Jul 2 00:43:34.080789 systemd-resolved[311]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 2 00:43:34.081169 systemd[1]: Finished dracut-cmdline-ask.service. Jul 2 00:43:34.117595 kernel: audit: type=1130 audit(1719881014.088:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:34.117658 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Jul 2 00:43:34.117691 kernel: device-mapper: uevent: version 1.0.3 Jul 2 00:43:34.117715 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Jul 2 00:43:34.088000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:34.100337 systemd[1]: Starting dracut-cmdline.service... Jul 2 00:43:34.104202 systemd-resolved[311]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 2 00:43:34.133257 systemd-modules-load[310]: Inserted module 'dm_multipath' Jul 2 00:43:34.135357 systemd[1]: Finished systemd-modules-load.service. Jul 2 00:43:34.139000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:34.149270 kernel: audit: type=1130 audit(1719881014.139:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:34.149304 systemd[1]: Starting systemd-sysctl.service... Jul 2 00:43:34.153934 dracut-cmdline[327]: dracut-dracut-053 Jul 2 00:43:34.159956 dracut-cmdline[327]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlycon flatcar.first_boot=detected acpi=force flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=7b86ecfcd4701bdf4668db795601b20c118ac0b117c34a9b3836e0a5236b73b0 Jul 2 00:43:34.184337 systemd[1]: Finished systemd-sysctl.service. Jul 2 00:43:34.186000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:34.195145 kernel: audit: type=1130 audit(1719881014.186:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:34.297146 kernel: Loading iSCSI transport class v2.0-870. Jul 2 00:43:34.316163 kernel: iscsi: registered transport (tcp) Jul 2 00:43:34.342503 kernel: iscsi: registered transport (qla4xxx) Jul 2 00:43:34.342573 kernel: QLogic iSCSI HBA Driver Jul 2 00:43:34.540894 systemd-resolved[311]: Defaulting to hostname 'linux'. Jul 2 00:43:34.542626 kernel: random: crng init done Jul 2 00:43:34.544064 systemd[1]: Started systemd-resolved.service. Jul 2 00:43:34.557000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:34.559039 systemd[1]: Reached target nss-lookup.target. Jul 2 00:43:34.572338 kernel: audit: type=1130 audit(1719881014.557:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:34.567000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:34.567221 systemd[1]: Finished dracut-cmdline.service. Jul 2 00:43:34.571576 systemd[1]: Starting dracut-pre-udev.service... Jul 2 00:43:34.638161 kernel: raid6: neonx8 gen() 6408 MB/s Jul 2 00:43:34.656148 kernel: raid6: neonx8 xor() 4768 MB/s Jul 2 00:43:34.674148 kernel: raid6: neonx4 gen() 6584 MB/s Jul 2 00:43:34.692148 kernel: raid6: neonx4 xor() 4995 MB/s Jul 2 00:43:34.710148 kernel: raid6: neonx2 gen() 5790 MB/s Jul 2 00:43:34.728148 kernel: raid6: neonx2 xor() 4571 MB/s Jul 2 00:43:34.746148 kernel: raid6: neonx1 gen() 4491 MB/s Jul 2 00:43:34.764149 kernel: raid6: neonx1 xor() 3703 MB/s Jul 2 00:43:34.782149 kernel: raid6: int64x8 gen() 3448 MB/s Jul 2 00:43:34.800148 kernel: raid6: int64x8 xor() 2083 MB/s Jul 2 00:43:34.818148 kernel: raid6: int64x4 gen() 3849 MB/s Jul 2 00:43:34.836148 kernel: raid6: int64x4 xor() 2200 MB/s Jul 2 00:43:34.854149 kernel: raid6: int64x2 gen() 3624 MB/s Jul 2 00:43:34.872149 kernel: raid6: int64x2 xor() 1954 MB/s Jul 2 00:43:34.890149 kernel: raid6: int64x1 gen() 2768 MB/s Jul 2 00:43:34.909162 kernel: raid6: int64x1 xor() 1452 MB/s Jul 2 00:43:34.909196 kernel: raid6: using algorithm neonx4 gen() 6584 MB/s Jul 2 00:43:34.909226 kernel: raid6: .... xor() 4995 MB/s, rmw enabled Jul 2 00:43:34.910711 kernel: raid6: using neon recovery algorithm Jul 2 00:43:34.929154 kernel: xor: measuring software checksum speed Jul 2 00:43:34.931152 kernel: 8regs : 9332 MB/sec Jul 2 00:43:34.933148 kernel: 32regs : 11107 MB/sec Jul 2 00:43:34.937009 kernel: arm64_neon : 9614 MB/sec Jul 2 00:43:34.937040 kernel: xor: using function: 32regs (11107 MB/sec) Jul 2 00:43:35.027175 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Jul 2 00:43:35.044005 systemd[1]: Finished dracut-pre-udev.service. Jul 2 00:43:35.047000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:35.048000 audit: BPF prog-id=7 op=LOAD Jul 2 00:43:35.048000 audit: BPF prog-id=8 op=LOAD Jul 2 00:43:35.050441 systemd[1]: Starting systemd-udevd.service... Jul 2 00:43:35.078111 systemd-udevd[509]: Using default interface naming scheme 'v252'. Jul 2 00:43:35.088381 systemd[1]: Started systemd-udevd.service. Jul 2 00:43:35.091000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:35.095869 systemd[1]: Starting dracut-pre-trigger.service... Jul 2 00:43:35.123779 dracut-pre-trigger[519]: rd.md=0: removing MD RAID activation Jul 2 00:43:35.183450 systemd[1]: Finished dracut-pre-trigger.service. Jul 2 00:43:35.184000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:35.187899 systemd[1]: Starting systemd-udev-trigger.service... Jul 2 00:43:35.295650 systemd[1]: Finished systemd-udev-trigger.service. Jul 2 00:43:35.296000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:35.412999 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Jul 2 00:43:35.413086 kernel: ena 0000:00:05.0: enabling device (0010 -> 0012) Jul 2 00:43:35.425433 kernel: ena 0000:00:05.0: ENA device version: 0.10 Jul 2 00:43:35.425722 kernel: ena 0000:00:05.0: ENA controller version: 0.0.1 implementation version 1 Jul 2 00:43:35.435289 kernel: ACPI: \_SB_.PCI0.GSI0: Enabled at IRQ 35 Jul 2 00:43:35.435346 kernel: nvme nvme0: pci function 0000:00:04.0 Jul 2 00:43:35.442152 kernel: ena 0000:00:05.0: Elastic Network Adapter (ENA) found at mem 80114000, mac addr 06:ff:dc:a9:eb:a1 Jul 2 00:43:35.445163 kernel: nvme nvme0: 2/0/0 default/read/poll queues Jul 2 00:43:35.451876 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Jul 2 00:43:35.451924 kernel: GPT:9289727 != 16777215 Jul 2 00:43:35.453832 kernel: GPT:Alternate GPT header not at the end of the disk. Jul 2 00:43:35.454994 kernel: GPT:9289727 != 16777215 Jul 2 00:43:35.456643 kernel: GPT: Use GNU Parted to correct GPT errors. Jul 2 00:43:35.457982 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Jul 2 00:43:35.462360 (udev-worker)[562]: Network interface NamePolicy= disabled on kernel command line. Jul 2 00:43:35.541169 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/nvme0n1p6 scanned by (udev-worker) (563) Jul 2 00:43:35.554637 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Jul 2 00:43:35.592569 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 2 00:43:35.625069 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Jul 2 00:43:35.629961 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Jul 2 00:43:35.635030 systemd[1]: Starting disk-uuid.service... Jul 2 00:43:35.649895 disk-uuid[638]: Primary Header is updated. Jul 2 00:43:35.649895 disk-uuid[638]: Secondary Entries is updated. Jul 2 00:43:35.649895 disk-uuid[638]: Secondary Header is updated. Jul 2 00:43:35.694743 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Jul 2 00:43:36.667149 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Jul 2 00:43:36.667780 disk-uuid[640]: The operation has completed successfully. Jul 2 00:43:36.837214 systemd[1]: disk-uuid.service: Deactivated successfully. Jul 2 00:43:36.837778 systemd[1]: Finished disk-uuid.service. Jul 2 00:43:36.839000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:36.840000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:36.862996 systemd[1]: Starting verity-setup.service... Jul 2 00:43:36.888162 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Jul 2 00:43:36.970496 systemd[1]: Found device dev-mapper-usr.device. Jul 2 00:43:36.976008 systemd[1]: Mounting sysusr-usr.mount... Jul 2 00:43:36.981662 systemd[1]: Finished verity-setup.service. Jul 2 00:43:36.983000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:37.065140 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Jul 2 00:43:37.065789 systemd[1]: Mounted sysusr-usr.mount. Jul 2 00:43:37.068513 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Jul 2 00:43:37.072226 systemd[1]: Starting ignition-setup.service... Jul 2 00:43:37.082264 systemd[1]: Starting parse-ip-for-networkd.service... Jul 2 00:43:37.098982 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Jul 2 00:43:37.099053 kernel: BTRFS info (device nvme0n1p6): using free space tree Jul 2 00:43:37.100911 kernel: BTRFS info (device nvme0n1p6): has skinny extents Jul 2 00:43:37.109202 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Jul 2 00:43:37.126148 systemd[1]: mnt-oem.mount: Deactivated successfully. Jul 2 00:43:37.167228 systemd[1]: Finished ignition-setup.service. Jul 2 00:43:37.167000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:37.170926 systemd[1]: Starting ignition-fetch-offline.service... Jul 2 00:43:37.218042 systemd[1]: Finished parse-ip-for-networkd.service. Jul 2 00:43:37.219000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:37.221000 audit: BPF prog-id=9 op=LOAD Jul 2 00:43:37.223304 systemd[1]: Starting systemd-networkd.service... Jul 2 00:43:37.269147 systemd-networkd[1098]: lo: Link UP Jul 2 00:43:37.270693 systemd-networkd[1098]: lo: Gained carrier Jul 2 00:43:37.273433 systemd-networkd[1098]: Enumeration completed Jul 2 00:43:37.273595 systemd[1]: Started systemd-networkd.service. Jul 2 00:43:37.275000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:37.277807 systemd-networkd[1098]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 2 00:43:37.281408 systemd[1]: Reached target network.target. Jul 2 00:43:37.286207 systemd[1]: Starting iscsiuio.service... Jul 2 00:43:37.287736 systemd-networkd[1098]: eth0: Link UP Jul 2 00:43:37.287744 systemd-networkd[1098]: eth0: Gained carrier Jul 2 00:43:37.301569 systemd[1]: Started iscsiuio.service. Jul 2 00:43:37.302000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:37.305459 systemd[1]: Starting iscsid.service... Jul 2 00:43:37.312844 iscsid[1103]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Jul 2 00:43:37.312844 iscsid[1103]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Jul 2 00:43:37.312844 iscsid[1103]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Jul 2 00:43:37.312844 iscsid[1103]: If using hardware iscsi like qla4xxx this message can be ignored. Jul 2 00:43:37.312844 iscsid[1103]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Jul 2 00:43:37.331160 iscsid[1103]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Jul 2 00:43:37.331229 systemd[1]: Started iscsid.service. Jul 2 00:43:37.344000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:37.346282 systemd-networkd[1098]: eth0: DHCPv4 address 172.31.16.66/20, gateway 172.31.16.1 acquired from 172.31.16.1 Jul 2 00:43:37.350738 systemd[1]: Starting dracut-initqueue.service... Jul 2 00:43:37.374405 systemd[1]: Finished dracut-initqueue.service. Jul 2 00:43:37.376000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:37.377312 systemd[1]: Reached target remote-fs-pre.target. Jul 2 00:43:37.392198 systemd[1]: Reached target remote-cryptsetup.target. Jul 2 00:43:37.393844 systemd[1]: Reached target remote-fs.target. Jul 2 00:43:37.410888 systemd[1]: Starting dracut-pre-mount.service... Jul 2 00:43:37.431833 systemd[1]: Finished dracut-pre-mount.service. Jul 2 00:43:37.432000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:38.225789 ignition[1060]: Ignition 2.14.0 Jul 2 00:43:38.225816 ignition[1060]: Stage: fetch-offline Jul 2 00:43:38.226193 ignition[1060]: reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 2 00:43:38.226279 ignition[1060]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Jul 2 00:43:38.256444 ignition[1060]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Jul 2 00:43:38.257305 ignition[1060]: Ignition finished successfully Jul 2 00:43:38.261895 systemd[1]: Finished ignition-fetch-offline.service. Jul 2 00:43:38.275938 kernel: kauditd_printk_skb: 18 callbacks suppressed Jul 2 00:43:38.275981 kernel: audit: type=1130 audit(1719881018.262:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:38.262000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:38.265202 systemd[1]: Starting ignition-fetch.service... Jul 2 00:43:38.290536 ignition[1122]: Ignition 2.14.0 Jul 2 00:43:38.291030 ignition[1122]: Stage: fetch Jul 2 00:43:38.291355 ignition[1122]: reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 2 00:43:38.291412 ignition[1122]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Jul 2 00:43:38.305619 ignition[1122]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Jul 2 00:43:38.307807 ignition[1122]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Jul 2 00:43:38.323337 ignition[1122]: INFO : PUT result: OK Jul 2 00:43:38.326597 ignition[1122]: DEBUG : parsed url from cmdline: "" Jul 2 00:43:38.326597 ignition[1122]: INFO : no config URL provided Jul 2 00:43:38.326597 ignition[1122]: INFO : reading system config file "/usr/lib/ignition/user.ign" Jul 2 00:43:38.331934 ignition[1122]: INFO : no config at "/usr/lib/ignition/user.ign" Jul 2 00:43:38.331934 ignition[1122]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Jul 2 00:43:38.331934 ignition[1122]: INFO : PUT result: OK Jul 2 00:43:38.331934 ignition[1122]: INFO : GET http://169.254.169.254/2019-10-01/user-data: attempt #1 Jul 2 00:43:38.339390 ignition[1122]: INFO : GET result: OK Jul 2 00:43:38.339390 ignition[1122]: DEBUG : parsing config with SHA512: 63a1d8f6de75ba78418ef3fadb4af7a36da1795bda807f79ecb88d2cf829e37f122e8e3bef2cceef8b048e30cf6cedd449a188d7d6368bf5d3d29ef35c2ae67c Jul 2 00:43:38.349634 unknown[1122]: fetched base config from "system" Jul 2 00:43:38.349674 unknown[1122]: fetched base config from "system" Jul 2 00:43:38.349698 unknown[1122]: fetched user config from "aws" Jul 2 00:43:38.356138 ignition[1122]: fetch: fetch complete Jul 2 00:43:38.356164 ignition[1122]: fetch: fetch passed Jul 2 00:43:38.356265 ignition[1122]: Ignition finished successfully Jul 2 00:43:38.362495 systemd[1]: Finished ignition-fetch.service. Jul 2 00:43:38.364000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:38.366647 systemd[1]: Starting ignition-kargs.service... Jul 2 00:43:38.375866 kernel: audit: type=1130 audit(1719881018.364:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:38.389091 ignition[1128]: Ignition 2.14.0 Jul 2 00:43:38.389154 ignition[1128]: Stage: kargs Jul 2 00:43:38.389454 ignition[1128]: reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 2 00:43:38.389512 ignition[1128]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Jul 2 00:43:38.403922 ignition[1128]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Jul 2 00:43:38.406016 ignition[1128]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Jul 2 00:43:38.409213 ignition[1128]: INFO : PUT result: OK Jul 2 00:43:38.414028 ignition[1128]: kargs: kargs passed Jul 2 00:43:38.414162 ignition[1128]: Ignition finished successfully Jul 2 00:43:38.418000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:38.428759 kernel: audit: type=1130 audit(1719881018.418:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:38.416979 systemd[1]: Finished ignition-kargs.service. Jul 2 00:43:38.421929 systemd[1]: Starting ignition-disks.service... Jul 2 00:43:38.437266 ignition[1134]: Ignition 2.14.0 Jul 2 00:43:38.437292 ignition[1134]: Stage: disks Jul 2 00:43:38.437593 ignition[1134]: reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 2 00:43:38.437652 ignition[1134]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Jul 2 00:43:38.452700 ignition[1134]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Jul 2 00:43:38.455102 ignition[1134]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Jul 2 00:43:38.458104 ignition[1134]: INFO : PUT result: OK Jul 2 00:43:38.463204 ignition[1134]: disks: disks passed Jul 2 00:43:38.463334 ignition[1134]: Ignition finished successfully Jul 2 00:43:38.467200 systemd[1]: Finished ignition-disks.service. Jul 2 00:43:38.469322 systemd[1]: Reached target initrd-root-device.target. Jul 2 00:43:38.467000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:38.479112 kernel: audit: type=1130 audit(1719881018.467:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:38.479195 systemd[1]: Reached target local-fs-pre.target. Jul 2 00:43:38.479461 systemd[1]: Reached target local-fs.target. Jul 2 00:43:38.479624 systemd[1]: Reached target sysinit.target. Jul 2 00:43:38.479908 systemd[1]: Reached target basic.target. Jul 2 00:43:38.481911 systemd[1]: Starting systemd-fsck-root.service... Jul 2 00:43:38.527191 systemd-fsck[1142]: ROOT: clean, 614/553520 files, 56019/553472 blocks Jul 2 00:43:38.532267 systemd[1]: Finished systemd-fsck-root.service. Jul 2 00:43:38.544322 kernel: audit: type=1130 audit(1719881018.532:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:38.532000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:38.535174 systemd[1]: Mounting sysroot.mount... Jul 2 00:43:38.562147 kernel: EXT4-fs (nvme0n1p9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Jul 2 00:43:38.563071 systemd[1]: Mounted sysroot.mount. Jul 2 00:43:38.565594 systemd[1]: Reached target initrd-root-fs.target. Jul 2 00:43:38.581246 systemd[1]: Mounting sysroot-usr.mount... Jul 2 00:43:38.585021 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Jul 2 00:43:38.585096 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Jul 2 00:43:38.585210 systemd[1]: Reached target ignition-diskful.target. Jul 2 00:43:38.597583 systemd[1]: Mounted sysroot-usr.mount. Jul 2 00:43:38.624132 systemd[1]: Mounting sysroot-usr-share-oem.mount... Jul 2 00:43:38.650250 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/nvme0n1p6 scanned by mount (1159) Jul 2 00:43:38.650289 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Jul 2 00:43:38.650313 kernel: BTRFS info (device nvme0n1p6): using free space tree Jul 2 00:43:38.649077 systemd[1]: Starting initrd-setup-root.service... Jul 2 00:43:38.656146 kernel: BTRFS info (device nvme0n1p6): has skinny extents Jul 2 00:43:38.669164 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Jul 2 00:43:38.673196 initrd-setup-root[1168]: cut: /sysroot/etc/passwd: No such file or directory Jul 2 00:43:38.673410 systemd[1]: Mounted sysroot-usr-share-oem.mount. Jul 2 00:43:38.694586 initrd-setup-root[1190]: cut: /sysroot/etc/group: No such file or directory Jul 2 00:43:38.702185 initrd-setup-root[1198]: cut: /sysroot/etc/shadow: No such file or directory Jul 2 00:43:38.710215 initrd-setup-root[1206]: cut: /sysroot/etc/gshadow: No such file or directory Jul 2 00:43:38.996564 systemd[1]: Finished initrd-setup-root.service. Jul 2 00:43:38.995000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:39.005510 systemd[1]: Starting ignition-mount.service... Jul 2 00:43:39.009184 kernel: audit: type=1130 audit(1719881018.995:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:39.010622 systemd[1]: Starting sysroot-boot.service... Jul 2 00:43:39.024237 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Jul 2 00:43:39.026333 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Jul 2 00:43:39.057512 systemd[1]: Finished sysroot-boot.service. Jul 2 00:43:39.059000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:39.068160 kernel: audit: type=1130 audit(1719881019.059:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:39.068630 ignition[1227]: INFO : Ignition 2.14.0 Jul 2 00:43:39.070358 ignition[1227]: INFO : Stage: mount Jul 2 00:43:39.070358 ignition[1227]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 2 00:43:39.070358 ignition[1227]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Jul 2 00:43:39.084321 ignition[1227]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Jul 2 00:43:39.086864 ignition[1227]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Jul 2 00:43:39.089813 ignition[1227]: INFO : PUT result: OK Jul 2 00:43:39.094769 ignition[1227]: INFO : mount: mount passed Jul 2 00:43:39.096324 ignition[1227]: INFO : Ignition finished successfully Jul 2 00:43:39.099422 systemd[1]: Finished ignition-mount.service. Jul 2 00:43:39.110006 kernel: audit: type=1130 audit(1719881019.099:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:39.099000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:39.102309 systemd[1]: Starting ignition-files.service... Jul 2 00:43:39.119973 systemd[1]: Mounting sysroot-usr-share-oem.mount... Jul 2 00:43:39.137662 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/nvme0n1p6 scanned by mount (1234) Jul 2 00:43:39.142353 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Jul 2 00:43:39.142404 kernel: BTRFS info (device nvme0n1p6): using free space tree Jul 2 00:43:39.142429 kernel: BTRFS info (device nvme0n1p6): has skinny extents Jul 2 00:43:39.146282 systemd-networkd[1098]: eth0: Gained IPv6LL Jul 2 00:43:39.153153 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Jul 2 00:43:39.157813 systemd[1]: Mounted sysroot-usr-share-oem.mount. Jul 2 00:43:39.176192 ignition[1253]: INFO : Ignition 2.14.0 Jul 2 00:43:39.177959 ignition[1253]: INFO : Stage: files Jul 2 00:43:39.179598 ignition[1253]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 2 00:43:39.181851 ignition[1253]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Jul 2 00:43:39.196248 ignition[1253]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Jul 2 00:43:39.198507 ignition[1253]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Jul 2 00:43:39.201391 ignition[1253]: INFO : PUT result: OK Jul 2 00:43:39.206418 ignition[1253]: DEBUG : files: compiled without relabeling support, skipping Jul 2 00:43:39.212556 ignition[1253]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Jul 2 00:43:39.215076 ignition[1253]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Jul 2 00:43:39.251743 ignition[1253]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Jul 2 00:43:39.254518 ignition[1253]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Jul 2 00:43:39.257976 unknown[1253]: wrote ssh authorized keys file for user: core Jul 2 00:43:39.260210 ignition[1253]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Jul 2 00:43:39.263566 ignition[1253]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.13.2-linux-arm64.tar.gz" Jul 2 00:43:39.266964 ignition[1253]: INFO : GET https://get.helm.sh/helm-v3.13.2-linux-arm64.tar.gz: attempt #1 Jul 2 00:43:39.335839 ignition[1253]: INFO : GET result: OK Jul 2 00:43:39.467082 ignition[1253]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.13.2-linux-arm64.tar.gz" Jul 2 00:43:39.470607 ignition[1253]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/etc/eks/bootstrap.sh" Jul 2 00:43:39.470607 ignition[1253]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Jul 2 00:43:39.483843 ignition[1253]: INFO : op(1): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem637723662" Jul 2 00:43:39.489748 ignition[1253]: CRITICAL : op(1): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem637723662": device or resource busy Jul 2 00:43:39.489748 ignition[1253]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem637723662", trying btrfs: device or resource busy Jul 2 00:43:39.489748 ignition[1253]: INFO : op(2): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem637723662" Jul 2 00:43:39.498412 kernel: BTRFS info: devid 1 device path /dev/nvme0n1p6 changed to /dev/disk/by-label/OEM scanned by ignition (1253) Jul 2 00:43:39.498448 ignition[1253]: INFO : op(2): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem637723662" Jul 2 00:43:39.512381 ignition[1253]: INFO : op(3): [started] unmounting "/mnt/oem637723662" Jul 2 00:43:39.514394 ignition[1253]: INFO : op(3): [finished] unmounting "/mnt/oem637723662" Jul 2 00:43:39.514394 ignition[1253]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/etc/eks/bootstrap.sh" Jul 2 00:43:39.519542 ignition[1253]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/install.sh" Jul 2 00:43:39.522696 ignition[1253]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/install.sh" Jul 2 00:43:39.525726 ignition[1253]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nginx.yaml" Jul 2 00:43:39.529109 ignition[1253]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nginx.yaml" Jul 2 00:43:39.532195 ignition[1253]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 2 00:43:39.535386 ignition[1253]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 2 00:43:39.538489 ignition[1253]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 2 00:43:39.541586 ignition[1253]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 2 00:43:39.544723 ignition[1253]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/etc/flatcar/update.conf" Jul 2 00:43:39.547924 ignition[1253]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/etc/flatcar/update.conf" Jul 2 00:43:39.551020 ignition[1253]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.28.7-arm64.raw" Jul 2 00:43:39.555397 ignition[1253]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.28.7-arm64.raw" Jul 2 00:43:39.559666 ignition[1253]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Jul 2 00:43:39.568087 ignition[1253]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Jul 2 00:43:39.578594 ignition[1253]: INFO : op(4): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem901219848" Jul 2 00:43:39.581206 ignition[1253]: CRITICAL : op(4): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem901219848": device or resource busy Jul 2 00:43:39.584069 ignition[1253]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem901219848", trying btrfs: device or resource busy Jul 2 00:43:39.587236 ignition[1253]: INFO : op(5): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem901219848" Jul 2 00:43:39.589735 ignition[1253]: INFO : op(5): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem901219848" Jul 2 00:43:39.602913 ignition[1253]: INFO : op(6): [started] unmounting "/mnt/oem901219848" Jul 2 00:43:39.602913 ignition[1253]: INFO : op(6): [finished] unmounting "/mnt/oem901219848" Jul 2 00:43:39.602913 ignition[1253]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Jul 2 00:43:39.602913 ignition[1253]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Jul 2 00:43:39.602913 ignition[1253]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Jul 2 00:43:39.597635 systemd[1]: mnt-oem901219848.mount: Deactivated successfully. Jul 2 00:43:39.630807 ignition[1253]: INFO : op(7): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2085492100" Jul 2 00:43:39.633413 ignition[1253]: CRITICAL : op(7): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2085492100": device or resource busy Jul 2 00:43:39.633413 ignition[1253]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2085492100", trying btrfs: device or resource busy Jul 2 00:43:39.633413 ignition[1253]: INFO : op(8): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2085492100" Jul 2 00:43:39.649206 ignition[1253]: INFO : op(8): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2085492100" Jul 2 00:43:39.649206 ignition[1253]: INFO : op(9): [started] unmounting "/mnt/oem2085492100" Jul 2 00:43:39.649206 ignition[1253]: INFO : op(9): [finished] unmounting "/mnt/oem2085492100" Jul 2 00:43:39.649206 ignition[1253]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Jul 2 00:43:39.649206 ignition[1253]: INFO : files: createFilesystemsFiles: createFiles: op(d): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Jul 2 00:43:39.649206 ignition[1253]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Jul 2 00:43:39.645528 systemd[1]: mnt-oem2085492100.mount: Deactivated successfully. Jul 2 00:43:39.687224 ignition[1253]: INFO : op(a): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem884934104" Jul 2 00:43:39.689800 ignition[1253]: CRITICAL : op(a): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem884934104": device or resource busy Jul 2 00:43:39.689800 ignition[1253]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem884934104", trying btrfs: device or resource busy Jul 2 00:43:39.689800 ignition[1253]: INFO : op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem884934104" Jul 2 00:43:39.689800 ignition[1253]: INFO : op(b): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem884934104" Jul 2 00:43:39.689800 ignition[1253]: INFO : op(c): [started] unmounting "/mnt/oem884934104" Jul 2 00:43:39.689800 ignition[1253]: INFO : op(c): [finished] unmounting "/mnt/oem884934104" Jul 2 00:43:39.689800 ignition[1253]: INFO : files: createFilesystemsFiles: createFiles: op(d): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Jul 2 00:43:39.708738 ignition[1253]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.28.7-arm64.raw" Jul 2 00:43:39.708738 ignition[1253]: INFO : GET https://github.com/flatcar/sysext-bakery/releases/download/latest/kubernetes-v1.28.7-arm64.raw: attempt #1 Jul 2 00:43:40.141360 ignition[1253]: INFO : GET result: OK Jul 2 00:43:40.708534 ignition[1253]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.28.7-arm64.raw" Jul 2 00:43:40.708534 ignition[1253]: INFO : files: op(f): [started] processing unit "coreos-metadata-sshkeys@.service" Jul 2 00:43:40.715200 ignition[1253]: INFO : files: op(f): [finished] processing unit "coreos-metadata-sshkeys@.service" Jul 2 00:43:40.715200 ignition[1253]: INFO : files: op(10): [started] processing unit "amazon-ssm-agent.service" Jul 2 00:43:40.715200 ignition[1253]: INFO : files: op(10): op(11): [started] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Jul 2 00:43:40.715200 ignition[1253]: INFO : files: op(10): op(11): [finished] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Jul 2 00:43:40.715200 ignition[1253]: INFO : files: op(10): [finished] processing unit "amazon-ssm-agent.service" Jul 2 00:43:40.715200 ignition[1253]: INFO : files: op(12): [started] processing unit "nvidia.service" Jul 2 00:43:40.715200 ignition[1253]: INFO : files: op(12): [finished] processing unit "nvidia.service" Jul 2 00:43:40.715200 ignition[1253]: INFO : files: op(13): [started] processing unit "prepare-helm.service" Jul 2 00:43:40.715200 ignition[1253]: INFO : files: op(13): op(14): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 2 00:43:40.715200 ignition[1253]: INFO : files: op(13): op(14): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 2 00:43:40.742891 ignition[1253]: INFO : files: op(13): [finished] processing unit "prepare-helm.service" Jul 2 00:43:40.742891 ignition[1253]: INFO : files: op(15): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Jul 2 00:43:40.742891 ignition[1253]: INFO : files: op(15): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Jul 2 00:43:40.742891 ignition[1253]: INFO : files: op(16): [started] setting preset to enabled for "amazon-ssm-agent.service" Jul 2 00:43:40.742891 ignition[1253]: INFO : files: op(16): [finished] setting preset to enabled for "amazon-ssm-agent.service" Jul 2 00:43:40.742891 ignition[1253]: INFO : files: op(17): [started] setting preset to enabled for "nvidia.service" Jul 2 00:43:40.742891 ignition[1253]: INFO : files: op(17): [finished] setting preset to enabled for "nvidia.service" Jul 2 00:43:40.742891 ignition[1253]: INFO : files: op(18): [started] setting preset to enabled for "prepare-helm.service" Jul 2 00:43:40.742891 ignition[1253]: INFO : files: op(18): [finished] setting preset to enabled for "prepare-helm.service" Jul 2 00:43:40.768372 ignition[1253]: INFO : files: createResultFile: createFiles: op(19): [started] writing file "/sysroot/etc/.ignition-result.json" Jul 2 00:43:40.768372 ignition[1253]: INFO : files: createResultFile: createFiles: op(19): [finished] writing file "/sysroot/etc/.ignition-result.json" Jul 2 00:43:40.768372 ignition[1253]: INFO : files: files passed Jul 2 00:43:40.768372 ignition[1253]: INFO : Ignition finished successfully Jul 2 00:43:40.779945 systemd[1]: Finished ignition-files.service. Jul 2 00:43:40.795074 kernel: audit: type=1130 audit(1719881020.778:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:40.778000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:40.797704 systemd[1]: Starting initrd-setup-root-after-ignition.service... Jul 2 00:43:40.799556 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Jul 2 00:43:40.805093 systemd[1]: Starting ignition-quench.service... Jul 2 00:43:40.813759 systemd[1]: ignition-quench.service: Deactivated successfully. Jul 2 00:43:40.823355 kernel: audit: type=1130 audit(1719881020.814:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:40.814000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:40.814000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:40.813953 systemd[1]: Finished ignition-quench.service. Jul 2 00:43:40.842542 initrd-setup-root-after-ignition[1278]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Jul 2 00:43:40.846632 systemd[1]: Finished initrd-setup-root-after-ignition.service. Jul 2 00:43:40.847000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:40.850185 systemd[1]: Reached target ignition-complete.target. Jul 2 00:43:40.854981 systemd[1]: Starting initrd-parse-etc.service... Jul 2 00:43:40.883012 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Jul 2 00:43:40.884827 systemd[1]: Finished initrd-parse-etc.service. Jul 2 00:43:40.885000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:40.886000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:40.888031 systemd[1]: Reached target initrd-fs.target. Jul 2 00:43:40.904244 systemd[1]: Reached target initrd.target. Jul 2 00:43:40.906834 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Jul 2 00:43:40.910429 systemd[1]: Starting dracut-pre-pivot.service... Jul 2 00:43:40.933221 systemd[1]: Finished dracut-pre-pivot.service. Jul 2 00:43:40.934000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:40.937512 systemd[1]: Starting initrd-cleanup.service... Jul 2 00:43:40.957020 systemd[1]: Stopped target nss-lookup.target. Jul 2 00:43:40.960245 systemd[1]: Stopped target remote-cryptsetup.target. Jul 2 00:43:40.963744 systemd[1]: Stopped target timers.target. Jul 2 00:43:40.966686 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Jul 2 00:43:40.968673 systemd[1]: Stopped dracut-pre-pivot.service. Jul 2 00:43:40.970000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:40.972016 systemd[1]: Stopped target initrd.target. Jul 2 00:43:40.974927 systemd[1]: Stopped target basic.target. Jul 2 00:43:40.977771 systemd[1]: Stopped target ignition-complete.target. Jul 2 00:43:40.981024 systemd[1]: Stopped target ignition-diskful.target. Jul 2 00:43:40.984271 systemd[1]: Stopped target initrd-root-device.target. Jul 2 00:43:40.987603 systemd[1]: Stopped target remote-fs.target. Jul 2 00:43:40.990584 systemd[1]: Stopped target remote-fs-pre.target. Jul 2 00:43:40.993751 systemd[1]: Stopped target sysinit.target. Jul 2 00:43:40.996672 systemd[1]: Stopped target local-fs.target. Jul 2 00:43:40.999645 systemd[1]: Stopped target local-fs-pre.target. Jul 2 00:43:41.002836 systemd[1]: Stopped target swap.target. Jul 2 00:43:41.005547 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Jul 2 00:43:41.007475 systemd[1]: Stopped dracut-pre-mount.service. Jul 2 00:43:41.009000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:41.010742 systemd[1]: Stopped target cryptsetup.target. Jul 2 00:43:41.013727 systemd[1]: dracut-initqueue.service: Deactivated successfully. Jul 2 00:43:41.015661 systemd[1]: Stopped dracut-initqueue.service. Jul 2 00:43:41.017000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:41.018952 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Jul 2 00:43:41.021229 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Jul 2 00:43:41.023000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:41.024998 systemd[1]: ignition-files.service: Deactivated successfully. Jul 2 00:43:41.026932 systemd[1]: Stopped ignition-files.service. Jul 2 00:43:41.028000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:41.031459 systemd[1]: Stopping ignition-mount.service... Jul 2 00:43:41.034646 systemd[1]: Stopping iscsiuio.service... Jul 2 00:43:41.037354 systemd[1]: Stopping sysroot-boot.service... Jul 2 00:43:41.047475 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Jul 2 00:43:41.047788 systemd[1]: Stopped systemd-udev-trigger.service. Jul 2 00:43:41.056000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:41.062000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:41.061340 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Jul 2 00:43:41.061606 systemd[1]: Stopped dracut-pre-trigger.service. Jul 2 00:43:41.071419 ignition[1291]: INFO : Ignition 2.14.0 Jul 2 00:43:41.071419 ignition[1291]: INFO : Stage: umount Jul 2 00:43:41.076678 ignition[1291]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 2 00:43:41.076678 ignition[1291]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Jul 2 00:43:41.080934 systemd[1]: iscsiuio.service: Deactivated successfully. Jul 2 00:43:41.084245 systemd[1]: Stopped iscsiuio.service. Jul 2 00:43:41.087000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:41.094289 systemd[1]: initrd-cleanup.service: Deactivated successfully. Jul 2 00:43:41.094862 systemd[1]: Finished initrd-cleanup.service. Jul 2 00:43:41.098000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:41.098000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:41.102444 ignition[1291]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Jul 2 00:43:41.104755 ignition[1291]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Jul 2 00:43:41.109143 ignition[1291]: INFO : PUT result: OK Jul 2 00:43:41.108887 systemd[1]: sysroot-boot.mount: Deactivated successfully. Jul 2 00:43:41.114406 ignition[1291]: INFO : umount: umount passed Jul 2 00:43:41.115921 ignition[1291]: INFO : Ignition finished successfully Jul 2 00:43:41.118961 systemd[1]: ignition-mount.service: Deactivated successfully. Jul 2 00:43:41.119000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:41.119188 systemd[1]: Stopped ignition-mount.service. Jul 2 00:43:41.121017 systemd[1]: ignition-disks.service: Deactivated successfully. Jul 2 00:43:41.124000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:41.121104 systemd[1]: Stopped ignition-disks.service. Jul 2 00:43:41.127000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:41.128000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:41.128000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:41.126171 systemd[1]: ignition-kargs.service: Deactivated successfully. Jul 2 00:43:41.126263 systemd[1]: Stopped ignition-kargs.service. Jul 2 00:43:41.128954 systemd[1]: ignition-fetch.service: Deactivated successfully. Jul 2 00:43:41.145000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:41.129036 systemd[1]: Stopped ignition-fetch.service. Jul 2 00:43:41.131460 systemd[1]: Stopped target network.target. Jul 2 00:43:41.132859 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Jul 2 00:43:41.132939 systemd[1]: Stopped ignition-fetch-offline.service. Jul 2 00:43:41.134592 systemd[1]: Stopped target paths.target. Jul 2 00:43:41.135933 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Jul 2 00:43:41.136650 systemd[1]: Stopped systemd-ask-password-console.path. Jul 2 00:43:41.139335 systemd[1]: Stopped target slices.target. Jul 2 00:43:41.141955 systemd[1]: Stopped target sockets.target. Jul 2 00:43:41.143442 systemd[1]: iscsid.socket: Deactivated successfully. Jul 2 00:43:41.143500 systemd[1]: Closed iscsid.socket. Jul 2 00:43:41.144799 systemd[1]: iscsiuio.socket: Deactivated successfully. Jul 2 00:43:41.144872 systemd[1]: Closed iscsiuio.socket. Jul 2 00:43:41.146188 systemd[1]: ignition-setup.service: Deactivated successfully. Jul 2 00:43:41.146270 systemd[1]: Stopped ignition-setup.service. Jul 2 00:43:41.148028 systemd[1]: Stopping systemd-networkd.service... Jul 2 00:43:41.150147 systemd[1]: Stopping systemd-resolved.service... Jul 2 00:43:41.176173 systemd-networkd[1098]: eth0: DHCPv6 lease lost Jul 2 00:43:41.180973 systemd[1]: systemd-networkd.service: Deactivated successfully. Jul 2 00:43:41.183000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:41.181473 systemd[1]: Stopped systemd-networkd.service. Jul 2 00:43:41.186000 audit: BPF prog-id=9 op=UNLOAD Jul 2 00:43:41.188000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:41.186372 systemd[1]: systemd-resolved.service: Deactivated successfully. Jul 2 00:43:41.187578 systemd[1]: Stopped systemd-resolved.service. Jul 2 00:43:41.193000 audit: BPF prog-id=6 op=UNLOAD Jul 2 00:43:41.189775 systemd[1]: systemd-networkd.socket: Deactivated successfully. Jul 2 00:43:41.189847 systemd[1]: Closed systemd-networkd.socket. Jul 2 00:43:41.194253 systemd[1]: Stopping network-cleanup.service... Jul 2 00:43:41.201298 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Jul 2 00:43:41.203255 systemd[1]: Stopped parse-ip-for-networkd.service. Jul 2 00:43:41.205000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:41.206672 systemd[1]: systemd-sysctl.service: Deactivated successfully. Jul 2 00:43:41.207530 systemd[1]: Stopped systemd-sysctl.service. Jul 2 00:43:41.210000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:41.211749 systemd[1]: systemd-modules-load.service: Deactivated successfully. Jul 2 00:43:41.212000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:41.211850 systemd[1]: Stopped systemd-modules-load.service. Jul 2 00:43:41.213844 systemd[1]: Stopping systemd-udevd.service... Jul 2 00:43:41.217479 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Jul 2 00:43:41.233104 systemd[1]: network-cleanup.service: Deactivated successfully. Jul 2 00:43:41.235194 systemd[1]: Stopped network-cleanup.service. Jul 2 00:43:41.237000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:41.238971 systemd[1]: systemd-udevd.service: Deactivated successfully. Jul 2 00:43:41.241032 systemd[1]: Stopped systemd-udevd.service. Jul 2 00:43:41.242000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:41.244345 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Jul 2 00:43:41.246289 systemd[1]: Closed systemd-udevd-control.socket. Jul 2 00:43:41.249390 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Jul 2 00:43:41.249477 systemd[1]: Closed systemd-udevd-kernel.socket. Jul 2 00:43:41.252639 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Jul 2 00:43:41.255754 systemd[1]: Stopped dracut-pre-udev.service. Jul 2 00:43:41.254000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:41.258561 systemd[1]: dracut-cmdline.service: Deactivated successfully. Jul 2 00:43:41.258646 systemd[1]: Stopped dracut-cmdline.service. Jul 2 00:43:41.263000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:41.264835 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Jul 2 00:43:41.264929 systemd[1]: Stopped dracut-cmdline-ask.service. Jul 2 00:43:41.266000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:41.270874 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Jul 2 00:43:41.291000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:41.289228 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Jul 2 00:43:41.295000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:41.296000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:41.301000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:41.301000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:41.289361 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Jul 2 00:43:41.292826 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Jul 2 00:43:41.292933 systemd[1]: Stopped kmod-static-nodes.service. Jul 2 00:43:41.296299 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Jul 2 00:43:41.296379 systemd[1]: Stopped systemd-vconsole-setup.service. Jul 2 00:43:41.299736 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Jul 2 00:43:41.300563 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Jul 2 00:43:41.300761 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Jul 2 00:43:41.334527 systemd[1]: sysroot-boot.service: Deactivated successfully. Jul 2 00:43:41.335260 systemd[1]: Stopped sysroot-boot.service. Jul 2 00:43:41.336000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:41.340000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:41.338865 systemd[1]: Reached target initrd-switch-root.target. Jul 2 00:43:41.340580 systemd[1]: initrd-setup-root.service: Deactivated successfully. Jul 2 00:43:41.340674 systemd[1]: Stopped initrd-setup-root.service. Jul 2 00:43:41.343449 systemd[1]: Starting initrd-switch-root.service... Jul 2 00:43:41.360745 systemd[1]: Switching root. Jul 2 00:43:41.389981 iscsid[1103]: iscsid shutting down. Jul 2 00:43:41.391641 systemd-journald[309]: Received SIGTERM from PID 1 (systemd). Jul 2 00:43:41.391728 systemd-journald[309]: Journal stopped Jul 2 00:43:47.987631 kernel: SELinux: Class mctp_socket not defined in policy. Jul 2 00:43:47.987754 kernel: SELinux: Class anon_inode not defined in policy. Jul 2 00:43:47.987788 kernel: SELinux: the above unknown classes and permissions will be allowed Jul 2 00:43:47.987820 kernel: SELinux: policy capability network_peer_controls=1 Jul 2 00:43:47.987851 kernel: SELinux: policy capability open_perms=1 Jul 2 00:43:47.987881 kernel: SELinux: policy capability extended_socket_class=1 Jul 2 00:43:47.987913 kernel: SELinux: policy capability always_check_network=0 Jul 2 00:43:47.987949 kernel: SELinux: policy capability cgroup_seclabel=1 Jul 2 00:43:47.987980 kernel: SELinux: policy capability nnp_nosuid_transition=1 Jul 2 00:43:47.988019 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Jul 2 00:43:47.988049 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Jul 2 00:43:47.988081 systemd[1]: Successfully loaded SELinux policy in 134.037ms. Jul 2 00:43:47.988805 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 19.706ms. Jul 2 00:43:47.988854 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 2 00:43:47.988891 systemd[1]: Detected virtualization amazon. Jul 2 00:43:47.988924 systemd[1]: Detected architecture arm64. Jul 2 00:43:47.988960 systemd[1]: Detected first boot. Jul 2 00:43:47.988991 systemd[1]: Initializing machine ID from VM UUID. Jul 2 00:43:47.989023 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Jul 2 00:43:47.989065 systemd[1]: Populated /etc with preset unit settings. Jul 2 00:43:47.989099 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 2 00:43:47.989156 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 2 00:43:47.989214 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 2 00:43:47.989258 kernel: kauditd_printk_skb: 56 callbacks suppressed Jul 2 00:43:47.989287 kernel: audit: type=1334 audit(1719881027.536:88): prog-id=12 op=LOAD Jul 2 00:43:47.989320 kernel: audit: type=1334 audit(1719881027.536:89): prog-id=3 op=UNLOAD Jul 2 00:43:47.989348 kernel: audit: type=1334 audit(1719881027.538:90): prog-id=13 op=LOAD Jul 2 00:43:47.989388 kernel: audit: type=1334 audit(1719881027.540:91): prog-id=14 op=LOAD Jul 2 00:43:47.989616 kernel: audit: type=1334 audit(1719881027.540:92): prog-id=4 op=UNLOAD Jul 2 00:43:47.989656 kernel: audit: type=1334 audit(1719881027.540:93): prog-id=5 op=UNLOAD Jul 2 00:43:47.989691 kernel: audit: type=1334 audit(1719881027.544:94): prog-id=15 op=LOAD Jul 2 00:43:47.989723 systemd[1]: iscsid.service: Deactivated successfully. Jul 2 00:43:47.989753 kernel: audit: type=1334 audit(1719881027.544:95): prog-id=12 op=UNLOAD Jul 2 00:43:47.989785 systemd[1]: Stopped iscsid.service. Jul 2 00:43:47.989817 kernel: audit: type=1334 audit(1719881027.546:96): prog-id=16 op=LOAD Jul 2 00:43:47.989845 kernel: audit: type=1334 audit(1719881027.548:97): prog-id=17 op=LOAD Jul 2 00:43:47.989875 systemd[1]: initrd-switch-root.service: Deactivated successfully. Jul 2 00:43:47.989907 systemd[1]: Stopped initrd-switch-root.service. Jul 2 00:43:47.989938 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Jul 2 00:43:47.989975 systemd[1]: Created slice system-addon\x2dconfig.slice. Jul 2 00:43:47.990007 systemd[1]: Created slice system-addon\x2drun.slice. Jul 2 00:43:47.990039 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Jul 2 00:43:47.990071 systemd[1]: Created slice system-getty.slice. Jul 2 00:43:47.990101 systemd[1]: Created slice system-modprobe.slice. Jul 2 00:43:47.990194 systemd[1]: Created slice system-serial\x2dgetty.slice. Jul 2 00:43:47.990230 systemd[1]: Created slice system-system\x2dcloudinit.slice. Jul 2 00:43:47.990265 systemd[1]: Created slice system-systemd\x2dfsck.slice. Jul 2 00:43:47.990300 systemd[1]: Created slice user.slice. Jul 2 00:43:47.990333 systemd[1]: Started systemd-ask-password-console.path. Jul 2 00:43:47.990363 systemd[1]: Started systemd-ask-password-wall.path. Jul 2 00:43:48.000094 systemd[1]: Set up automount boot.automount. Jul 2 00:43:48.000169 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Jul 2 00:43:48.000226 systemd[1]: Stopped target initrd-switch-root.target. Jul 2 00:43:48.000265 systemd[1]: Stopped target initrd-fs.target. Jul 2 00:43:48.000297 systemd[1]: Stopped target initrd-root-fs.target. Jul 2 00:43:48.000328 systemd[1]: Reached target integritysetup.target. Jul 2 00:43:48.000366 systemd[1]: Reached target remote-cryptsetup.target. Jul 2 00:43:48.000398 systemd[1]: Reached target remote-fs.target. Jul 2 00:43:48.000428 systemd[1]: Reached target slices.target. Jul 2 00:43:48.000458 systemd[1]: Reached target swap.target. Jul 2 00:43:48.000490 systemd[1]: Reached target torcx.target. Jul 2 00:43:48.000521 systemd[1]: Reached target veritysetup.target. Jul 2 00:43:48.000551 systemd[1]: Listening on systemd-coredump.socket. Jul 2 00:43:48.000581 systemd[1]: Listening on systemd-initctl.socket. Jul 2 00:43:48.000610 systemd[1]: Listening on systemd-networkd.socket. Jul 2 00:43:48.000643 systemd[1]: Listening on systemd-udevd-control.socket. Jul 2 00:43:48.000673 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 2 00:43:48.000702 systemd[1]: Listening on systemd-userdbd.socket. Jul 2 00:43:48.003179 systemd[1]: Mounting dev-hugepages.mount... Jul 2 00:43:48.003231 systemd[1]: Mounting dev-mqueue.mount... Jul 2 00:43:48.003262 systemd[1]: Mounting media.mount... Jul 2 00:43:48.006745 systemd[1]: Mounting sys-kernel-debug.mount... Jul 2 00:43:48.006797 systemd[1]: Mounting sys-kernel-tracing.mount... Jul 2 00:43:48.006964 systemd[1]: Mounting tmp.mount... Jul 2 00:43:48.007000 systemd[1]: Starting flatcar-tmpfiles.service... Jul 2 00:43:48.007039 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 2 00:43:48.007069 systemd[1]: Starting kmod-static-nodes.service... Jul 2 00:43:48.007100 systemd[1]: Starting modprobe@configfs.service... Jul 2 00:43:48.007601 systemd[1]: Starting modprobe@dm_mod.service... Jul 2 00:43:48.007636 systemd[1]: Starting modprobe@drm.service... Jul 2 00:43:48.007669 systemd[1]: Starting modprobe@efi_pstore.service... Jul 2 00:43:48.007699 systemd[1]: Starting modprobe@fuse.service... Jul 2 00:43:48.007730 systemd[1]: Starting modprobe@loop.service... Jul 2 00:43:48.007763 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Jul 2 00:43:48.007798 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Jul 2 00:43:48.007829 systemd[1]: Stopped systemd-fsck-root.service. Jul 2 00:43:48.007860 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Jul 2 00:43:48.007890 systemd[1]: Stopped systemd-fsck-usr.service. Jul 2 00:43:48.007920 systemd[1]: Stopped systemd-journald.service. Jul 2 00:43:48.007949 systemd[1]: Starting systemd-journald.service... Jul 2 00:43:48.007981 systemd[1]: Starting systemd-modules-load.service... Jul 2 00:43:48.008010 systemd[1]: Starting systemd-network-generator.service... Jul 2 00:43:48.008042 systemd[1]: Starting systemd-remount-fs.service... Jul 2 00:43:48.008076 systemd[1]: Starting systemd-udev-trigger.service... Jul 2 00:43:48.008108 systemd[1]: verity-setup.service: Deactivated successfully. Jul 2 00:43:48.013525 systemd[1]: Stopped verity-setup.service. Jul 2 00:43:48.013578 systemd[1]: Mounted dev-hugepages.mount. Jul 2 00:43:48.013609 systemd[1]: Mounted dev-mqueue.mount. Jul 2 00:43:48.013640 systemd[1]: Mounted media.mount. Jul 2 00:43:48.013669 systemd[1]: Mounted sys-kernel-debug.mount. Jul 2 00:43:48.013699 systemd[1]: Mounted sys-kernel-tracing.mount. Jul 2 00:43:48.013731 systemd[1]: Mounted tmp.mount. Jul 2 00:43:48.013770 systemd[1]: Finished kmod-static-nodes.service. Jul 2 00:43:48.013800 systemd[1]: modprobe@configfs.service: Deactivated successfully. Jul 2 00:43:48.013828 kernel: fuse: init (API version 7.34) Jul 2 00:43:48.013861 systemd[1]: Finished modprobe@configfs.service. Jul 2 00:43:48.013891 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 2 00:43:48.013921 systemd[1]: Finished modprobe@dm_mod.service. Jul 2 00:43:48.013951 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 2 00:43:48.013983 systemd[1]: Finished modprobe@drm.service. Jul 2 00:43:48.014016 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 2 00:43:48.014045 systemd[1]: Finished modprobe@efi_pstore.service. Jul 2 00:43:48.014075 systemd[1]: modprobe@fuse.service: Deactivated successfully. Jul 2 00:43:48.014106 systemd[1]: Finished modprobe@fuse.service. Jul 2 00:43:48.014169 kernel: loop: module loaded Jul 2 00:43:48.014201 systemd[1]: Finished systemd-modules-load.service. Jul 2 00:43:48.014240 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 2 00:43:48.014270 systemd[1]: Finished modprobe@loop.service. Jul 2 00:43:48.014301 systemd[1]: Finished systemd-network-generator.service. Jul 2 00:43:48.014331 systemd[1]: Finished systemd-remount-fs.service. Jul 2 00:43:48.014361 systemd[1]: Reached target network-pre.target. Jul 2 00:43:48.014395 systemd[1]: Mounting sys-fs-fuse-connections.mount... Jul 2 00:43:48.014426 systemd[1]: Mounting sys-kernel-config.mount... Jul 2 00:43:48.014459 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Jul 2 00:43:48.014491 systemd[1]: Starting systemd-hwdb-update.service... Jul 2 00:43:48.014522 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 2 00:43:48.014556 systemd[1]: Starting systemd-random-seed.service... Jul 2 00:43:48.014587 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 2 00:43:48.014620 systemd-journald[1405]: Journal started Jul 2 00:43:48.014753 systemd-journald[1405]: Runtime Journal (/run/log/journal/ec279d6ab822baaa7c4b202b9531b196) is 8.0M, max 75.4M, 67.4M free. Jul 2 00:43:42.490000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Jul 2 00:43:42.794000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 2 00:43:42.794000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 2 00:43:42.794000 audit: BPF prog-id=10 op=LOAD Jul 2 00:43:48.020217 systemd[1]: Starting systemd-sysctl.service... Jul 2 00:43:42.794000 audit: BPF prog-id=10 op=UNLOAD Jul 2 00:43:42.794000 audit: BPF prog-id=11 op=LOAD Jul 2 00:43:42.794000 audit: BPF prog-id=11 op=UNLOAD Jul 2 00:43:43.134000 audit[1326]: AVC avc: denied { associate } for pid=1326 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Jul 2 00:43:43.134000 audit[1326]: SYSCALL arch=c00000b7 syscall=5 success=yes exit=0 a0=40001458c4 a1=40000c6de0 a2=40000cd0c0 a3=32 items=0 ppid=1309 pid=1326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:43:43.134000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 2 00:43:43.137000 audit[1326]: AVC avc: denied { associate } for pid=1326 comm="torcx-generator" name="lib" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Jul 2 00:43:43.137000 audit[1326]: SYSCALL arch=c00000b7 syscall=34 success=yes exit=0 a0=ffffffffffffff9c a1=40001459a9 a2=1ed a3=0 items=2 ppid=1309 pid=1326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:43:43.137000 audit: CWD cwd="/" Jul 2 00:43:43.137000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 00:43:43.137000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 00:43:43.137000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 2 00:43:47.536000 audit: BPF prog-id=12 op=LOAD Jul 2 00:43:47.536000 audit: BPF prog-id=3 op=UNLOAD Jul 2 00:43:47.538000 audit: BPF prog-id=13 op=LOAD Jul 2 00:43:47.540000 audit: BPF prog-id=14 op=LOAD Jul 2 00:43:47.540000 audit: BPF prog-id=4 op=UNLOAD Jul 2 00:43:47.540000 audit: BPF prog-id=5 op=UNLOAD Jul 2 00:43:47.544000 audit: BPF prog-id=15 op=LOAD Jul 2 00:43:47.544000 audit: BPF prog-id=12 op=UNLOAD Jul 2 00:43:47.546000 audit: BPF prog-id=16 op=LOAD Jul 2 00:43:47.548000 audit: BPF prog-id=17 op=LOAD Jul 2 00:43:47.548000 audit: BPF prog-id=13 op=UNLOAD Jul 2 00:43:47.548000 audit: BPF prog-id=14 op=UNLOAD Jul 2 00:43:47.552000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:47.564000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:47.569000 audit: BPF prog-id=15 op=UNLOAD Jul 2 00:43:47.571000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:47.571000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:47.794000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:47.801000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:47.805000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:47.805000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:47.807000 audit: BPF prog-id=18 op=LOAD Jul 2 00:43:47.807000 audit: BPF prog-id=19 op=LOAD Jul 2 00:43:47.807000 audit: BPF prog-id=20 op=LOAD Jul 2 00:43:47.807000 audit: BPF prog-id=16 op=UNLOAD Jul 2 00:43:47.807000 audit: BPF prog-id=17 op=UNLOAD Jul 2 00:43:47.858000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:47.891000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:47.900000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:47.900000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:47.906000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:48.030295 systemd[1]: Started systemd-journald.service. Jul 2 00:43:47.906000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:47.915000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:47.915000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:47.923000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:47.923000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:47.930000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:47.930000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:47.935000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:47.942000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:47.942000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:47.950000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:47.954000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:47.957000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Jul 2 00:43:47.957000 audit[1405]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=5 a1=ffffd278c7a0 a2=4000 a3=1 items=0 ppid=1 pid=1405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:43:47.957000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Jul 2 00:43:48.023000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:47.534242 systemd[1]: Queued start job for default target multi-user.target. Jul 2 00:43:43.121219 /usr/lib/systemd/system-generators/torcx-generator[1326]: time="2024-07-02T00:43:43Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.5 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.5 /var/lib/torcx/store]" Jul 2 00:43:47.552805 systemd[1]: systemd-journald.service: Deactivated successfully. Jul 2 00:43:43.121998 /usr/lib/systemd/system-generators/torcx-generator[1326]: time="2024-07-02T00:43:43Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 2 00:43:48.024762 systemd[1]: Mounted sys-fs-fuse-connections.mount. Jul 2 00:43:43.122049 /usr/lib/systemd/system-generators/torcx-generator[1326]: time="2024-07-02T00:43:43Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 2 00:43:48.026578 systemd[1]: Mounted sys-kernel-config.mount. Jul 2 00:43:43.122138 /usr/lib/systemd/system-generators/torcx-generator[1326]: time="2024-07-02T00:43:43Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Jul 2 00:43:48.030368 systemd[1]: Starting systemd-journal-flush.service... Jul 2 00:43:43.122170 /usr/lib/systemd/system-generators/torcx-generator[1326]: time="2024-07-02T00:43:43Z" level=debug msg="skipped missing lower profile" missing profile=oem Jul 2 00:43:43.122231 /usr/lib/systemd/system-generators/torcx-generator[1326]: time="2024-07-02T00:43:43Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Jul 2 00:43:43.122262 /usr/lib/systemd/system-generators/torcx-generator[1326]: time="2024-07-02T00:43:43Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Jul 2 00:43:43.122667 /usr/lib/systemd/system-generators/torcx-generator[1326]: time="2024-07-02T00:43:43Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Jul 2 00:43:43.122762 /usr/lib/systemd/system-generators/torcx-generator[1326]: time="2024-07-02T00:43:43Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 2 00:43:43.122798 /usr/lib/systemd/system-generators/torcx-generator[1326]: time="2024-07-02T00:43:43Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 2 00:43:43.124407 /usr/lib/systemd/system-generators/torcx-generator[1326]: time="2024-07-02T00:43:43Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Jul 2 00:43:43.124488 /usr/lib/systemd/system-generators/torcx-generator[1326]: time="2024-07-02T00:43:43Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Jul 2 00:43:48.047000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:48.046844 systemd[1]: Finished systemd-random-seed.service. Jul 2 00:43:43.124534 /usr/lib/systemd/system-generators/torcx-generator[1326]: time="2024-07-02T00:43:43Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.5: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.5 Jul 2 00:43:48.048899 systemd[1]: Reached target first-boot-complete.target. Jul 2 00:43:48.054553 systemd-journald[1405]: Time spent on flushing to /var/log/journal/ec279d6ab822baaa7c4b202b9531b196 is 67.873ms for 1129 entries. Jul 2 00:43:48.054553 systemd-journald[1405]: System Journal (/var/log/journal/ec279d6ab822baaa7c4b202b9531b196) is 8.0M, max 195.6M, 187.6M free. Jul 2 00:43:48.209950 systemd-journald[1405]: Received client request to flush runtime journal. Jul 2 00:43:48.091000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:48.107000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:48.175000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:43.124574 /usr/lib/systemd/system-generators/torcx-generator[1326]: time="2024-07-02T00:43:43Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Jul 2 00:43:48.090828 systemd[1]: Finished systemd-sysctl.service. Jul 2 00:43:43.124621 /usr/lib/systemd/system-generators/torcx-generator[1326]: time="2024-07-02T00:43:43Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.5: no such file or directory" path=/var/lib/torcx/store/3510.3.5 Jul 2 00:43:48.106930 systemd[1]: Finished flatcar-tmpfiles.service. Jul 2 00:43:43.124659 /usr/lib/systemd/system-generators/torcx-generator[1326]: time="2024-07-02T00:43:43Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Jul 2 00:43:48.110735 systemd[1]: Starting systemd-sysusers.service... Jul 2 00:43:46.612362 /usr/lib/systemd/system-generators/torcx-generator[1326]: time="2024-07-02T00:43:46Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 2 00:43:48.174824 systemd[1]: Finished systemd-udev-trigger.service. Jul 2 00:43:48.212000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:46.612874 /usr/lib/systemd/system-generators/torcx-generator[1326]: time="2024-07-02T00:43:46Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 2 00:43:48.178773 systemd[1]: Starting systemd-udev-settle.service... Jul 2 00:43:46.613111 /usr/lib/systemd/system-generators/torcx-generator[1326]: time="2024-07-02T00:43:46Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 2 00:43:48.211741 systemd[1]: Finished systemd-journal-flush.service. Jul 2 00:43:46.613584 /usr/lib/systemd/system-generators/torcx-generator[1326]: time="2024-07-02T00:43:46Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 2 00:43:46.613703 /usr/lib/systemd/system-generators/torcx-generator[1326]: time="2024-07-02T00:43:46Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Jul 2 00:43:46.613838 /usr/lib/systemd/system-generators/torcx-generator[1326]: time="2024-07-02T00:43:46Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Jul 2 00:43:48.216343 udevadm[1445]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Jul 2 00:43:48.276290 systemd[1]: Finished systemd-sysusers.service. Jul 2 00:43:48.276000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:48.280143 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 2 00:43:48.398326 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 2 00:43:48.398000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:48.977000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:48.978000 audit: BPF prog-id=21 op=LOAD Jul 2 00:43:48.978000 audit: BPF prog-id=22 op=LOAD Jul 2 00:43:48.978000 audit: BPF prog-id=7 op=UNLOAD Jul 2 00:43:48.978000 audit: BPF prog-id=8 op=UNLOAD Jul 2 00:43:48.976619 systemd[1]: Finished systemd-hwdb-update.service. Jul 2 00:43:48.980551 systemd[1]: Starting systemd-udevd.service... Jul 2 00:43:49.016918 systemd-udevd[1448]: Using default interface naming scheme 'v252'. Jul 2 00:43:49.060259 systemd[1]: Started systemd-udevd.service. Jul 2 00:43:49.060000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:49.062000 audit: BPF prog-id=23 op=LOAD Jul 2 00:43:49.064769 systemd[1]: Starting systemd-networkd.service... Jul 2 00:43:49.080000 audit: BPF prog-id=24 op=LOAD Jul 2 00:43:49.080000 audit: BPF prog-id=25 op=LOAD Jul 2 00:43:49.080000 audit: BPF prog-id=26 op=LOAD Jul 2 00:43:49.082955 systemd[1]: Starting systemd-userdbd.service... Jul 2 00:43:49.138086 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Jul 2 00:43:49.175021 systemd[1]: Started systemd-userdbd.service. Jul 2 00:43:49.175000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:49.187448 (udev-worker)[1454]: Network interface NamePolicy= disabled on kernel command line. Jul 2 00:43:49.346956 systemd-networkd[1450]: lo: Link UP Jul 2 00:43:49.346976 systemd-networkd[1450]: lo: Gained carrier Jul 2 00:43:49.347903 systemd-networkd[1450]: Enumeration completed Jul 2 00:43:49.348064 systemd[1]: Started systemd-networkd.service. Jul 2 00:43:49.348000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:49.351923 systemd[1]: Starting systemd-networkd-wait-online.service... Jul 2 00:43:49.353845 systemd-networkd[1450]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 2 00:43:49.363176 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 2 00:43:49.363483 systemd-networkd[1450]: eth0: Link UP Jul 2 00:43:49.363781 systemd-networkd[1450]: eth0: Gained carrier Jul 2 00:43:49.375362 systemd-networkd[1450]: eth0: DHCPv4 address 172.31.16.66/20, gateway 172.31.16.1 acquired from 172.31.16.1 Jul 2 00:43:49.389173 kernel: BTRFS info: devid 1 device path /dev/disk/by-label/OEM changed to /dev/nvme0n1p6 scanned by (udev-worker) (1455) Jul 2 00:43:49.502329 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 2 00:43:49.528866 systemd[1]: Finished systemd-udev-settle.service. Jul 2 00:43:49.529000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:49.532960 systemd[1]: Starting lvm2-activation-early.service... Jul 2 00:43:49.610097 lvm[1566]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 2 00:43:49.647666 systemd[1]: Finished lvm2-activation-early.service. Jul 2 00:43:49.649558 systemd[1]: Reached target cryptsetup.target. Jul 2 00:43:49.648000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:49.653249 systemd[1]: Starting lvm2-activation.service... Jul 2 00:43:49.661630 lvm[1567]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 2 00:43:49.698747 systemd[1]: Finished lvm2-activation.service. Jul 2 00:43:49.699000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:49.700521 systemd[1]: Reached target local-fs-pre.target. Jul 2 00:43:49.702263 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Jul 2 00:43:49.702309 systemd[1]: Reached target local-fs.target. Jul 2 00:43:49.703938 systemd[1]: Reached target machines.target. Jul 2 00:43:49.718864 systemd[1]: Starting ldconfig.service... Jul 2 00:43:49.721519 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 2 00:43:49.721824 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 2 00:43:49.724220 systemd[1]: Starting systemd-boot-update.service... Jul 2 00:43:49.728311 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Jul 2 00:43:49.732947 systemd[1]: Starting systemd-machine-id-commit.service... Jul 2 00:43:49.738242 systemd[1]: Starting systemd-sysext.service... Jul 2 00:43:49.753074 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1569 (bootctl) Jul 2 00:43:49.755583 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Jul 2 00:43:49.776973 systemd[1]: Unmounting usr-share-oem.mount... Jul 2 00:43:49.782000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:49.782157 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Jul 2 00:43:49.791060 systemd[1]: usr-share-oem.mount: Deactivated successfully. Jul 2 00:43:49.791463 systemd[1]: Unmounted usr-share-oem.mount. Jul 2 00:43:49.823169 kernel: loop0: detected capacity change from 0 to 193208 Jul 2 00:43:49.868896 systemd-fsck[1577]: fsck.fat 4.2 (2021-01-31) Jul 2 00:43:49.868896 systemd-fsck[1577]: /dev/nvme0n1p1: 236 files, 117047/258078 clusters Jul 2 00:43:49.872581 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Jul 2 00:43:49.873000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:49.877003 systemd[1]: Mounting boot.mount... Jul 2 00:43:49.898005 systemd[1]: Mounted boot.mount. Jul 2 00:43:49.922813 systemd[1]: Finished systemd-boot-update.service. Jul 2 00:43:49.923000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:50.047158 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Jul 2 00:43:50.092175 kernel: loop1: detected capacity change from 0 to 193208 Jul 2 00:43:50.106755 (sd-sysext)[1594]: Using extensions 'kubernetes'. Jul 2 00:43:50.107571 (sd-sysext)[1594]: Merged extensions into '/usr'. Jul 2 00:43:50.150310 systemd[1]: Mounting usr-share-oem.mount... Jul 2 00:43:50.152721 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 2 00:43:50.156308 systemd[1]: Starting modprobe@dm_mod.service... Jul 2 00:43:50.160961 systemd[1]: Starting modprobe@efi_pstore.service... Jul 2 00:43:50.165836 systemd[1]: Starting modprobe@loop.service... Jul 2 00:43:50.168801 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 2 00:43:50.169082 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 2 00:43:50.178464 systemd[1]: Mounted usr-share-oem.mount. Jul 2 00:43:50.181151 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 2 00:43:50.181621 systemd[1]: Finished modprobe@dm_mod.service. Jul 2 00:43:50.182000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:50.182000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:50.184670 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 2 00:43:50.185094 systemd[1]: Finished modprobe@efi_pstore.service. Jul 2 00:43:50.190988 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 2 00:43:50.191458 systemd[1]: Finished modprobe@loop.service. Jul 2 00:43:50.188000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:50.189000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:50.192000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:50.192000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:50.196376 systemd[1]: Finished systemd-sysext.service. Jul 2 00:43:50.197000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:50.202524 systemd[1]: Starting ensure-sysext.service... Jul 2 00:43:50.204594 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 2 00:43:50.204914 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 2 00:43:50.207328 systemd[1]: Starting systemd-tmpfiles-setup.service... Jul 2 00:43:50.224776 systemd[1]: Reloading. Jul 2 00:43:50.236007 systemd-tmpfiles[1601]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Jul 2 00:43:50.251344 systemd-tmpfiles[1601]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Jul 2 00:43:50.269520 systemd-tmpfiles[1601]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Jul 2 00:43:50.335382 /usr/lib/systemd/system-generators/torcx-generator[1623]: time="2024-07-02T00:43:50Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.5 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.5 /var/lib/torcx/store]" Jul 2 00:43:50.337406 /usr/lib/systemd/system-generators/torcx-generator[1623]: time="2024-07-02T00:43:50Z" level=info msg="torcx already run" Jul 2 00:43:50.606604 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 2 00:43:50.606644 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 2 00:43:50.659364 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 2 00:43:50.794296 systemd-networkd[1450]: eth0: Gained IPv6LL Jul 2 00:43:50.812000 audit: BPF prog-id=27 op=LOAD Jul 2 00:43:50.812000 audit: BPF prog-id=24 op=UNLOAD Jul 2 00:43:50.812000 audit: BPF prog-id=28 op=LOAD Jul 2 00:43:50.812000 audit: BPF prog-id=29 op=LOAD Jul 2 00:43:50.812000 audit: BPF prog-id=25 op=UNLOAD Jul 2 00:43:50.813000 audit: BPF prog-id=26 op=UNLOAD Jul 2 00:43:50.814000 audit: BPF prog-id=30 op=LOAD Jul 2 00:43:50.814000 audit: BPF prog-id=31 op=LOAD Jul 2 00:43:50.814000 audit: BPF prog-id=21 op=UNLOAD Jul 2 00:43:50.814000 audit: BPF prog-id=22 op=UNLOAD Jul 2 00:43:50.818000 audit: BPF prog-id=32 op=LOAD Jul 2 00:43:50.818000 audit: BPF prog-id=18 op=UNLOAD Jul 2 00:43:50.818000 audit: BPF prog-id=33 op=LOAD Jul 2 00:43:50.818000 audit: BPF prog-id=34 op=LOAD Jul 2 00:43:50.818000 audit: BPF prog-id=19 op=UNLOAD Jul 2 00:43:50.819000 audit: BPF prog-id=20 op=UNLOAD Jul 2 00:43:50.821000 audit: BPF prog-id=35 op=LOAD Jul 2 00:43:50.821000 audit: BPF prog-id=23 op=UNLOAD Jul 2 00:43:50.843978 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Jul 2 00:43:50.847454 systemd[1]: Finished systemd-networkd-wait-online.service. Jul 2 00:43:50.848000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:50.849965 systemd[1]: Finished systemd-machine-id-commit.service. Jul 2 00:43:50.850000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:50.853802 systemd[1]: Finished systemd-tmpfiles-setup.service. Jul 2 00:43:50.854000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:50.863834 systemd[1]: Starting audit-rules.service... Jul 2 00:43:50.867644 systemd[1]: Starting clean-ca-certificates.service... Jul 2 00:43:50.871849 systemd[1]: Starting systemd-journal-catalog-update.service... Jul 2 00:43:50.874000 audit: BPF prog-id=36 op=LOAD Jul 2 00:43:50.876960 systemd[1]: Starting systemd-resolved.service... Jul 2 00:43:50.880000 audit: BPF prog-id=37 op=LOAD Jul 2 00:43:50.883744 systemd[1]: Starting systemd-timesyncd.service... Jul 2 00:43:50.888144 systemd[1]: Starting systemd-update-utmp.service... Jul 2 00:43:50.907468 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 2 00:43:50.910097 systemd[1]: Starting modprobe@dm_mod.service... Jul 2 00:43:50.914531 systemd[1]: Starting modprobe@efi_pstore.service... Jul 2 00:43:50.915000 audit[1684]: SYSTEM_BOOT pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Jul 2 00:43:50.920731 systemd[1]: Starting modprobe@loop.service... Jul 2 00:43:50.922293 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 2 00:43:50.922622 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 2 00:43:50.924528 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 2 00:43:50.925000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:50.925000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:50.924859 systemd[1]: Finished modprobe@dm_mod.service. Jul 2 00:43:50.930903 systemd[1]: Finished clean-ca-certificates.service. Jul 2 00:43:50.932000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:50.934762 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 2 00:43:50.939541 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 2 00:43:50.944036 systemd[1]: Starting modprobe@dm_mod.service... Jul 2 00:43:50.945659 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 2 00:43:50.946060 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 2 00:43:50.946482 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 2 00:43:50.948692 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 2 00:43:50.949036 systemd[1]: Finished modprobe@efi_pstore.service. Jul 2 00:43:50.949000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:50.949000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:50.951679 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 2 00:43:50.954886 systemd[1]: Finished systemd-update-utmp.service. Jul 2 00:43:50.956000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:50.963090 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 2 00:43:50.967606 systemd[1]: Starting modprobe@drm.service... Jul 2 00:43:50.972909 systemd[1]: Starting modprobe@efi_pstore.service... Jul 2 00:43:50.975225 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 2 00:43:50.975536 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 2 00:43:50.975844 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 2 00:43:50.977820 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 2 00:43:50.978167 systemd[1]: Finished modprobe@loop.service. Jul 2 00:43:50.979000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:50.979000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:50.981957 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 2 00:43:50.982325 systemd[1]: Finished modprobe@dm_mod.service. Jul 2 00:43:50.983000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:50.983000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:50.985477 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 2 00:43:50.989739 systemd[1]: Finished ensure-sysext.service. Jul 2 00:43:50.990000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:50.998297 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 2 00:43:50.998640 systemd[1]: Finished modprobe@drm.service. Jul 2 00:43:50.999000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:50.999000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:51.003346 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 2 00:43:51.003648 systemd[1]: Finished modprobe@efi_pstore.service. Jul 2 00:43:51.005000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:51.005000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:51.006609 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 2 00:43:51.055707 systemd[1]: Finished systemd-journal-catalog-update.service. Jul 2 00:43:51.057000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:51.097380 systemd[1]: Started systemd-timesyncd.service. Jul 2 00:43:51.098000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:43:51.099389 systemd[1]: Reached target time-set.target. Jul 2 00:43:51.123000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Jul 2 00:43:51.123000 audit[1706]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffc6f040b0 a2=420 a3=0 items=0 ppid=1679 pid=1706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:43:51.123000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Jul 2 00:43:51.125056 augenrules[1706]: No rules Jul 2 00:43:51.126746 systemd[1]: Finished audit-rules.service. Jul 2 00:43:51.136732 ldconfig[1568]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Jul 2 00:43:51.145731 systemd-resolved[1682]: Positive Trust Anchors: Jul 2 00:43:51.145762 systemd-resolved[1682]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 2 00:43:51.145813 systemd-resolved[1682]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 2 00:43:51.147411 systemd[1]: Finished ldconfig.service. Jul 2 00:43:51.151428 systemd[1]: Starting systemd-update-done.service... Jul 2 00:43:51.165856 systemd[1]: Finished systemd-update-done.service. Jul 2 00:43:51.176678 systemd-timesyncd[1683]: Contacted time server 23.168.24.210:123 (0.flatcar.pool.ntp.org). Jul 2 00:43:51.176882 systemd-timesyncd[1683]: Initial clock synchronization to Tue 2024-07-02 00:43:51.201510 UTC. Jul 2 00:43:51.194199 systemd-resolved[1682]: Defaulting to hostname 'linux'. Jul 2 00:43:51.197097 systemd[1]: Started systemd-resolved.service. Jul 2 00:43:51.198803 systemd[1]: Reached target network.target. Jul 2 00:43:51.200281 systemd[1]: Reached target network-online.target. Jul 2 00:43:51.201825 systemd[1]: Reached target nss-lookup.target. Jul 2 00:43:51.203329 systemd[1]: Reached target sysinit.target. Jul 2 00:43:51.204934 systemd[1]: Started motdgen.path. Jul 2 00:43:51.206325 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Jul 2 00:43:51.208629 systemd[1]: Started logrotate.timer. Jul 2 00:43:51.210254 systemd[1]: Started mdadm.timer. Jul 2 00:43:51.211524 systemd[1]: Started systemd-tmpfiles-clean.timer. Jul 2 00:43:51.213073 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Jul 2 00:43:51.213165 systemd[1]: Reached target paths.target. Jul 2 00:43:51.214520 systemd[1]: Reached target timers.target. Jul 2 00:43:51.228220 systemd[1]: Listening on dbus.socket. Jul 2 00:43:51.231554 systemd[1]: Starting docker.socket... Jul 2 00:43:51.237737 systemd[1]: Listening on sshd.socket. Jul 2 00:43:51.239437 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 2 00:43:51.240318 systemd[1]: Listening on docker.socket. Jul 2 00:43:51.241905 systemd[1]: Reached target sockets.target. Jul 2 00:43:51.243384 systemd[1]: Reached target basic.target. Jul 2 00:43:51.244827 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 2 00:43:51.244896 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 2 00:43:51.247091 systemd[1]: Started amazon-ssm-agent.service. Jul 2 00:43:51.251218 systemd[1]: Starting containerd.service... Jul 2 00:43:51.255755 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Jul 2 00:43:51.259825 systemd[1]: Starting dbus.service... Jul 2 00:43:51.263389 systemd[1]: Starting enable-oem-cloudinit.service... Jul 2 00:43:51.267607 systemd[1]: Starting extend-filesystems.service... Jul 2 00:43:51.269350 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Jul 2 00:43:51.272264 systemd[1]: Starting kubelet.service... Jul 2 00:43:51.276756 systemd[1]: Starting motdgen.service... Jul 2 00:43:51.283424 systemd[1]: Started nvidia.service. Jul 2 00:43:51.294482 systemd[1]: Starting prepare-helm.service... Jul 2 00:43:51.307417 systemd[1]: Starting ssh-key-proc-cmdline.service... Jul 2 00:43:51.311349 systemd[1]: Starting sshd-keygen.service... Jul 2 00:43:51.322283 systemd[1]: Starting systemd-logind.service... Jul 2 00:43:51.323754 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 2 00:43:51.323889 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Jul 2 00:43:51.333467 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Jul 2 00:43:51.335031 systemd[1]: Starting update-engine.service... Jul 2 00:43:51.338714 systemd[1]: Starting update-ssh-keys-after-ignition.service... Jul 2 00:43:51.344807 jq[1729]: true Jul 2 00:43:51.376214 jq[1718]: false Jul 2 00:43:51.402393 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Jul 2 00:43:51.402877 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Jul 2 00:43:51.403712 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Jul 2 00:43:51.404133 systemd[1]: Finished ssh-key-proc-cmdline.service. Jul 2 00:43:51.443152 tar[1731]: linux-arm64/helm Jul 2 00:43:51.476945 jq[1739]: true Jul 2 00:43:51.539746 dbus-daemon[1717]: [system] SELinux support is enabled Jul 2 00:43:51.540560 systemd[1]: Started dbus.service. Jul 2 00:43:51.545283 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Jul 2 00:43:51.545341 systemd[1]: Reached target system-config.target. Jul 2 00:43:51.557365 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Jul 2 00:43:51.557409 systemd[1]: Reached target user-config.target. Jul 2 00:43:51.576782 dbus-daemon[1717]: [system] Activating systemd to hand-off: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service' requested by ':1.0' (uid=244 pid=1450 comm="/usr/lib/systemd/systemd-networkd" label="system_u:system_r:kernel_t:s0") Jul 2 00:43:51.580002 extend-filesystems[1719]: Found loop1 Jul 2 00:43:51.581856 extend-filesystems[1719]: Found nvme0n1 Jul 2 00:43:51.584668 dbus-daemon[1717]: [system] Successfully activated service 'org.freedesktop.systemd1' Jul 2 00:43:51.588259 extend-filesystems[1719]: Found nvme0n1p1 Jul 2 00:43:51.589759 extend-filesystems[1719]: Found nvme0n1p2 Jul 2 00:43:51.589759 extend-filesystems[1719]: Found nvme0n1p3 Jul 2 00:43:51.593579 extend-filesystems[1719]: Found usr Jul 2 00:43:51.595337 extend-filesystems[1719]: Found nvme0n1p4 Jul 2 00:43:51.595337 extend-filesystems[1719]: Found nvme0n1p6 Jul 2 00:43:51.595337 extend-filesystems[1719]: Found nvme0n1p7 Jul 2 00:43:51.595337 extend-filesystems[1719]: Found nvme0n1p9 Jul 2 00:43:51.602284 extend-filesystems[1719]: Checking size of /dev/nvme0n1p9 Jul 2 00:43:51.610656 systemd[1]: Starting systemd-hostnamed.service... Jul 2 00:43:51.650709 systemd[1]: motdgen.service: Deactivated successfully. Jul 2 00:43:51.651093 systemd[1]: Finished motdgen.service. Jul 2 00:43:51.696349 extend-filesystems[1719]: Resized partition /dev/nvme0n1p9 Jul 2 00:43:51.706855 extend-filesystems[1778]: resize2fs 1.46.5 (30-Dec-2021) Jul 2 00:43:51.712176 update_engine[1728]: I0702 00:43:51.711681 1728 main.cc:92] Flatcar Update Engine starting Jul 2 00:43:51.717369 update_engine[1728]: I0702 00:43:51.717329 1728 update_check_scheduler.cc:74] Next update check in 5m38s Jul 2 00:43:51.719097 systemd[1]: Started update-engine.service. Jul 2 00:43:51.723721 systemd[1]: Started locksmithd.service. Jul 2 00:43:51.741182 kernel: EXT4-fs (nvme0n1p9): resizing filesystem from 553472 to 1489915 blocks Jul 2 00:43:51.793226 kernel: EXT4-fs (nvme0n1p9): resized filesystem to 1489915 Jul 2 00:43:51.837391 extend-filesystems[1778]: Filesystem at /dev/nvme0n1p9 is mounted on /; on-line resizing required Jul 2 00:43:51.837391 extend-filesystems[1778]: old_desc_blocks = 1, new_desc_blocks = 1 Jul 2 00:43:51.837391 extend-filesystems[1778]: The filesystem on /dev/nvme0n1p9 is now 1489915 (4k) blocks long. Jul 2 00:43:51.850896 extend-filesystems[1719]: Resized filesystem in /dev/nvme0n1p9 Jul 2 00:43:51.852840 bash[1782]: Updated "/home/core/.ssh/authorized_keys" Jul 2 00:43:51.853035 amazon-ssm-agent[1714]: 2024/07/02 00:43:51 Failed to load instance info from vault. RegistrationKey does not exist. Jul 2 00:43:51.853035 amazon-ssm-agent[1714]: Initializing new seelog logger Jul 2 00:43:51.853035 amazon-ssm-agent[1714]: New Seelog Logger Creation Complete Jul 2 00:43:51.853035 amazon-ssm-agent[1714]: 2024/07/02 00:43:51 Found config file at /etc/amazon/ssm/amazon-ssm-agent.json. Jul 2 00:43:51.853035 amazon-ssm-agent[1714]: Applying config override from /etc/amazon/ssm/amazon-ssm-agent.json. Jul 2 00:43:51.841795 systemd[1]: extend-filesystems.service: Deactivated successfully. Jul 2 00:43:51.842184 systemd[1]: Finished extend-filesystems.service. Jul 2 00:43:51.850904 systemd[1]: Finished update-ssh-keys-after-ignition.service. Jul 2 00:43:51.863775 amazon-ssm-agent[1714]: 2024/07/02 00:43:51 processing appconfig overrides Jul 2 00:43:51.898537 env[1740]: time="2024-07-02T00:43:51.898460859Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Jul 2 00:43:51.925762 systemd-logind[1726]: Watching system buttons on /dev/input/event0 (Power Button) Jul 2 00:43:51.929058 systemd-logind[1726]: Watching system buttons on /dev/input/event1 (Sleep Button) Jul 2 00:43:51.930465 systemd-logind[1726]: New seat seat0. Jul 2 00:43:51.944011 systemd[1]: Started systemd-logind.service. Jul 2 00:43:51.999049 systemd[1]: nvidia.service: Deactivated successfully. Jul 2 00:43:52.121849 env[1740]: time="2024-07-02T00:43:52.121763975Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Jul 2 00:43:52.122085 env[1740]: time="2024-07-02T00:43:52.122039925Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Jul 2 00:43:52.139548 dbus-daemon[1717]: [system] Successfully activated service 'org.freedesktop.hostname1' Jul 2 00:43:52.139818 systemd[1]: Started systemd-hostnamed.service. Jul 2 00:43:52.144310 env[1740]: time="2024-07-02T00:43:52.144232546Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.161-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Jul 2 00:43:52.144310 env[1740]: time="2024-07-02T00:43:52.144299815Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Jul 2 00:43:52.145476 dbus-daemon[1717]: [system] Activating via systemd: service name='org.freedesktop.PolicyKit1' unit='polkit.service' requested by ':1.6' (uid=0 pid=1763 comm="/usr/lib/systemd/systemd-hostnamed" label="system_u:system_r:kernel_t:s0") Jul 2 00:43:52.150286 systemd[1]: Starting polkit.service... Jul 2 00:43:52.155210 env[1740]: time="2024-07-02T00:43:52.155081529Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 2 00:43:52.156325 env[1740]: time="2024-07-02T00:43:52.156260736Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Jul 2 00:43:52.156449 env[1740]: time="2024-07-02T00:43:52.156329687Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Jul 2 00:43:52.156449 env[1740]: time="2024-07-02T00:43:52.156359494Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Jul 2 00:43:52.156642 env[1740]: time="2024-07-02T00:43:52.156598186Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Jul 2 00:43:52.157143 env[1740]: time="2024-07-02T00:43:52.157085714Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Jul 2 00:43:52.157482 env[1740]: time="2024-07-02T00:43:52.157427311Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 2 00:43:52.157580 env[1740]: time="2024-07-02T00:43:52.157476624Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Jul 2 00:43:52.157639 env[1740]: time="2024-07-02T00:43:52.157603590Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Jul 2 00:43:52.157714 env[1740]: time="2024-07-02T00:43:52.157632976Z" level=info msg="metadata content store policy set" policy=shared Jul 2 00:43:52.171727 env[1740]: time="2024-07-02T00:43:52.171649522Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Jul 2 00:43:52.171727 env[1740]: time="2024-07-02T00:43:52.171727271Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Jul 2 00:43:52.171931 env[1740]: time="2024-07-02T00:43:52.171760611Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Jul 2 00:43:52.171931 env[1740]: time="2024-07-02T00:43:52.171832760Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Jul 2 00:43:52.171931 env[1740]: time="2024-07-02T00:43:52.171872325Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Jul 2 00:43:52.171931 env[1740]: time="2024-07-02T00:43:52.171905593Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Jul 2 00:43:52.172153 env[1740]: time="2024-07-02T00:43:52.171936301Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Jul 2 00:43:52.172542 env[1740]: time="2024-07-02T00:43:52.172490497Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Jul 2 00:43:52.172679 env[1740]: time="2024-07-02T00:43:52.172548776Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Jul 2 00:43:52.172679 env[1740]: time="2024-07-02T00:43:52.172582982Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Jul 2 00:43:52.174956 env[1740]: time="2024-07-02T00:43:52.172614543Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Jul 2 00:43:52.175099 env[1740]: time="2024-07-02T00:43:52.174963510Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Jul 2 00:43:52.176653 env[1740]: time="2024-07-02T00:43:52.176529901Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Jul 2 00:43:52.176791 env[1740]: time="2024-07-02T00:43:52.176764759Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Jul 2 00:43:52.177251 env[1740]: time="2024-07-02T00:43:52.177205558Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Jul 2 00:43:52.177369 env[1740]: time="2024-07-02T00:43:52.177271457Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Jul 2 00:43:52.177369 env[1740]: time="2024-07-02T00:43:52.177308607Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Jul 2 00:43:52.177494 env[1740]: time="2024-07-02T00:43:52.177418795Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Jul 2 00:43:52.177494 env[1740]: time="2024-07-02T00:43:52.177459334Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Jul 2 00:43:52.177596 env[1740]: time="2024-07-02T00:43:52.177490258Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Jul 2 00:43:52.177596 env[1740]: time="2024-07-02T00:43:52.177522745Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Jul 2 00:43:52.177596 env[1740]: time="2024-07-02T00:43:52.177553609Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Jul 2 00:43:52.177596 env[1740]: time="2024-07-02T00:43:52.177583091Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Jul 2 00:43:52.177792 env[1740]: time="2024-07-02T00:43:52.177612357Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Jul 2 00:43:52.177792 env[1740]: time="2024-07-02T00:43:52.177641214Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Jul 2 00:43:52.177792 env[1740]: time="2024-07-02T00:43:52.177675023Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Jul 2 00:43:52.177979 env[1740]: time="2024-07-02T00:43:52.177939399Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Jul 2 00:43:52.178036 env[1740]: time="2024-07-02T00:43:52.177977667Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Jul 2 00:43:52.178036 env[1740]: time="2024-07-02T00:43:52.178008819Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Jul 2 00:43:52.178221 env[1740]: time="2024-07-02T00:43:52.178037448Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Jul 2 00:43:52.178221 env[1740]: time="2024-07-02T00:43:52.178069057Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Jul 2 00:43:52.178221 env[1740]: time="2024-07-02T00:43:52.178098852Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Jul 2 00:43:52.178416 env[1740]: time="2024-07-02T00:43:52.178166132Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Jul 2 00:43:52.178416 env[1740]: time="2024-07-02T00:43:52.178311451Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Jul 2 00:43:52.178754 env[1740]: time="2024-07-02T00:43:52.178644575Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Jul 2 00:43:52.179756 env[1740]: time="2024-07-02T00:43:52.178761733Z" level=info msg="Connect containerd service" Jul 2 00:43:52.179756 env[1740]: time="2024-07-02T00:43:52.178820012Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Jul 2 00:43:52.197062 env[1740]: time="2024-07-02T00:43:52.196960634Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 2 00:43:52.197505 env[1740]: time="2024-07-02T00:43:52.197456551Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Jul 2 00:43:52.197596 env[1740]: time="2024-07-02T00:43:52.197565044Z" level=info msg=serving... address=/run/containerd/containerd.sock Jul 2 00:43:52.197770 systemd[1]: Started containerd.service. Jul 2 00:43:52.203327 env[1740]: time="2024-07-02T00:43:52.203260522Z" level=info msg="containerd successfully booted in 0.335954s" Jul 2 00:43:52.205164 env[1740]: time="2024-07-02T00:43:52.204045358Z" level=info msg="Start subscribing containerd event" Jul 2 00:43:52.205164 env[1740]: time="2024-07-02T00:43:52.204162890Z" level=info msg="Start recovering state" Jul 2 00:43:52.205164 env[1740]: time="2024-07-02T00:43:52.204309602Z" level=info msg="Start event monitor" Jul 2 00:43:52.205164 env[1740]: time="2024-07-02T00:43:52.204357028Z" level=info msg="Start snapshots syncer" Jul 2 00:43:52.205164 env[1740]: time="2024-07-02T00:43:52.204456592Z" level=info msg="Start cni network conf syncer for default" Jul 2 00:43:52.205164 env[1740]: time="2024-07-02T00:43:52.204487480Z" level=info msg="Start streaming server" Jul 2 00:43:52.210884 polkitd[1823]: Started polkitd version 121 Jul 2 00:43:52.240287 polkitd[1823]: Loading rules from directory /etc/polkit-1/rules.d Jul 2 00:43:52.248550 polkitd[1823]: Loading rules from directory /usr/share/polkit-1/rules.d Jul 2 00:43:52.253471 polkitd[1823]: Finished loading, compiling and executing 2 rules Jul 2 00:43:52.255728 dbus-daemon[1717]: [system] Successfully activated service 'org.freedesktop.PolicyKit1' Jul 2 00:43:52.255982 systemd[1]: Started polkit.service. Jul 2 00:43:52.258857 polkitd[1823]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Jul 2 00:43:52.309447 systemd-hostnamed[1763]: Hostname set to (transient) Jul 2 00:43:52.309600 systemd-resolved[1682]: System hostname changed to 'ip-172-31-16-66'. Jul 2 00:43:52.386411 coreos-metadata[1716]: Jul 02 00:43:52.385 INFO Putting http://169.254.169.254/latest/api/token: Attempt #1 Jul 2 00:43:52.389806 coreos-metadata[1716]: Jul 02 00:43:52.389 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys: Attempt #1 Jul 2 00:43:52.390925 coreos-metadata[1716]: Jul 02 00:43:52.390 INFO Fetch successful Jul 2 00:43:52.391543 coreos-metadata[1716]: Jul 02 00:43:52.391 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys/0/openssh-key: Attempt #1 Jul 2 00:43:52.393017 coreos-metadata[1716]: Jul 02 00:43:52.392 INFO Fetch successful Jul 2 00:43:52.395849 unknown[1716]: wrote ssh authorized keys file for user: core Jul 2 00:43:52.428027 update-ssh-keys[1866]: Updated "/home/core/.ssh/authorized_keys" Jul 2 00:43:52.429212 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Jul 2 00:43:52.734011 amazon-ssm-agent[1714]: 2024-07-02 00:43:52 INFO Create new startup processor Jul 2 00:43:52.744381 amazon-ssm-agent[1714]: 2024-07-02 00:43:52 INFO [LongRunningPluginsManager] registered plugins: {} Jul 2 00:43:52.744381 amazon-ssm-agent[1714]: 2024-07-02 00:43:52 INFO Initializing bookkeeping folders Jul 2 00:43:52.744584 amazon-ssm-agent[1714]: 2024-07-02 00:43:52 INFO removing the completed state files Jul 2 00:43:52.744584 amazon-ssm-agent[1714]: 2024-07-02 00:43:52 INFO Initializing bookkeeping folders for long running plugins Jul 2 00:43:52.744584 amazon-ssm-agent[1714]: 2024-07-02 00:43:52 INFO Initializing replies folder for MDS reply requests that couldn't reach the service Jul 2 00:43:52.744584 amazon-ssm-agent[1714]: 2024-07-02 00:43:52 INFO Initializing healthcheck folders for long running plugins Jul 2 00:43:52.744584 amazon-ssm-agent[1714]: 2024-07-02 00:43:52 INFO Initializing locations for inventory plugin Jul 2 00:43:52.744584 amazon-ssm-agent[1714]: 2024-07-02 00:43:52 INFO Initializing default location for custom inventory Jul 2 00:43:52.744584 amazon-ssm-agent[1714]: 2024-07-02 00:43:52 INFO Initializing default location for file inventory Jul 2 00:43:52.744584 amazon-ssm-agent[1714]: 2024-07-02 00:43:52 INFO Initializing default location for role inventory Jul 2 00:43:52.744960 amazon-ssm-agent[1714]: 2024-07-02 00:43:52 INFO Init the cloudwatchlogs publisher Jul 2 00:43:52.744960 amazon-ssm-agent[1714]: 2024-07-02 00:43:52 INFO [instanceID=i-03cf83d924a297ce4] Successfully loaded platform independent plugin aws:runPowerShellScript Jul 2 00:43:52.744960 amazon-ssm-agent[1714]: 2024-07-02 00:43:52 INFO [instanceID=i-03cf83d924a297ce4] Successfully loaded platform independent plugin aws:refreshAssociation Jul 2 00:43:52.744960 amazon-ssm-agent[1714]: 2024-07-02 00:43:52 INFO [instanceID=i-03cf83d924a297ce4] Successfully loaded platform independent plugin aws:configurePackage Jul 2 00:43:52.744960 amazon-ssm-agent[1714]: 2024-07-02 00:43:52 INFO [instanceID=i-03cf83d924a297ce4] Successfully loaded platform independent plugin aws:runDockerAction Jul 2 00:43:52.744960 amazon-ssm-agent[1714]: 2024-07-02 00:43:52 INFO [instanceID=i-03cf83d924a297ce4] Successfully loaded platform independent plugin aws:downloadContent Jul 2 00:43:52.744960 amazon-ssm-agent[1714]: 2024-07-02 00:43:52 INFO [instanceID=i-03cf83d924a297ce4] Successfully loaded platform independent plugin aws:runDocument Jul 2 00:43:52.744960 amazon-ssm-agent[1714]: 2024-07-02 00:43:52 INFO [instanceID=i-03cf83d924a297ce4] Successfully loaded platform independent plugin aws:softwareInventory Jul 2 00:43:52.744960 amazon-ssm-agent[1714]: 2024-07-02 00:43:52 INFO [instanceID=i-03cf83d924a297ce4] Successfully loaded platform independent plugin aws:updateSsmAgent Jul 2 00:43:52.744960 amazon-ssm-agent[1714]: 2024-07-02 00:43:52 INFO [instanceID=i-03cf83d924a297ce4] Successfully loaded platform independent plugin aws:configureDocker Jul 2 00:43:52.744960 amazon-ssm-agent[1714]: 2024-07-02 00:43:52 INFO [instanceID=i-03cf83d924a297ce4] Successfully loaded platform dependent plugin aws:runShellScript Jul 2 00:43:52.744960 amazon-ssm-agent[1714]: 2024-07-02 00:43:52 INFO Starting Agent: amazon-ssm-agent - v2.3.1319.0 Jul 2 00:43:52.744960 amazon-ssm-agent[1714]: 2024-07-02 00:43:52 INFO OS: linux, Arch: arm64 Jul 2 00:43:52.761557 amazon-ssm-agent[1714]: datastore file /var/lib/amazon/ssm/i-03cf83d924a297ce4/longrunningplugins/datastore/store doesn't exist - no long running plugins to execute Jul 2 00:43:52.842834 amazon-ssm-agent[1714]: 2024-07-02 00:43:52 INFO [MessagingDeliveryService] Starting document processing engine... Jul 2 00:43:52.937750 amazon-ssm-agent[1714]: 2024-07-02 00:43:52 INFO [MessagingDeliveryService] [EngineProcessor] Starting Jul 2 00:43:53.032096 amazon-ssm-agent[1714]: 2024-07-02 00:43:52 INFO [MessagingDeliveryService] [EngineProcessor] Initial processing Jul 2 00:43:53.126615 amazon-ssm-agent[1714]: 2024-07-02 00:43:52 INFO [MessagingDeliveryService] Starting message polling Jul 2 00:43:53.221308 amazon-ssm-agent[1714]: 2024-07-02 00:43:52 INFO [MessagingDeliveryService] Starting send replies to MDS Jul 2 00:43:53.316311 amazon-ssm-agent[1714]: 2024-07-02 00:43:52 INFO [instanceID=i-03cf83d924a297ce4] Starting association polling Jul 2 00:43:53.411381 amazon-ssm-agent[1714]: 2024-07-02 00:43:52 INFO [MessagingDeliveryService] [Association] [EngineProcessor] Starting Jul 2 00:43:53.459490 tar[1731]: linux-arm64/LICENSE Jul 2 00:43:53.460006 tar[1731]: linux-arm64/README.md Jul 2 00:43:53.473601 systemd[1]: Finished prepare-helm.service. Jul 2 00:43:53.506956 amazon-ssm-agent[1714]: 2024-07-02 00:43:52 INFO [MessagingDeliveryService] [Association] Launching response handler Jul 2 00:43:53.525935 locksmithd[1783]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Jul 2 00:43:53.590065 systemd[1]: Started kubelet.service. Jul 2 00:43:53.602514 amazon-ssm-agent[1714]: 2024-07-02 00:43:52 INFO [MessagingDeliveryService] [Association] [EngineProcessor] Initial processing Jul 2 00:43:53.698239 amazon-ssm-agent[1714]: 2024-07-02 00:43:52 INFO [MessagingDeliveryService] [Association] Initializing association scheduling service Jul 2 00:43:53.794167 amazon-ssm-agent[1714]: 2024-07-02 00:43:52 INFO [MessagingDeliveryService] [Association] Association scheduling service initialized Jul 2 00:43:53.890403 amazon-ssm-agent[1714]: 2024-07-02 00:43:52 INFO [HealthCheck] HealthCheck reporting agent health. Jul 2 00:43:53.986649 amazon-ssm-agent[1714]: 2024-07-02 00:43:52 INFO [OfflineService] Starting document processing engine... Jul 2 00:43:54.083171 amazon-ssm-agent[1714]: 2024-07-02 00:43:52 INFO [OfflineService] [EngineProcessor] Starting Jul 2 00:43:54.179965 amazon-ssm-agent[1714]: 2024-07-02 00:43:52 INFO [OfflineService] [EngineProcessor] Initial processing Jul 2 00:43:54.276769 amazon-ssm-agent[1714]: 2024-07-02 00:43:52 INFO [OfflineService] Starting message polling Jul 2 00:43:54.373846 amazon-ssm-agent[1714]: 2024-07-02 00:43:52 INFO [OfflineService] Starting send replies to MDS Jul 2 00:43:54.428200 kubelet[1913]: E0702 00:43:54.428060 1913 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 2 00:43:54.432286 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 2 00:43:54.432599 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 2 00:43:54.433055 systemd[1]: kubelet.service: Consumed 1.445s CPU time. Jul 2 00:43:54.471166 amazon-ssm-agent[1714]: 2024-07-02 00:43:52 INFO [MessageGatewayService] Starting session document processing engine... Jul 2 00:43:54.568637 amazon-ssm-agent[1714]: 2024-07-02 00:43:52 INFO [MessageGatewayService] [EngineProcessor] Starting Jul 2 00:43:54.666292 amazon-ssm-agent[1714]: 2024-07-02 00:43:52 INFO [MessageGatewayService] SSM Agent is trying to setup control channel for Session Manager module. Jul 2 00:43:54.764150 amazon-ssm-agent[1714]: 2024-07-02 00:43:52 INFO [MessageGatewayService] Setting up websocket for controlchannel for instance: i-03cf83d924a297ce4, requestId: 252d4a93-144e-454e-b776-cbafcf81a7b6 Jul 2 00:43:54.862243 amazon-ssm-agent[1714]: 2024-07-02 00:43:52 INFO [MessageGatewayService] listening reply. Jul 2 00:43:54.960467 amazon-ssm-agent[1714]: 2024-07-02 00:43:52 INFO [LongRunningPluginsManager] starting long running plugin manager Jul 2 00:43:55.058932 amazon-ssm-agent[1714]: 2024-07-02 00:43:52 INFO [LongRunningPluginsManager] there aren't any long running plugin to execute Jul 2 00:43:55.157524 amazon-ssm-agent[1714]: 2024-07-02 00:43:52 INFO [LongRunningPluginsManager] There are no long running plugins currently getting executed - skipping their healthcheck Jul 2 00:43:55.256368 amazon-ssm-agent[1714]: 2024-07-02 00:43:52 INFO [StartupProcessor] Executing startup processor tasks Jul 2 00:43:55.355443 amazon-ssm-agent[1714]: 2024-07-02 00:43:52 INFO [StartupProcessor] Write to serial port: Amazon SSM Agent v2.3.1319.0 is running Jul 2 00:43:55.454619 amazon-ssm-agent[1714]: 2024-07-02 00:43:52 INFO [StartupProcessor] Write to serial port: OsProductName: Flatcar Container Linux by Kinvolk Jul 2 00:43:55.554007 amazon-ssm-agent[1714]: 2024-07-02 00:43:52 INFO [StartupProcessor] Write to serial port: OsVersion: 3510.3.5 Jul 2 00:43:55.653617 amazon-ssm-agent[1714]: 2024-07-02 00:43:52 INFO [MessageGatewayService] Opening websocket connection to: wss://ssmmessages.us-west-2.amazonaws.com/v1/control-channel/i-03cf83d924a297ce4?role=subscribe&stream=input Jul 2 00:43:55.753367 amazon-ssm-agent[1714]: 2024-07-02 00:43:52 INFO [MessageGatewayService] Successfully opened websocket connection to: wss://ssmmessages.us-west-2.amazonaws.com/v1/control-channel/i-03cf83d924a297ce4?role=subscribe&stream=input Jul 2 00:43:55.853346 amazon-ssm-agent[1714]: 2024-07-02 00:43:52 INFO [MessageGatewayService] Starting receiving message from control channel Jul 2 00:43:55.953561 amazon-ssm-agent[1714]: 2024-07-02 00:43:52 INFO [MessageGatewayService] [EngineProcessor] Initial processing Jul 2 00:43:59.846931 sshd_keygen[1745]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Jul 2 00:43:59.883063 systemd[1]: Finished sshd-keygen.service. Jul 2 00:43:59.887871 systemd[1]: Starting issuegen.service... Jul 2 00:43:59.898573 systemd[1]: issuegen.service: Deactivated successfully. Jul 2 00:43:59.898959 systemd[1]: Finished issuegen.service. Jul 2 00:43:59.903467 systemd[1]: Starting systemd-user-sessions.service... Jul 2 00:43:59.917498 systemd[1]: Finished systemd-user-sessions.service. Jul 2 00:43:59.922246 systemd[1]: Started getty@tty1.service. Jul 2 00:43:59.926727 systemd[1]: Started serial-getty@ttyS0.service. Jul 2 00:43:59.928802 systemd[1]: Reached target getty.target. Jul 2 00:43:59.930422 systemd[1]: Reached target multi-user.target. Jul 2 00:43:59.934555 systemd[1]: Starting systemd-update-utmp-runlevel.service... Jul 2 00:43:59.949786 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Jul 2 00:43:59.950198 systemd[1]: Finished systemd-update-utmp-runlevel.service. Jul 2 00:43:59.952222 systemd[1]: Startup finished in 1.130s (kernel) + 8.753s (initrd) + 17.609s (userspace) = 27.493s. Jul 2 00:44:00.403076 systemd[1]: Created slice system-sshd.slice. Jul 2 00:44:00.405576 systemd[1]: Started sshd@0-172.31.16.66:22-139.178.89.65:59836.service. Jul 2 00:44:00.727790 sshd[1934]: Accepted publickey for core from 139.178.89.65 port 59836 ssh2: RSA SHA256:8y6JErBds/WgSuzw1b/2wKJnltsiajeNUW/adFCuF/s Jul 2 00:44:00.731735 sshd[1934]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 00:44:00.750266 systemd[1]: Created slice user-500.slice. Jul 2 00:44:00.752536 systemd[1]: Starting user-runtime-dir@500.service... Jul 2 00:44:00.758958 systemd-logind[1726]: New session 1 of user core. Jul 2 00:44:00.770949 systemd[1]: Finished user-runtime-dir@500.service. Jul 2 00:44:00.773881 systemd[1]: Starting user@500.service... Jul 2 00:44:00.780552 (systemd)[1937]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Jul 2 00:44:00.963476 systemd[1937]: Queued start job for default target default.target. Jul 2 00:44:00.964545 systemd[1937]: Reached target paths.target. Jul 2 00:44:00.964597 systemd[1937]: Reached target sockets.target. Jul 2 00:44:00.964629 systemd[1937]: Reached target timers.target. Jul 2 00:44:00.964658 systemd[1937]: Reached target basic.target. Jul 2 00:44:00.964814 systemd[1]: Started user@500.service. Jul 2 00:44:00.966724 systemd[1]: Started session-1.scope. Jul 2 00:44:00.968953 systemd[1937]: Reached target default.target. Jul 2 00:44:00.969303 systemd[1937]: Startup finished in 176ms. Jul 2 00:44:01.121329 systemd[1]: Started sshd@1-172.31.16.66:22-139.178.89.65:59840.service. Jul 2 00:44:01.297444 sshd[1946]: Accepted publickey for core from 139.178.89.65 port 59840 ssh2: RSA SHA256:8y6JErBds/WgSuzw1b/2wKJnltsiajeNUW/adFCuF/s Jul 2 00:44:01.300024 sshd[1946]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 00:44:01.308492 systemd-logind[1726]: New session 2 of user core. Jul 2 00:44:01.309498 systemd[1]: Started session-2.scope. Jul 2 00:44:01.438514 sshd[1946]: pam_unix(sshd:session): session closed for user core Jul 2 00:44:01.443855 systemd-logind[1726]: Session 2 logged out. Waiting for processes to exit. Jul 2 00:44:01.444471 systemd[1]: sshd@1-172.31.16.66:22-139.178.89.65:59840.service: Deactivated successfully. Jul 2 00:44:01.445709 systemd[1]: session-2.scope: Deactivated successfully. Jul 2 00:44:01.447252 systemd-logind[1726]: Removed session 2. Jul 2 00:44:01.466203 systemd[1]: Started sshd@2-172.31.16.66:22-139.178.89.65:59856.service. Jul 2 00:44:01.638794 sshd[1952]: Accepted publickey for core from 139.178.89.65 port 59856 ssh2: RSA SHA256:8y6JErBds/WgSuzw1b/2wKJnltsiajeNUW/adFCuF/s Jul 2 00:44:01.641304 sshd[1952]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 00:44:01.650052 systemd[1]: Started session-3.scope. Jul 2 00:44:01.650866 systemd-logind[1726]: New session 3 of user core. Jul 2 00:44:01.772747 sshd[1952]: pam_unix(sshd:session): session closed for user core Jul 2 00:44:01.777769 systemd-logind[1726]: Session 3 logged out. Waiting for processes to exit. Jul 2 00:44:01.778386 systemd[1]: sshd@2-172.31.16.66:22-139.178.89.65:59856.service: Deactivated successfully. Jul 2 00:44:01.779540 systemd[1]: session-3.scope: Deactivated successfully. Jul 2 00:44:01.781086 systemd-logind[1726]: Removed session 3. Jul 2 00:44:01.801376 systemd[1]: Started sshd@3-172.31.16.66:22-139.178.89.65:59866.service. Jul 2 00:44:01.980254 sshd[1958]: Accepted publickey for core from 139.178.89.65 port 59866 ssh2: RSA SHA256:8y6JErBds/WgSuzw1b/2wKJnltsiajeNUW/adFCuF/s Jul 2 00:44:01.983205 sshd[1958]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 00:44:01.990628 systemd-logind[1726]: New session 4 of user core. Jul 2 00:44:01.991594 systemd[1]: Started session-4.scope. Jul 2 00:44:02.123746 sshd[1958]: pam_unix(sshd:session): session closed for user core Jul 2 00:44:02.127913 systemd[1]: session-4.scope: Deactivated successfully. Jul 2 00:44:02.129042 systemd[1]: sshd@3-172.31.16.66:22-139.178.89.65:59866.service: Deactivated successfully. Jul 2 00:44:02.130783 systemd-logind[1726]: Session 4 logged out. Waiting for processes to exit. Jul 2 00:44:02.132502 systemd-logind[1726]: Removed session 4. Jul 2 00:44:02.151562 systemd[1]: Started sshd@4-172.31.16.66:22-139.178.89.65:59870.service. Jul 2 00:44:02.327552 sshd[1964]: Accepted publickey for core from 139.178.89.65 port 59870 ssh2: RSA SHA256:8y6JErBds/WgSuzw1b/2wKJnltsiajeNUW/adFCuF/s Jul 2 00:44:02.330550 sshd[1964]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 00:44:02.338919 systemd[1]: Started session-5.scope. Jul 2 00:44:02.340232 systemd-logind[1726]: New session 5 of user core. Jul 2 00:44:02.513567 sudo[1967]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Jul 2 00:44:02.514652 sudo[1967]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 2 00:44:02.550867 dbus-daemon[1717]: avc: received setenforce notice (enforcing=1) Jul 2 00:44:02.552067 sudo[1967]: pam_unix(sudo:session): session closed for user root Jul 2 00:44:02.576558 sshd[1964]: pam_unix(sshd:session): session closed for user core Jul 2 00:44:02.582791 systemd[1]: session-5.scope: Deactivated successfully. Jul 2 00:44:02.583988 systemd[1]: sshd@4-172.31.16.66:22-139.178.89.65:59870.service: Deactivated successfully. Jul 2 00:44:02.585771 systemd-logind[1726]: Session 5 logged out. Waiting for processes to exit. Jul 2 00:44:02.588611 systemd-logind[1726]: Removed session 5. Jul 2 00:44:02.604689 systemd[1]: Started sshd@5-172.31.16.66:22-139.178.89.65:59876.service. Jul 2 00:44:02.779844 sshd[1971]: Accepted publickey for core from 139.178.89.65 port 59876 ssh2: RSA SHA256:8y6JErBds/WgSuzw1b/2wKJnltsiajeNUW/adFCuF/s Jul 2 00:44:02.782975 sshd[1971]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 00:44:02.791477 systemd[1]: Started session-6.scope. Jul 2 00:44:02.792217 systemd-logind[1726]: New session 6 of user core. Jul 2 00:44:02.899843 sudo[1975]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Jul 2 00:44:02.900864 sudo[1975]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 2 00:44:02.906059 sudo[1975]: pam_unix(sudo:session): session closed for user root Jul 2 00:44:02.915628 sudo[1974]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Jul 2 00:44:02.916637 sudo[1974]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 2 00:44:02.934690 systemd[1]: Stopping audit-rules.service... Jul 2 00:44:02.935000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 2 00:44:02.938219 kernel: kauditd_printk_skb: 113 callbacks suppressed Jul 2 00:44:02.938279 kernel: audit: type=1305 audit(1719881042.935:207): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 2 00:44:02.935000 audit[1978]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffc5044bc0 a2=420 a3=0 items=0 ppid=1 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:02.952533 auditctl[1978]: No rules Jul 2 00:44:02.956436 kernel: audit: type=1300 audit(1719881042.935:207): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffc5044bc0 a2=420 a3=0 items=0 ppid=1 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:02.956537 kernel: audit: type=1327 audit(1719881042.935:207): proctitle=2F7362696E2F617564697463746C002D44 Jul 2 00:44:02.956579 kernel: audit: type=1131 audit(1719881042.952:208): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:44:02.935000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Jul 2 00:44:02.952000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:44:02.953582 systemd[1]: audit-rules.service: Deactivated successfully. Jul 2 00:44:02.953922 systemd[1]: Stopped audit-rules.service. Jul 2 00:44:02.961296 systemd[1]: Starting audit-rules.service... Jul 2 00:44:02.991828 augenrules[1995]: No rules Jul 2 00:44:02.992000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:44:02.993400 systemd[1]: Finished audit-rules.service. Jul 2 00:44:02.998441 sudo[1974]: pam_unix(sudo:session): session closed for user root Jul 2 00:44:02.997000 audit[1974]: USER_END pid=1974 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 00:44:03.009400 kernel: audit: type=1130 audit(1719881042.992:209): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:44:03.009491 kernel: audit: type=1106 audit(1719881042.997:210): pid=1974 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 00:44:03.009566 kernel: audit: type=1104 audit(1719881042.997:211): pid=1974 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 00:44:02.997000 audit[1974]: CRED_DISP pid=1974 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 00:44:03.021526 sshd[1971]: pam_unix(sshd:session): session closed for user core Jul 2 00:44:03.022000 audit[1971]: USER_END pid=1971 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:44:03.028339 systemd[1]: session-6.scope: Deactivated successfully. Jul 2 00:44:03.029419 systemd[1]: sshd@5-172.31.16.66:22-139.178.89.65:59876.service: Deactivated successfully. Jul 2 00:44:03.025000 audit[1971]: CRED_DISP pid=1971 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:44:03.042802 kernel: audit: type=1106 audit(1719881043.022:212): pid=1971 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:44:03.042893 kernel: audit: type=1104 audit(1719881043.025:213): pid=1971 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:44:03.028000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.16.66:22-139.178.89.65:59876 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:44:03.050389 kernel: audit: type=1131 audit(1719881043.028:214): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.16.66:22-139.178.89.65:59876 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:44:03.050745 systemd-logind[1726]: Session 6 logged out. Waiting for processes to exit. Jul 2 00:44:03.059099 systemd[1]: Started sshd@6-172.31.16.66:22-139.178.89.65:59882.service. Jul 2 00:44:03.058000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.16.66:22-139.178.89.65:59882 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:44:03.061170 systemd-logind[1726]: Removed session 6. Jul 2 00:44:03.235000 audit[2001]: USER_ACCT pid=2001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:44:03.237254 sshd[2001]: Accepted publickey for core from 139.178.89.65 port 59882 ssh2: RSA SHA256:8y6JErBds/WgSuzw1b/2wKJnltsiajeNUW/adFCuF/s Jul 2 00:44:03.237000 audit[2001]: CRED_ACQ pid=2001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:44:03.238000 audit[2001]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe9bbfb40 a2=3 a3=1 items=0 ppid=1 pid=2001 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:03.238000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 00:44:03.240418 sshd[2001]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 00:44:03.249266 systemd-logind[1726]: New session 7 of user core. Jul 2 00:44:03.249285 systemd[1]: Started session-7.scope. Jul 2 00:44:03.257000 audit[2001]: USER_START pid=2001 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:44:03.260000 audit[2003]: CRED_ACQ pid=2003 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:44:03.355000 audit[2004]: USER_ACCT pid=2004 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 00:44:03.358265 sudo[2004]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Jul 2 00:44:03.357000 audit[2004]: CRED_REFR pid=2004 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 00:44:03.359449 sudo[2004]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 2 00:44:03.361000 audit[2004]: USER_START pid=2004 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 00:44:03.408038 systemd[1]: Starting docker.service... Jul 2 00:44:03.487084 env[2014]: time="2024-07-02T00:44:03.486987508Z" level=info msg="Starting up" Jul 2 00:44:03.490403 env[2014]: time="2024-07-02T00:44:03.490353451Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 2 00:44:03.490583 env[2014]: time="2024-07-02T00:44:03.490553153Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 2 00:44:03.490743 env[2014]: time="2024-07-02T00:44:03.490710209Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 2 00:44:03.490851 env[2014]: time="2024-07-02T00:44:03.490823876Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 2 00:44:03.494014 env[2014]: time="2024-07-02T00:44:03.493968850Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 2 00:44:03.494314 env[2014]: time="2024-07-02T00:44:03.494278892Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 2 00:44:03.494473 env[2014]: time="2024-07-02T00:44:03.494439335Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 2 00:44:03.494582 env[2014]: time="2024-07-02T00:44:03.494555140Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 2 00:44:03.517248 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport3898548719-merged.mount: Deactivated successfully. Jul 2 00:44:03.569244 env[2014]: time="2024-07-02T00:44:03.569189556Z" level=info msg="Loading containers: start." Jul 2 00:44:03.703000 audit[2045]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=2045 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 00:44:03.703000 audit[2045]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffcf0f8e40 a2=0 a3=1 items=0 ppid=2014 pid=2045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:03.703000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Jul 2 00:44:03.708000 audit[2047]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=2047 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 00:44:03.708000 audit[2047]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffc6915d50 a2=0 a3=1 items=0 ppid=2014 pid=2047 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:03.708000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Jul 2 00:44:03.712000 audit[2049]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=2049 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 00:44:03.712000 audit[2049]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffcd36ffa0 a2=0 a3=1 items=0 ppid=2014 pid=2049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:03.712000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 2 00:44:03.717000 audit[2051]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=2051 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 00:44:03.717000 audit[2051]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffe242d0e0 a2=0 a3=1 items=0 ppid=2014 pid=2051 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:03.717000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 2 00:44:03.722000 audit[2053]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=2053 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 00:44:03.722000 audit[2053]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffffe8d300 a2=0 a3=1 items=0 ppid=2014 pid=2053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:03.722000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Jul 2 00:44:03.747000 audit[2058]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=2058 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 00:44:03.747000 audit[2058]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff65ba1a0 a2=0 a3=1 items=0 ppid=2014 pid=2058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:03.747000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Jul 2 00:44:03.771000 audit[2060]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=2060 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 00:44:03.771000 audit[2060]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffe5dfb3a0 a2=0 a3=1 items=0 ppid=2014 pid=2060 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:03.771000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Jul 2 00:44:03.776000 audit[2062]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=2062 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 00:44:03.776000 audit[2062]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffe5b80590 a2=0 a3=1 items=0 ppid=2014 pid=2062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:03.776000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Jul 2 00:44:03.780000 audit[2064]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=2064 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 00:44:03.780000 audit[2064]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffd1e56d10 a2=0 a3=1 items=0 ppid=2014 pid=2064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:03.780000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 2 00:44:03.794000 audit[2068]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=2068 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 00:44:03.794000 audit[2068]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffc28cc430 a2=0 a3=1 items=0 ppid=2014 pid=2068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:03.794000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 2 00:44:03.796000 audit[2069]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=2069 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 00:44:03.796000 audit[2069]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffc46ae8b0 a2=0 a3=1 items=0 ppid=2014 pid=2069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:03.796000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 2 00:44:03.815164 kernel: Initializing XFRM netlink socket Jul 2 00:44:03.890986 env[2014]: time="2024-07-02T00:44:03.890908983Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Jul 2 00:44:03.893449 (udev-worker)[2025]: Network interface NamePolicy= disabled on kernel command line. Jul 2 00:44:03.931000 audit[2077]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=2077 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 00:44:03.931000 audit[2077]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=ffffcf144a60 a2=0 a3=1 items=0 ppid=2014 pid=2077 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:03.931000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Jul 2 00:44:03.957000 audit[2080]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=2080 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 00:44:03.957000 audit[2080]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=fffff7f00f60 a2=0 a3=1 items=0 ppid=2014 pid=2080 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:03.957000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Jul 2 00:44:03.963000 audit[2083]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=2083 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 00:44:03.963000 audit[2083]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffeab0e810 a2=0 a3=1 items=0 ppid=2014 pid=2083 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:03.963000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Jul 2 00:44:03.967000 audit[2085]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=2085 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 00:44:03.967000 audit[2085]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=fffff72f7a10 a2=0 a3=1 items=0 ppid=2014 pid=2085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:03.967000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Jul 2 00:44:03.971000 audit[2087]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=2087 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 00:44:03.971000 audit[2087]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=fffff14bdf90 a2=0 a3=1 items=0 ppid=2014 pid=2087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:03.971000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Jul 2 00:44:03.976000 audit[2089]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=2089 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 00:44:03.976000 audit[2089]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=ffffd7e396f0 a2=0 a3=1 items=0 ppid=2014 pid=2089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:03.976000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Jul 2 00:44:03.980000 audit[2091]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=2091 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 00:44:03.980000 audit[2091]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=fffffd47add0 a2=0 a3=1 items=0 ppid=2014 pid=2091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:03.980000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Jul 2 00:44:04.006000 audit[2094]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=2094 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 00:44:04.006000 audit[2094]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffe968dc20 a2=0 a3=1 items=0 ppid=2014 pid=2094 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:04.006000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Jul 2 00:44:04.011000 audit[2096]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=2096 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 00:44:04.011000 audit[2096]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffe9a767c0 a2=0 a3=1 items=0 ppid=2014 pid=2096 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:04.011000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 2 00:44:04.015000 audit[2098]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=2098 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 00:44:04.015000 audit[2098]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffe53bcd10 a2=0 a3=1 items=0 ppid=2014 pid=2098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:04.015000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 2 00:44:04.019000 audit[2100]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=2100 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 00:44:04.019000 audit[2100]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffedaf2c80 a2=0 a3=1 items=0 ppid=2014 pid=2100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:04.019000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Jul 2 00:44:04.021196 systemd-networkd[1450]: docker0: Link UP Jul 2 00:44:04.036000 audit[2104]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=2104 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 00:44:04.036000 audit[2104]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffce2d16d0 a2=0 a3=1 items=0 ppid=2014 pid=2104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:04.036000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 2 00:44:04.038000 audit[2105]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=2105 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 00:44:04.038000 audit[2105]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=fffff8569a40 a2=0 a3=1 items=0 ppid=2014 pid=2105 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:04.038000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 2 00:44:04.040464 env[2014]: time="2024-07-02T00:44:04.040423994Z" level=info msg="Loading containers: done." Jul 2 00:44:04.066964 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck2525352336-merged.mount: Deactivated successfully. Jul 2 00:44:04.079198 env[2014]: time="2024-07-02T00:44:04.079076790Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Jul 2 00:44:04.079623 env[2014]: time="2024-07-02T00:44:04.079571270Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Jul 2 00:44:04.079880 env[2014]: time="2024-07-02T00:44:04.079838390Z" level=info msg="Daemon has completed initialization" Jul 2 00:44:04.105000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:44:04.106259 systemd[1]: Started docker.service. Jul 2 00:44:04.116530 env[2014]: time="2024-07-02T00:44:04.116412359Z" level=info msg="API listen on /run/docker.sock" Jul 2 00:44:04.509500 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Jul 2 00:44:04.509829 systemd[1]: Stopped kubelet.service. Jul 2 00:44:04.509939 systemd[1]: kubelet.service: Consumed 1.445s CPU time. Jul 2 00:44:04.508000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:44:04.508000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:44:04.512676 systemd[1]: Starting kubelet.service... Jul 2 00:44:05.601025 env[1740]: time="2024-07-02T00:44:05.600931635Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.28.11\"" Jul 2 00:44:05.822000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:44:05.822645 systemd[1]: Started kubelet.service. Jul 2 00:44:05.928637 kubelet[2146]: E0702 00:44:05.928255 2146 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 2 00:44:05.939111 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 2 00:44:05.939457 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 2 00:44:05.938000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 2 00:44:06.276683 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3325801747.mount: Deactivated successfully. Jul 2 00:44:08.582100 env[1740]: time="2024-07-02T00:44:08.582038188Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.28.11,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:44:08.587431 env[1740]: time="2024-07-02T00:44:08.587370352Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:d2b5500cdb8d455434ebcaa569918eb0c5e68e82d75d4c85c509519786f24a8d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:44:08.593186 env[1740]: time="2024-07-02T00:44:08.591367229Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.28.11,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:44:08.597584 env[1740]: time="2024-07-02T00:44:08.597531383Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.28.11\" returns image reference \"sha256:d2b5500cdb8d455434ebcaa569918eb0c5e68e82d75d4c85c509519786f24a8d\"" Jul 2 00:44:08.600465 env[1740]: time="2024-07-02T00:44:08.598027703Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:aec9d1701c304eee8607d728a39baaa511d65bef6dd9861010618f63fbadeb10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:44:08.615592 env[1740]: time="2024-07-02T00:44:08.615539353Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.28.11\"" Jul 2 00:44:09.228947 amazon-ssm-agent[1714]: 2024-07-02 00:44:09 INFO [MessagingDeliveryService] [Association] No associations on boot. Requerying for associations after 30 seconds. Jul 2 00:44:11.146772 env[1740]: time="2024-07-02T00:44:11.146684300Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.28.11,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:44:11.151158 env[1740]: time="2024-07-02T00:44:11.150402655Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:24cd2c3bd254238005fcc2fcc15e9e56347b218c10b8399a28d1bf813800266a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:44:11.154077 env[1740]: time="2024-07-02T00:44:11.154016226Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.28.11,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:44:11.157362 env[1740]: time="2024-07-02T00:44:11.157301363Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:6014c3572ec683841bbb16f87b94da28ee0254b95e2dba2d1850d62bd0111f09,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:44:11.159205 env[1740]: time="2024-07-02T00:44:11.159150426Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.28.11\" returns image reference \"sha256:24cd2c3bd254238005fcc2fcc15e9e56347b218c10b8399a28d1bf813800266a\"" Jul 2 00:44:11.176835 env[1740]: time="2024-07-02T00:44:11.176778244Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.28.11\"" Jul 2 00:44:12.763543 env[1740]: time="2024-07-02T00:44:12.763464016Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.28.11,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:44:12.768219 env[1740]: time="2024-07-02T00:44:12.767342402Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:fdf13db9a96001adee7d1c69fd6849d6cd45fc3c138c95c8240d353eb79acf50,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:44:12.771995 env[1740]: time="2024-07-02T00:44:12.771940976Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.28.11,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:44:12.777729 env[1740]: time="2024-07-02T00:44:12.777676295Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:46cf7475c8daffb743c856a1aea0ddea35e5acd2418be18b1e22cf98d9c9b445,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:44:12.781492 env[1740]: time="2024-07-02T00:44:12.779821232Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.28.11\" returns image reference \"sha256:fdf13db9a96001adee7d1c69fd6849d6cd45fc3c138c95c8240d353eb79acf50\"" Jul 2 00:44:12.799110 env[1740]: time="2024-07-02T00:44:12.799051222Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.28.11\"" Jul 2 00:44:14.275609 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount586782977.mount: Deactivated successfully. Jul 2 00:44:15.077578 env[1740]: time="2024-07-02T00:44:15.077497545Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.28.11,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:44:15.080525 env[1740]: time="2024-07-02T00:44:15.080464551Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e195d3cf134bc9d64104f5e82e95fce811d55b1cdc9cb26fb8f52c8d107d1661,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:44:15.083209 env[1740]: time="2024-07-02T00:44:15.083152530Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.28.11,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:44:15.085713 env[1740]: time="2024-07-02T00:44:15.085643628Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:ae4b671d4cfc23dd75030bb4490207cd939b3b11a799bcb4119698cd712eb5b4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:44:15.086727 env[1740]: time="2024-07-02T00:44:15.086680111Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.28.11\" returns image reference \"sha256:e195d3cf134bc9d64104f5e82e95fce811d55b1cdc9cb26fb8f52c8d107d1661\"" Jul 2 00:44:15.103038 env[1740]: time="2024-07-02T00:44:15.102990030Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Jul 2 00:44:15.662075 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1882675960.mount: Deactivated successfully. Jul 2 00:44:15.673500 env[1740]: time="2024-07-02T00:44:15.673444678Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:44:15.678259 env[1740]: time="2024-07-02T00:44:15.678201013Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:44:15.682647 env[1740]: time="2024-07-02T00:44:15.682602526Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:44:15.686855 env[1740]: time="2024-07-02T00:44:15.686811948Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:44:15.688384 env[1740]: time="2024-07-02T00:44:15.688329249Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e\"" Jul 2 00:44:15.704802 env[1740]: time="2024-07-02T00:44:15.704731445Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.10-0\"" Jul 2 00:44:16.019532 kernel: kauditd_printk_skb: 88 callbacks suppressed Jul 2 00:44:16.019678 kernel: audit: type=1130 audit(1719881056.008:253): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:44:16.008000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:44:16.009438 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Jul 2 00:44:16.009755 systemd[1]: Stopped kubelet.service. Jul 2 00:44:16.012289 systemd[1]: Starting kubelet.service... Jul 2 00:44:16.027358 kernel: audit: type=1131 audit(1719881056.008:254): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:44:16.008000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:44:16.662561 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount279038828.mount: Deactivated successfully. Jul 2 00:44:16.781000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:44:16.781960 systemd[1]: Started kubelet.service. Jul 2 00:44:16.791161 kernel: audit: type=1130 audit(1719881056.781:255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:44:16.875916 kubelet[2182]: E0702 00:44:16.875845 2182 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 2 00:44:16.880143 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 2 00:44:16.880467 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 2 00:44:16.879000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 2 00:44:16.888834 kernel: audit: type=1131 audit(1719881056.879:256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 2 00:44:20.748615 amazon-ssm-agent[1714]: 2024-07-02 00:44:20 INFO [HealthCheck] HealthCheck reporting agent health. Jul 2 00:44:21.608323 env[1740]: time="2024-07-02T00:44:21.608255421Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.10-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:44:21.611671 env[1740]: time="2024-07-02T00:44:21.611609759Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:79f8d13ae8b8839cadfb2f83416935f5184206d386028e2d1263577f0ab3620b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:44:21.615323 env[1740]: time="2024-07-02T00:44:21.615268490Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.10-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:44:21.618903 env[1740]: time="2024-07-02T00:44:21.618842661Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:22f892d7672adc0b9c86df67792afdb8b2dc08880f49f669eaaa59c47d7908c2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:44:21.620843 env[1740]: time="2024-07-02T00:44:21.620797558Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.10-0\" returns image reference \"sha256:79f8d13ae8b8839cadfb2f83416935f5184206d386028e2d1263577f0ab3620b\"" Jul 2 00:44:21.637056 env[1740]: time="2024-07-02T00:44:21.637003420Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\"" Jul 2 00:44:22.191164 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3433139435.mount: Deactivated successfully. Jul 2 00:44:22.342000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:44:22.343018 systemd[1]: systemd-hostnamed.service: Deactivated successfully. Jul 2 00:44:22.351254 kernel: audit: type=1131 audit(1719881062.342:257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:44:22.380000 audit: BPF prog-id=43 op=UNLOAD Jul 2 00:44:22.380000 audit: BPF prog-id=42 op=UNLOAD Jul 2 00:44:22.385637 kernel: audit: type=1334 audit(1719881062.380:258): prog-id=43 op=UNLOAD Jul 2 00:44:22.385722 kernel: audit: type=1334 audit(1719881062.380:259): prog-id=42 op=UNLOAD Jul 2 00:44:22.385770 kernel: audit: type=1334 audit(1719881062.380:260): prog-id=41 op=UNLOAD Jul 2 00:44:22.380000 audit: BPF prog-id=41 op=UNLOAD Jul 2 00:44:23.239435 env[1740]: time="2024-07-02T00:44:23.239374963Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:44:23.303571 env[1740]: time="2024-07-02T00:44:23.303501902Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:44:23.314528 env[1740]: time="2024-07-02T00:44:23.314447362Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:44:23.328889 env[1740]: time="2024-07-02T00:44:23.328816953Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:44:23.330457 env[1740]: time="2024-07-02T00:44:23.330401660Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\" returns image reference \"sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108\"" Jul 2 00:44:27.008000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:44:27.009433 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 3. Jul 2 00:44:27.009755 systemd[1]: Stopped kubelet.service. Jul 2 00:44:27.015719 systemd[1]: Starting kubelet.service... Jul 2 00:44:27.018218 kernel: audit: type=1130 audit(1719881067.008:261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:44:27.018364 kernel: audit: type=1131 audit(1719881067.008:262): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:44:27.008000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:44:27.765106 systemd[1]: Started kubelet.service. Jul 2 00:44:27.767000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:44:27.778222 kernel: audit: type=1130 audit(1719881067.767:263): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:44:27.878897 kubelet[2259]: E0702 00:44:27.878828 2259 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 2 00:44:27.882000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 2 00:44:27.883074 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 2 00:44:27.883415 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 2 00:44:27.891159 kernel: audit: type=1131 audit(1719881067.882:264): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 2 00:44:30.994521 systemd[1]: Stopped kubelet.service. Jul 2 00:44:30.994000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:44:31.002823 systemd[1]: Starting kubelet.service... Jul 2 00:44:30.996000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:44:31.013268 kernel: audit: type=1130 audit(1719881070.994:265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:44:31.013398 kernel: audit: type=1131 audit(1719881070.996:266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:44:31.041773 systemd[1]: Reloading. Jul 2 00:44:31.147705 /usr/lib/systemd/system-generators/torcx-generator[2292]: time="2024-07-02T00:44:31Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.5 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.5 /var/lib/torcx/store]" Jul 2 00:44:31.148343 /usr/lib/systemd/system-generators/torcx-generator[2292]: time="2024-07-02T00:44:31Z" level=info msg="torcx already run" Jul 2 00:44:31.364315 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 2 00:44:31.364355 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 2 00:44:31.404023 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 2 00:44:31.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.595588 kernel: audit: type=1400 audit(1719881071.575:267): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.595735 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Jul 2 00:44:31.595787 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Jul 2 00:44:31.595836 kernel: audit: type=1400 audit(1719881071.575:268): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.595883 kernel: audit: backlog limit exceeded Jul 2 00:44:31.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.598794 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Jul 2 00:44:31.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.581000 audit: BPF prog-id=46 op=LOAD Jul 2 00:44:31.581000 audit: BPF prog-id=38 op=UNLOAD Jul 2 00:44:31.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.581000 audit: BPF prog-id=47 op=LOAD Jul 2 00:44:31.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.582000 audit: BPF prog-id=48 op=LOAD Jul 2 00:44:31.582000 audit: BPF prog-id=39 op=UNLOAD Jul 2 00:44:31.582000 audit: BPF prog-id=40 op=UNLOAD Jul 2 00:44:31.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.582000 audit: BPF prog-id=49 op=LOAD Jul 2 00:44:31.582000 audit: BPF prog-id=27 op=UNLOAD Jul 2 00:44:31.583000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.583000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.583000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.583000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.583000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.583000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.583000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.583000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.583000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.583000 audit: BPF prog-id=50 op=LOAD Jul 2 00:44:31.583000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.583000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.583000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.583000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.583000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.583000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.583000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.583000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.583000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.583000 audit: BPF prog-id=51 op=LOAD Jul 2 00:44:31.595000 audit: BPF prog-id=29 op=UNLOAD Jul 2 00:44:31.597000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.597000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.597000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.597000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.597000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.597000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.597000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.597000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.597000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.597000 audit: BPF prog-id=52 op=LOAD Jul 2 00:44:31.597000 audit: BPF prog-id=44 op=UNLOAD Jul 2 00:44:31.599000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.599000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.599000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.599000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.599000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.599000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.599000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.599000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.599000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.599000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.599000 audit: BPF prog-id=53 op=LOAD Jul 2 00:44:31.599000 audit: BPF prog-id=36 op=UNLOAD Jul 2 00:44:31.600000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.600000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.600000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.600000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.600000 audit: BPF prog-id=54 op=LOAD Jul 2 00:44:31.600000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.600000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.600000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.600000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.600000 audit: BPF prog-id=55 op=LOAD Jul 2 00:44:31.600000 audit: BPF prog-id=30 op=UNLOAD Jul 2 00:44:31.600000 audit: BPF prog-id=31 op=UNLOAD Jul 2 00:44:31.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.606000 audit: BPF prog-id=56 op=LOAD Jul 2 00:44:31.606000 audit: BPF prog-id=32 op=UNLOAD Jul 2 00:44:31.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.607000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.607000 audit: BPF prog-id=57 op=LOAD Jul 2 00:44:31.607000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.607000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.607000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.607000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.607000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.607000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.607000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.607000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.607000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.607000 audit: BPF prog-id=58 op=LOAD Jul 2 00:44:31.607000 audit: BPF prog-id=33 op=UNLOAD Jul 2 00:44:31.607000 audit: BPF prog-id=34 op=UNLOAD Jul 2 00:44:31.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.611000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.611000 audit: BPF prog-id=59 op=LOAD Jul 2 00:44:31.611000 audit: BPF prog-id=35 op=UNLOAD Jul 2 00:44:31.615000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.615000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.615000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.615000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.615000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.615000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.615000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.615000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.615000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.615000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:31.615000 audit: BPF prog-id=60 op=LOAD Jul 2 00:44:31.615000 audit: BPF prog-id=37 op=UNLOAD Jul 2 00:44:31.658770 systemd[1]: Started kubelet.service. Jul 2 00:44:31.659000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:44:31.673728 systemd[1]: Stopping kubelet.service... Jul 2 00:44:31.675696 systemd[1]: kubelet.service: Deactivated successfully. Jul 2 00:44:31.676305 systemd[1]: Stopped kubelet.service. Jul 2 00:44:31.675000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:44:31.681659 systemd[1]: Starting kubelet.service... Jul 2 00:44:32.430000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:44:32.430526 systemd[1]: Started kubelet.service. Jul 2 00:44:32.529727 kubelet[2360]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 2 00:44:32.530286 kubelet[2360]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Jul 2 00:44:32.530410 kubelet[2360]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 2 00:44:32.530667 kubelet[2360]: I0702 00:44:32.530611 2360 server.go:203] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 2 00:44:33.881501 kubelet[2360]: I0702 00:44:33.881384 2360 server.go:467] "Kubelet version" kubeletVersion="v1.28.7" Jul 2 00:44:33.882379 kubelet[2360]: I0702 00:44:33.882201 2360 server.go:469] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 2 00:44:33.882886 kubelet[2360]: I0702 00:44:33.882860 2360 server.go:895] "Client rotation is on, will bootstrap in background" Jul 2 00:44:33.933555 kubelet[2360]: I0702 00:44:33.933518 2360 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 2 00:44:33.941841 kubelet[2360]: E0702 00:44:33.941785 2360 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.31.16.66:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.31.16.66:6443: connect: connection refused Jul 2 00:44:33.958088 kubelet[2360]: W0702 00:44:33.958036 2360 machine.go:65] Cannot read vendor id correctly, set empty. Jul 2 00:44:33.959306 kubelet[2360]: I0702 00:44:33.959260 2360 server.go:725] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 2 00:44:33.959757 kubelet[2360]: I0702 00:44:33.959727 2360 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 2 00:44:33.960057 kubelet[2360]: I0702 00:44:33.960026 2360 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Jul 2 00:44:33.960245 kubelet[2360]: I0702 00:44:33.960077 2360 topology_manager.go:138] "Creating topology manager with none policy" Jul 2 00:44:33.960245 kubelet[2360]: I0702 00:44:33.960099 2360 container_manager_linux.go:301] "Creating device plugin manager" Jul 2 00:44:33.960376 kubelet[2360]: I0702 00:44:33.960323 2360 state_mem.go:36] "Initialized new in-memory state store" Jul 2 00:44:33.963928 kubelet[2360]: I0702 00:44:33.963872 2360 kubelet.go:393] "Attempting to sync node with API server" Jul 2 00:44:33.963928 kubelet[2360]: I0702 00:44:33.963929 2360 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 2 00:44:33.964077 kubelet[2360]: I0702 00:44:33.963996 2360 kubelet.go:309] "Adding apiserver pod source" Jul 2 00:44:33.964077 kubelet[2360]: I0702 00:44:33.964020 2360 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 2 00:44:33.968809 kubelet[2360]: W0702 00:44:33.968728 2360 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.31.16.66:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.16.66:6443: connect: connection refused Jul 2 00:44:33.968958 kubelet[2360]: E0702 00:44:33.968844 2360 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.16.66:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.16.66:6443: connect: connection refused Jul 2 00:44:33.969094 kubelet[2360]: I0702 00:44:33.969058 2360 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 2 00:44:33.983242 kubelet[2360]: W0702 00:44:33.983189 2360 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Jul 2 00:44:33.984250 kubelet[2360]: I0702 00:44:33.984207 2360 server.go:1232] "Started kubelet" Jul 2 00:44:33.990168 kubelet[2360]: W0702 00:44:33.990063 2360 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.31.16.66:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-16-66&limit=500&resourceVersion=0": dial tcp 172.31.16.66:6443: connect: connection refused Jul 2 00:44:33.990168 kubelet[2360]: E0702 00:44:33.990175 2360 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.16.66:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-16-66&limit=500&resourceVersion=0": dial tcp 172.31.16.66:6443: connect: connection refused Jul 2 00:44:33.990421 kubelet[2360]: E0702 00:44:33.990264 2360 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-16-66.17de3eb976be6ea1", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-16-66", UID:"ip-172-31-16-66", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-16-66"}, FirstTimestamp:time.Date(2024, time.July, 2, 0, 44, 33, 984171681, time.Local), LastTimestamp:time.Date(2024, time.July, 2, 0, 44, 33, 984171681, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"kubelet", ReportingInstance:"ip-172-31-16-66"}': 'Post "https://172.31.16.66:6443/api/v1/namespaces/default/events": dial tcp 172.31.16.66:6443: connect: connection refused'(may retry after sleeping) Jul 2 00:44:33.990570 kubelet[2360]: I0702 00:44:33.990458 2360 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Jul 2 00:44:33.991627 kubelet[2360]: I0702 00:44:33.991587 2360 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Jul 2 00:44:33.991821 kubelet[2360]: I0702 00:44:33.991780 2360 server.go:462] "Adding debug handlers to kubelet server" Jul 2 00:44:33.992414 kubelet[2360]: I0702 00:44:33.992385 2360 server.go:233] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 2 00:44:33.993524 kubelet[2360]: E0702 00:44:33.993487 2360 cri_stats_provider.go:448] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Jul 2 00:44:33.993807 kubelet[2360]: E0702 00:44:33.993784 2360 kubelet.go:1431] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 2 00:44:34.004008 kernel: kauditd_printk_skb: 173 callbacks suppressed Jul 2 00:44:34.004152 kernel: audit: type=1400 audit(1719881073.995:440): avc: denied { mac_admin } for pid=2360 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:33.995000 audit[2360]: AVC avc: denied { mac_admin } for pid=2360 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:34.004311 kubelet[2360]: I0702 00:44:33.995780 2360 kubelet.go:1386] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Jul 2 00:44:34.004311 kubelet[2360]: I0702 00:44:33.995849 2360 kubelet.go:1390] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Jul 2 00:44:34.004311 kubelet[2360]: I0702 00:44:33.995981 2360 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 2 00:44:34.006197 kubelet[2360]: I0702 00:44:34.006163 2360 volume_manager.go:291] "Starting Kubelet Volume Manager" Jul 2 00:44:34.010114 kernel: audit: type=1401 audit(1719881073.995:440): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 00:44:33.995000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 00:44:34.010345 kubelet[2360]: I0702 00:44:34.006550 2360 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Jul 2 00:44:34.010612 kubelet[2360]: I0702 00:44:34.010584 2360 reconciler_new.go:29] "Reconciler: start to sync state" Jul 2 00:44:33.995000 audit[2360]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000975050 a1=40009e03c0 a2=4000975020 a3=25 items=0 ppid=1 pid=2360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:34.021425 kernel: audit: type=1300 audit(1719881073.995:440): arch=c00000b7 syscall=5 success=no exit=-22 a0=4000975050 a1=40009e03c0 a2=4000975020 a3=25 items=0 ppid=1 pid=2360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:34.021741 kubelet[2360]: W0702 00:44:34.021632 2360 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.31.16.66:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.16.66:6443: connect: connection refused Jul 2 00:44:34.021847 kubelet[2360]: E0702 00:44:34.021762 2360 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.16.66:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.16.66:6443: connect: connection refused Jul 2 00:44:34.021967 kubelet[2360]: E0702 00:44:34.021923 2360 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.16.66:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-16-66?timeout=10s\": dial tcp 172.31.16.66:6443: connect: connection refused" interval="200ms" Jul 2 00:44:33.995000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 2 00:44:34.032387 kernel: audit: type=1327 audit(1719881073.995:440): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 2 00:44:33.995000 audit[2360]: AVC avc: denied { mac_admin } for pid=2360 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:34.041785 kernel: audit: type=1400 audit(1719881073.995:441): avc: denied { mac_admin } for pid=2360 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:34.048293 kernel: audit: type=1401 audit(1719881073.995:441): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 00:44:34.048380 kernel: audit: type=1300 audit(1719881073.995:441): arch=c00000b7 syscall=5 success=no exit=-22 a0=400083efe0 a1=40009e03d8 a2=40009750e0 a3=25 items=0 ppid=1 pid=2360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:33.995000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 00:44:33.995000 audit[2360]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=400083efe0 a1=40009e03d8 a2=40009750e0 a3=25 items=0 ppid=1 pid=2360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:34.059242 kernel: audit: type=1327 audit(1719881073.995:441): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 2 00:44:33.995000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 2 00:44:34.000000 audit[2370]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=2370 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 00:44:34.072938 kernel: audit: type=1325 audit(1719881074.000:442): table=mangle:26 family=2 entries=2 op=nft_register_chain pid=2370 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 00:44:34.073091 kubelet[2360]: I0702 00:44:34.073006 2360 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 2 00:44:34.000000 audit[2370]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffc98a7160 a2=0 a3=1 items=0 ppid=2360 pid=2370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:34.083078 kernel: audit: type=1300 audit(1719881074.000:442): arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffc98a7160 a2=0 a3=1 items=0 ppid=2360 pid=2370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:34.083265 kubelet[2360]: I0702 00:44:34.083221 2360 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 2 00:44:34.083265 kubelet[2360]: I0702 00:44:34.083265 2360 status_manager.go:217] "Starting to sync pod status with apiserver" Jul 2 00:44:34.083423 kubelet[2360]: I0702 00:44:34.083296 2360 kubelet.go:2303] "Starting kubelet main sync loop" Jul 2 00:44:34.083423 kubelet[2360]: E0702 00:44:34.083375 2360 kubelet.go:2327] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 2 00:44:34.000000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 2 00:44:34.002000 audit[2371]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=2371 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 00:44:34.002000 audit[2371]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff78f8050 a2=0 a3=1 items=0 ppid=2360 pid=2371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:34.002000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 2 00:44:34.010000 audit[2373]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=2373 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 00:44:34.010000 audit[2373]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffc2693c90 a2=0 a3=1 items=0 ppid=2360 pid=2373 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:34.010000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 2 00:44:34.015000 audit[2375]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=2375 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 00:44:34.015000 audit[2375]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffc33c3430 a2=0 a3=1 items=0 ppid=2360 pid=2375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:34.015000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 2 00:44:34.066000 audit[2382]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=2382 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 00:44:34.066000 audit[2382]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffcec0e820 a2=0 a3=1 items=0 ppid=2360 pid=2382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:34.066000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Jul 2 00:44:34.076000 audit[2383]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=2383 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 00:44:34.076000 audit[2383]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffcd952160 a2=0 a3=1 items=0 ppid=2360 pid=2383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:34.076000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 2 00:44:34.084000 audit[2384]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=2384 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 00:44:34.084000 audit[2384]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffda532380 a2=0 a3=1 items=0 ppid=2360 pid=2384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:34.084000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 2 00:44:34.088000 audit[2386]: NETFILTER_CFG table=mangle:33 family=10 entries=1 op=nft_register_chain pid=2386 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 00:44:34.088000 audit[2386]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc23bd6c0 a2=0 a3=1 items=0 ppid=2360 pid=2386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:34.088000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 2 00:44:34.091011 kubelet[2360]: W0702 00:44:34.090938 2360 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.31.16.66:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.16.66:6443: connect: connection refused Jul 2 00:44:34.091230 kubelet[2360]: E0702 00:44:34.091037 2360 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.16.66:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.16.66:6443: connect: connection refused Jul 2 00:44:34.091000 audit[2387]: NETFILTER_CFG table=nat:34 family=10 entries=2 op=nft_register_chain pid=2387 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 00:44:34.091000 audit[2387]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=ffffcc8bd9d0 a2=0 a3=1 items=0 ppid=2360 pid=2387 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:34.091000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 2 00:44:34.093000 audit[2388]: NETFILTER_CFG table=nat:35 family=2 entries=1 op=nft_register_chain pid=2388 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 00:44:34.093000 audit[2388]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff9ff10d0 a2=0 a3=1 items=0 ppid=2360 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:34.093000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 2 00:44:34.096000 audit[2389]: NETFILTER_CFG table=filter:36 family=10 entries=2 op=nft_register_chain pid=2389 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 00:44:34.096000 audit[2389]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=fffff376e8e0 a2=0 a3=1 items=0 ppid=2360 pid=2389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:34.096000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 2 00:44:34.097000 audit[2390]: NETFILTER_CFG table=filter:37 family=2 entries=1 op=nft_register_chain pid=2390 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 00:44:34.097000 audit[2390]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff2b04940 a2=0 a3=1 items=0 ppid=2360 pid=2390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:34.097000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 2 00:44:34.117367 kubelet[2360]: I0702 00:44:34.117221 2360 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-16-66" Jul 2 00:44:34.118163 kubelet[2360]: E0702 00:44:34.117727 2360 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.16.66:6443/api/v1/nodes\": dial tcp 172.31.16.66:6443: connect: connection refused" node="ip-172-31-16-66" Jul 2 00:44:34.118850 kubelet[2360]: I0702 00:44:34.118802 2360 cpu_manager.go:214] "Starting CPU manager" policy="none" Jul 2 00:44:34.118850 kubelet[2360]: I0702 00:44:34.118842 2360 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Jul 2 00:44:34.119022 kubelet[2360]: I0702 00:44:34.118877 2360 state_mem.go:36] "Initialized new in-memory state store" Jul 2 00:44:34.124353 kubelet[2360]: I0702 00:44:34.124304 2360 policy_none.go:49] "None policy: Start" Jul 2 00:44:34.125533 kubelet[2360]: I0702 00:44:34.125454 2360 memory_manager.go:169] "Starting memorymanager" policy="None" Jul 2 00:44:34.125696 kubelet[2360]: I0702 00:44:34.125550 2360 state_mem.go:35] "Initializing new in-memory state store" Jul 2 00:44:34.134656 systemd[1]: Created slice kubepods.slice. Jul 2 00:44:34.148039 systemd[1]: Created slice kubepods-burstable.slice. Jul 2 00:44:34.154714 systemd[1]: Created slice kubepods-besteffort.slice. Jul 2 00:44:34.160654 kubelet[2360]: I0702 00:44:34.160621 2360 manager.go:471] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 2 00:44:34.160000 audit[2360]: AVC avc: denied { mac_admin } for pid=2360 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:34.160000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 00:44:34.160000 audit[2360]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000f10ae0 a1=4000d8a078 a2=4000f10ab0 a3=25 items=0 ppid=1 pid=2360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:34.160000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 2 00:44:34.161265 kubelet[2360]: I0702 00:44:34.161242 2360 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Jul 2 00:44:34.161717 kubelet[2360]: I0702 00:44:34.161695 2360 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 2 00:44:34.166473 kubelet[2360]: E0702 00:44:34.166441 2360 eviction_manager.go:258] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ip-172-31-16-66\" not found" Jul 2 00:44:34.184058 kubelet[2360]: I0702 00:44:34.184023 2360 topology_manager.go:215] "Topology Admit Handler" podUID="2128607d3c6eaa0e00a32e5d60a26908" podNamespace="kube-system" podName="kube-apiserver-ip-172-31-16-66" Jul 2 00:44:34.186071 kubelet[2360]: I0702 00:44:34.186037 2360 topology_manager.go:215] "Topology Admit Handler" podUID="7422f9a140114c1f54cc31843af12e38" podNamespace="kube-system" podName="kube-controller-manager-ip-172-31-16-66" Jul 2 00:44:34.188296 kubelet[2360]: I0702 00:44:34.188263 2360 topology_manager.go:215] "Topology Admit Handler" podUID="131cb62ba4846bd7723e2cf7c6360d04" podNamespace="kube-system" podName="kube-scheduler-ip-172-31-16-66" Jul 2 00:44:34.198999 systemd[1]: Created slice kubepods-burstable-pod2128607d3c6eaa0e00a32e5d60a26908.slice. Jul 2 00:44:34.215299 kubelet[2360]: I0702 00:44:34.215250 2360 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/7422f9a140114c1f54cc31843af12e38-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-16-66\" (UID: \"7422f9a140114c1f54cc31843af12e38\") " pod="kube-system/kube-controller-manager-ip-172-31-16-66" Jul 2 00:44:34.215465 kubelet[2360]: I0702 00:44:34.215348 2360 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/2128607d3c6eaa0e00a32e5d60a26908-k8s-certs\") pod \"kube-apiserver-ip-172-31-16-66\" (UID: \"2128607d3c6eaa0e00a32e5d60a26908\") " pod="kube-system/kube-apiserver-ip-172-31-16-66" Jul 2 00:44:34.215465 kubelet[2360]: I0702 00:44:34.215431 2360 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/2128607d3c6eaa0e00a32e5d60a26908-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-16-66\" (UID: \"2128607d3c6eaa0e00a32e5d60a26908\") " pod="kube-system/kube-apiserver-ip-172-31-16-66" Jul 2 00:44:34.215583 kubelet[2360]: I0702 00:44:34.215485 2360 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/7422f9a140114c1f54cc31843af12e38-ca-certs\") pod \"kube-controller-manager-ip-172-31-16-66\" (UID: \"7422f9a140114c1f54cc31843af12e38\") " pod="kube-system/kube-controller-manager-ip-172-31-16-66" Jul 2 00:44:34.215583 kubelet[2360]: I0702 00:44:34.215557 2360 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/7422f9a140114c1f54cc31843af12e38-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-16-66\" (UID: \"7422f9a140114c1f54cc31843af12e38\") " pod="kube-system/kube-controller-manager-ip-172-31-16-66" Jul 2 00:44:34.215715 kubelet[2360]: I0702 00:44:34.215648 2360 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/7422f9a140114c1f54cc31843af12e38-k8s-certs\") pod \"kube-controller-manager-ip-172-31-16-66\" (UID: \"7422f9a140114c1f54cc31843af12e38\") " pod="kube-system/kube-controller-manager-ip-172-31-16-66" Jul 2 00:44:34.215782 kubelet[2360]: I0702 00:44:34.215720 2360 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/7422f9a140114c1f54cc31843af12e38-kubeconfig\") pod \"kube-controller-manager-ip-172-31-16-66\" (UID: \"7422f9a140114c1f54cc31843af12e38\") " pod="kube-system/kube-controller-manager-ip-172-31-16-66" Jul 2 00:44:34.215844 kubelet[2360]: I0702 00:44:34.215790 2360 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/131cb62ba4846bd7723e2cf7c6360d04-kubeconfig\") pod \"kube-scheduler-ip-172-31-16-66\" (UID: \"131cb62ba4846bd7723e2cf7c6360d04\") " pod="kube-system/kube-scheduler-ip-172-31-16-66" Jul 2 00:44:34.215911 kubelet[2360]: I0702 00:44:34.215836 2360 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/2128607d3c6eaa0e00a32e5d60a26908-ca-certs\") pod \"kube-apiserver-ip-172-31-16-66\" (UID: \"2128607d3c6eaa0e00a32e5d60a26908\") " pod="kube-system/kube-apiserver-ip-172-31-16-66" Jul 2 00:44:34.217479 systemd[1]: Created slice kubepods-burstable-pod7422f9a140114c1f54cc31843af12e38.slice. Jul 2 00:44:34.222730 kubelet[2360]: E0702 00:44:34.222694 2360 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.16.66:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-16-66?timeout=10s\": dial tcp 172.31.16.66:6443: connect: connection refused" interval="400ms" Jul 2 00:44:34.226712 systemd[1]: Created slice kubepods-burstable-pod131cb62ba4846bd7723e2cf7c6360d04.slice. Jul 2 00:44:34.320333 kubelet[2360]: I0702 00:44:34.320298 2360 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-16-66" Jul 2 00:44:34.321042 kubelet[2360]: E0702 00:44:34.320997 2360 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.16.66:6443/api/v1/nodes\": dial tcp 172.31.16.66:6443: connect: connection refused" node="ip-172-31-16-66" Jul 2 00:44:34.513731 env[1740]: time="2024-07-02T00:44:34.513339988Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-16-66,Uid:2128607d3c6eaa0e00a32e5d60a26908,Namespace:kube-system,Attempt:0,}" Jul 2 00:44:34.523519 env[1740]: time="2024-07-02T00:44:34.523447077Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-16-66,Uid:7422f9a140114c1f54cc31843af12e38,Namespace:kube-system,Attempt:0,}" Jul 2 00:44:34.531455 env[1740]: time="2024-07-02T00:44:34.531344210Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-16-66,Uid:131cb62ba4846bd7723e2cf7c6360d04,Namespace:kube-system,Attempt:0,}" Jul 2 00:44:34.624547 kubelet[2360]: E0702 00:44:34.624492 2360 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.16.66:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-16-66?timeout=10s\": dial tcp 172.31.16.66:6443: connect: connection refused" interval="800ms" Jul 2 00:44:34.723393 kubelet[2360]: I0702 00:44:34.723345 2360 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-16-66" Jul 2 00:44:34.723857 kubelet[2360]: E0702 00:44:34.723828 2360 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.16.66:6443/api/v1/nodes\": dial tcp 172.31.16.66:6443: connect: connection refused" node="ip-172-31-16-66" Jul 2 00:44:35.024795 kubelet[2360]: W0702 00:44:35.024661 2360 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.31.16.66:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.16.66:6443: connect: connection refused Jul 2 00:44:35.024795 kubelet[2360]: E0702 00:44:35.024751 2360 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.16.66:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.16.66:6443: connect: connection refused Jul 2 00:44:35.045145 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount631863795.mount: Deactivated successfully. Jul 2 00:44:35.057692 env[1740]: time="2024-07-02T00:44:35.057624226Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:44:35.059504 env[1740]: time="2024-07-02T00:44:35.059445523Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:44:35.062272 env[1740]: time="2024-07-02T00:44:35.062227238Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:44:35.065922 env[1740]: time="2024-07-02T00:44:35.065875197Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:44:35.067977 env[1740]: time="2024-07-02T00:44:35.067933613Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:44:35.070429 env[1740]: time="2024-07-02T00:44:35.070374399Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:44:35.074047 env[1740]: time="2024-07-02T00:44:35.073986379Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:44:35.080167 env[1740]: time="2024-07-02T00:44:35.080098430Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:44:35.086332 env[1740]: time="2024-07-02T00:44:35.086279308Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:44:35.087921 env[1740]: time="2024-07-02T00:44:35.087868838Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:44:35.089795 env[1740]: time="2024-07-02T00:44:35.089745821Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:44:35.091634 env[1740]: time="2024-07-02T00:44:35.091595237Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:44:35.166951 env[1740]: time="2024-07-02T00:44:35.166279085Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 00:44:35.166951 env[1740]: time="2024-07-02T00:44:35.166339559Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 00:44:35.166951 env[1740]: time="2024-07-02T00:44:35.166365445Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 00:44:35.166951 env[1740]: time="2024-07-02T00:44:35.166563608Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/0c7df603769c9fc3c9a705e4db6a0b4d96d1599fcc7c587ae6f4cb6f47331a29 pid=2409 runtime=io.containerd.runc.v2 Jul 2 00:44:35.166951 env[1740]: time="2024-07-02T00:44:35.165824589Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 00:44:35.166951 env[1740]: time="2024-07-02T00:44:35.165901792Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 00:44:35.166951 env[1740]: time="2024-07-02T00:44:35.165946472Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 00:44:35.174334 env[1740]: time="2024-07-02T00:44:35.168699732Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/79146da4b8d2d86eabc5178d6f1a824139565649074d0544ff678cdc4e915ef9 pid=2402 runtime=io.containerd.runc.v2 Jul 2 00:44:35.203753 systemd[1]: Started cri-containerd-79146da4b8d2d86eabc5178d6f1a824139565649074d0544ff678cdc4e915ef9.scope. Jul 2 00:44:35.222372 env[1740]: time="2024-07-02T00:44:35.205050744Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 00:44:35.222372 env[1740]: time="2024-07-02T00:44:35.211181337Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 00:44:35.222372 env[1740]: time="2024-07-02T00:44:35.211250835Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 00:44:35.222372 env[1740]: time="2024-07-02T00:44:35.212190335Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/283ba9d2d1a809f23b09dc04d4b0ba14d51e1c9755401458cf42c317e947e704 pid=2451 runtime=io.containerd.runc.v2 Jul 2 00:44:35.238381 systemd[1]: Started cri-containerd-0c7df603769c9fc3c9a705e4db6a0b4d96d1599fcc7c587ae6f4cb6f47331a29.scope. Jul 2 00:44:35.257051 kubelet[2360]: W0702 00:44:35.256878 2360 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.31.16.66:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.16.66:6443: connect: connection refused Jul 2 00:44:35.257051 kubelet[2360]: E0702 00:44:35.256998 2360 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.16.66:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.16.66:6443: connect: connection refused Jul 2 00:44:35.263000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.263000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.263000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.263000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.263000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.263000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.263000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.263000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.263000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.263000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.263000 audit: BPF prog-id=61 op=LOAD Jul 2 00:44:35.265000 audit[2424]: AVC avc: denied { bpf } for pid=2424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.265000 audit[2424]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2402 pid=2424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:35.265000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3739313436646134623864326438366561626335313738643666316138 Jul 2 00:44:35.266000 audit[2424]: AVC avc: denied { perfmon } for pid=2424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.266000 audit[2424]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2402 pid=2424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:35.266000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3739313436646134623864326438366561626335313738643666316138 Jul 2 00:44:35.266000 audit[2424]: AVC avc: denied { bpf } for pid=2424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.266000 audit[2424]: AVC avc: denied { bpf } for pid=2424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.266000 audit[2424]: AVC avc: denied { bpf } for pid=2424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.266000 audit[2424]: AVC avc: denied { perfmon } for pid=2424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.266000 audit[2424]: AVC avc: denied { perfmon } for pid=2424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.266000 audit[2424]: AVC avc: denied { perfmon } for pid=2424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.266000 audit[2424]: AVC avc: denied { perfmon } for pid=2424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.266000 audit[2424]: AVC avc: denied { perfmon } for pid=2424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.266000 audit[2424]: AVC avc: denied { bpf } for pid=2424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.266000 audit[2424]: AVC avc: denied { bpf } for pid=2424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.266000 audit: BPF prog-id=62 op=LOAD Jul 2 00:44:35.266000 audit[2424]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2402 pid=2424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:35.266000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3739313436646134623864326438366561626335313738643666316138 Jul 2 00:44:35.268000 audit[2424]: AVC avc: denied { bpf } for pid=2424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.268000 audit[2424]: AVC avc: denied { bpf } for pid=2424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.268000 audit[2424]: AVC avc: denied { perfmon } for pid=2424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.268000 audit[2424]: AVC avc: denied { perfmon } for pid=2424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.268000 audit[2424]: AVC avc: denied { perfmon } for pid=2424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.268000 audit[2424]: AVC avc: denied { perfmon } for pid=2424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.268000 audit[2424]: AVC avc: denied { perfmon } for pid=2424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.268000 audit[2424]: AVC avc: denied { bpf } for pid=2424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.268000 audit[2424]: AVC avc: denied { bpf } for pid=2424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.268000 audit: BPF prog-id=63 op=LOAD Jul 2 00:44:35.268000 audit[2424]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2402 pid=2424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:35.268000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3739313436646134623864326438366561626335313738643666316138 Jul 2 00:44:35.269000 audit: BPF prog-id=63 op=UNLOAD Jul 2 00:44:35.269000 audit: BPF prog-id=62 op=UNLOAD Jul 2 00:44:35.269000 audit[2424]: AVC avc: denied { bpf } for pid=2424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.269000 audit[2424]: AVC avc: denied { bpf } for pid=2424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.269000 audit[2424]: AVC avc: denied { bpf } for pid=2424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.269000 audit[2424]: AVC avc: denied { perfmon } for pid=2424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.269000 audit[2424]: AVC avc: denied { perfmon } for pid=2424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.269000 audit[2424]: AVC avc: denied { perfmon } for pid=2424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.269000 audit[2424]: AVC avc: denied { perfmon } for pid=2424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.269000 audit[2424]: AVC avc: denied { perfmon } for pid=2424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.269000 audit[2424]: AVC avc: denied { bpf } for pid=2424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.269000 audit[2424]: AVC avc: denied { bpf } for pid=2424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.269000 audit: BPF prog-id=64 op=LOAD Jul 2 00:44:35.269000 audit[2424]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2402 pid=2424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:35.269000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3739313436646134623864326438366561626335313738643666316138 Jul 2 00:44:35.286872 systemd[1]: Started cri-containerd-283ba9d2d1a809f23b09dc04d4b0ba14d51e1c9755401458cf42c317e947e704.scope. Jul 2 00:44:35.297000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.297000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.297000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.297000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.297000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.297000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.297000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.297000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.297000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.297000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.297000 audit: BPF prog-id=65 op=LOAD Jul 2 00:44:35.301000 audit[2426]: AVC avc: denied { bpf } for pid=2426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.301000 audit[2426]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2409 pid=2426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:35.301000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063376466363033373639633966633363396137303565346462366130 Jul 2 00:44:35.301000 audit[2426]: AVC avc: denied { perfmon } for pid=2426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.301000 audit[2426]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2409 pid=2426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:35.301000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063376466363033373639633966633363396137303565346462366130 Jul 2 00:44:35.302000 audit[2426]: AVC avc: denied { bpf } for pid=2426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.302000 audit[2426]: AVC avc: denied { bpf } for pid=2426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.302000 audit[2426]: AVC avc: denied { bpf } for pid=2426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.302000 audit[2426]: AVC avc: denied { perfmon } for pid=2426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.302000 audit[2426]: AVC avc: denied { perfmon } for pid=2426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.302000 audit[2426]: AVC avc: denied { perfmon } for pid=2426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.302000 audit[2426]: AVC avc: denied { perfmon } for pid=2426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.302000 audit[2426]: AVC avc: denied { perfmon } for pid=2426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.302000 audit[2426]: AVC avc: denied { bpf } for pid=2426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.302000 audit[2426]: AVC avc: denied { bpf } for pid=2426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.302000 audit: BPF prog-id=66 op=LOAD Jul 2 00:44:35.302000 audit[2426]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2409 pid=2426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:35.302000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063376466363033373639633966633363396137303565346462366130 Jul 2 00:44:35.303000 audit[2426]: AVC avc: denied { bpf } for pid=2426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.303000 audit[2426]: AVC avc: denied { bpf } for pid=2426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.303000 audit[2426]: AVC avc: denied { perfmon } for pid=2426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.303000 audit[2426]: AVC avc: denied { perfmon } for pid=2426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.303000 audit[2426]: AVC avc: denied { perfmon } for pid=2426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.303000 audit[2426]: AVC avc: denied { perfmon } for pid=2426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.303000 audit[2426]: AVC avc: denied { perfmon } for pid=2426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.303000 audit[2426]: AVC avc: denied { bpf } for pid=2426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.303000 audit[2426]: AVC avc: denied { bpf } for pid=2426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.303000 audit: BPF prog-id=67 op=LOAD Jul 2 00:44:35.303000 audit[2426]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2409 pid=2426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:35.303000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063376466363033373639633966633363396137303565346462366130 Jul 2 00:44:35.307000 audit: BPF prog-id=67 op=UNLOAD Jul 2 00:44:35.307000 audit: BPF prog-id=66 op=UNLOAD Jul 2 00:44:35.308000 audit[2426]: AVC avc: denied { bpf } for pid=2426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.308000 audit[2426]: AVC avc: denied { bpf } for pid=2426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.308000 audit[2426]: AVC avc: denied { bpf } for pid=2426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.308000 audit[2426]: AVC avc: denied { perfmon } for pid=2426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.308000 audit[2426]: AVC avc: denied { perfmon } for pid=2426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.308000 audit[2426]: AVC avc: denied { perfmon } for pid=2426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.308000 audit[2426]: AVC avc: denied { perfmon } for pid=2426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.308000 audit[2426]: AVC avc: denied { perfmon } for pid=2426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.308000 audit[2426]: AVC avc: denied { bpf } for pid=2426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.308000 audit[2426]: AVC avc: denied { bpf } for pid=2426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.308000 audit: BPF prog-id=68 op=LOAD Jul 2 00:44:35.308000 audit[2426]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2409 pid=2426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:35.308000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063376466363033373639633966633363396137303565346462366130 Jul 2 00:44:35.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.358000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.358000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.358000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.358000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.358000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.358000 audit: BPF prog-id=69 op=LOAD Jul 2 00:44:35.363000 audit[2472]: AVC avc: denied { bpf } for pid=2472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.363000 audit[2472]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2451 pid=2472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:35.363000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238336261396432643161383039663233623039646330346434623062 Jul 2 00:44:35.363000 audit[2472]: AVC avc: denied { perfmon } for pid=2472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.363000 audit[2472]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2451 pid=2472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:35.363000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238336261396432643161383039663233623039646330346434623062 Jul 2 00:44:35.364000 audit[2472]: AVC avc: denied { bpf } for pid=2472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.364000 audit[2472]: AVC avc: denied { bpf } for pid=2472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.364000 audit[2472]: AVC avc: denied { bpf } for pid=2472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.364000 audit[2472]: AVC avc: denied { perfmon } for pid=2472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.364000 audit[2472]: AVC avc: denied { perfmon } for pid=2472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.364000 audit[2472]: AVC avc: denied { perfmon } for pid=2472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.364000 audit[2472]: AVC avc: denied { perfmon } for pid=2472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.364000 audit[2472]: AVC avc: denied { perfmon } for pid=2472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.364000 audit[2472]: AVC avc: denied { bpf } for pid=2472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.364000 audit[2472]: AVC avc: denied { bpf } for pid=2472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.364000 audit: BPF prog-id=70 op=LOAD Jul 2 00:44:35.364000 audit[2472]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2451 pid=2472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:35.364000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238336261396432643161383039663233623039646330346434623062 Jul 2 00:44:35.368000 audit[2472]: AVC avc: denied { bpf } for pid=2472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.370306 env[1740]: time="2024-07-02T00:44:35.370239027Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-16-66,Uid:131cb62ba4846bd7723e2cf7c6360d04,Namespace:kube-system,Attempt:0,} returns sandbox id \"79146da4b8d2d86eabc5178d6f1a824139565649074d0544ff678cdc4e915ef9\"" Jul 2 00:44:35.368000 audit[2472]: AVC avc: denied { bpf } for pid=2472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.368000 audit[2472]: AVC avc: denied { perfmon } for pid=2472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.368000 audit[2472]: AVC avc: denied { perfmon } for pid=2472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.368000 audit[2472]: AVC avc: denied { perfmon } for pid=2472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.368000 audit[2472]: AVC avc: denied { perfmon } for pid=2472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.368000 audit[2472]: AVC avc: denied { perfmon } for pid=2472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.368000 audit[2472]: AVC avc: denied { bpf } for pid=2472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.368000 audit[2472]: AVC avc: denied { bpf } for pid=2472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.368000 audit: BPF prog-id=71 op=LOAD Jul 2 00:44:35.368000 audit[2472]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2451 pid=2472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:35.368000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238336261396432643161383039663233623039646330346434623062 Jul 2 00:44:35.374000 audit: BPF prog-id=71 op=UNLOAD Jul 2 00:44:35.375000 audit: BPF prog-id=70 op=UNLOAD Jul 2 00:44:35.375000 audit[2472]: AVC avc: denied { bpf } for pid=2472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.375000 audit[2472]: AVC avc: denied { bpf } for pid=2472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.375000 audit[2472]: AVC avc: denied { bpf } for pid=2472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.375000 audit[2472]: AVC avc: denied { perfmon } for pid=2472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.375000 audit[2472]: AVC avc: denied { perfmon } for pid=2472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.375000 audit[2472]: AVC avc: denied { perfmon } for pid=2472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.375000 audit[2472]: AVC avc: denied { perfmon } for pid=2472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.375000 audit[2472]: AVC avc: denied { perfmon } for pid=2472 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.377810 env[1740]: time="2024-07-02T00:44:35.377756139Z" level=info msg="CreateContainer within sandbox \"79146da4b8d2d86eabc5178d6f1a824139565649074d0544ff678cdc4e915ef9\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Jul 2 00:44:35.375000 audit[2472]: AVC avc: denied { bpf } for pid=2472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.375000 audit[2472]: AVC avc: denied { bpf } for pid=2472 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.375000 audit: BPF prog-id=72 op=LOAD Jul 2 00:44:35.375000 audit[2472]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2451 pid=2472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:35.375000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238336261396432643161383039663233623039646330346434623062 Jul 2 00:44:35.397388 env[1740]: time="2024-07-02T00:44:35.396921093Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-16-66,Uid:2128607d3c6eaa0e00a32e5d60a26908,Namespace:kube-system,Attempt:0,} returns sandbox id \"0c7df603769c9fc3c9a705e4db6a0b4d96d1599fcc7c587ae6f4cb6f47331a29\"" Jul 2 00:44:35.402808 env[1740]: time="2024-07-02T00:44:35.402735371Z" level=info msg="CreateContainer within sandbox \"0c7df603769c9fc3c9a705e4db6a0b4d96d1599fcc7c587ae6f4cb6f47331a29\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Jul 2 00:44:35.425586 kubelet[2360]: E0702 00:44:35.425517 2360 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.16.66:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-16-66?timeout=10s\": dial tcp 172.31.16.66:6443: connect: connection refused" interval="1.6s" Jul 2 00:44:35.440140 env[1740]: time="2024-07-02T00:44:35.440066962Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-16-66,Uid:7422f9a140114c1f54cc31843af12e38,Namespace:kube-system,Attempt:0,} returns sandbox id \"283ba9d2d1a809f23b09dc04d4b0ba14d51e1c9755401458cf42c317e947e704\"" Jul 2 00:44:35.446931 env[1740]: time="2024-07-02T00:44:35.446869416Z" level=info msg="CreateContainer within sandbox \"79146da4b8d2d86eabc5178d6f1a824139565649074d0544ff678cdc4e915ef9\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"4c7bd3d304d07dfe3aaaa1c7ecd00934c14c6710376b26708fd15fe6cdf957ae\"" Jul 2 00:44:35.447655 env[1740]: time="2024-07-02T00:44:35.447604776Z" level=info msg="CreateContainer within sandbox \"283ba9d2d1a809f23b09dc04d4b0ba14d51e1c9755401458cf42c317e947e704\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Jul 2 00:44:35.448501 env[1740]: time="2024-07-02T00:44:35.448446934Z" level=info msg="StartContainer for \"4c7bd3d304d07dfe3aaaa1c7ecd00934c14c6710376b26708fd15fe6cdf957ae\"" Jul 2 00:44:35.473866 env[1740]: time="2024-07-02T00:44:35.473800614Z" level=info msg="CreateContainer within sandbox \"0c7df603769c9fc3c9a705e4db6a0b4d96d1599fcc7c587ae6f4cb6f47331a29\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"61a41b2769551dcf57fa62c9ee55dca7c2600e052764f84fb0282d613cd3c02f\"" Jul 2 00:44:35.475258 env[1740]: time="2024-07-02T00:44:35.475114862Z" level=info msg="StartContainer for \"61a41b2769551dcf57fa62c9ee55dca7c2600e052764f84fb0282d613cd3c02f\"" Jul 2 00:44:35.476283 env[1740]: time="2024-07-02T00:44:35.476226362Z" level=info msg="CreateContainer within sandbox \"283ba9d2d1a809f23b09dc04d4b0ba14d51e1c9755401458cf42c317e947e704\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"8b362363a344fbefb5a16241d5c174d971674d94d18101ecf9b67aadde691fc3\"" Jul 2 00:44:35.477478 env[1740]: time="2024-07-02T00:44:35.477425723Z" level=info msg="StartContainer for \"8b362363a344fbefb5a16241d5c174d971674d94d18101ecf9b67aadde691fc3\"" Jul 2 00:44:35.488668 kubelet[2360]: W0702 00:44:35.488557 2360 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.31.16.66:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-16-66&limit=500&resourceVersion=0": dial tcp 172.31.16.66:6443: connect: connection refused Jul 2 00:44:35.488838 kubelet[2360]: E0702 00:44:35.488677 2360 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.16.66:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-16-66&limit=500&resourceVersion=0": dial tcp 172.31.16.66:6443: connect: connection refused Jul 2 00:44:35.497528 systemd[1]: Started cri-containerd-4c7bd3d304d07dfe3aaaa1c7ecd00934c14c6710376b26708fd15fe6cdf957ae.scope. Jul 2 00:44:35.526794 kubelet[2360]: I0702 00:44:35.526743 2360 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-16-66" Jul 2 00:44:35.530273 kubelet[2360]: E0702 00:44:35.527513 2360 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.16.66:6443/api/v1/nodes\": dial tcp 172.31.16.66:6443: connect: connection refused" node="ip-172-31-16-66" Jul 2 00:44:35.537153 systemd[1]: Started cri-containerd-8b362363a344fbefb5a16241d5c174d971674d94d18101ecf9b67aadde691fc3.scope. Jul 2 00:44:35.556000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.556000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.556000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.556000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.556000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.556000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.556000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.557000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.557000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.557000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.557000 audit: BPF prog-id=73 op=LOAD Jul 2 00:44:35.561000 audit[2525]: AVC avc: denied { bpf } for pid=2525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.561000 audit[2525]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=2402 pid=2525 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:35.561000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463376264336433303464303764666533616161613163376563643030 Jul 2 00:44:35.562000 audit[2525]: AVC avc: denied { perfmon } for pid=2525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.562000 audit[2525]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=2402 pid=2525 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:35.562000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463376264336433303464303764666533616161613163376563643030 Jul 2 00:44:35.565000 audit[2525]: AVC avc: denied { bpf } for pid=2525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.565000 audit[2525]: AVC avc: denied { bpf } for pid=2525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.565000 audit[2525]: AVC avc: denied { bpf } for pid=2525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.565000 audit[2525]: AVC avc: denied { perfmon } for pid=2525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.565000 audit[2525]: AVC avc: denied { perfmon } for pid=2525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.565000 audit[2525]: AVC avc: denied { perfmon } for pid=2525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.565000 audit[2525]: AVC avc: denied { perfmon } for pid=2525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.565000 audit[2525]: AVC avc: denied { perfmon } for pid=2525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.565000 audit[2525]: AVC avc: denied { bpf } for pid=2525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.565000 audit[2525]: AVC avc: denied { bpf } for pid=2525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.565000 audit: BPF prog-id=74 op=LOAD Jul 2 00:44:35.565000 audit[2525]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=2402 pid=2525 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:35.565000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463376264336433303464303764666533616161613163376563643030 Jul 2 00:44:35.568000 audit[2525]: AVC avc: denied { bpf } for pid=2525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.568000 audit[2525]: AVC avc: denied { bpf } for pid=2525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.568000 audit[2525]: AVC avc: denied { perfmon } for pid=2525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.568000 audit[2525]: AVC avc: denied { perfmon } for pid=2525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.568000 audit[2525]: AVC avc: denied { perfmon } for pid=2525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.568000 audit[2525]: AVC avc: denied { perfmon } for pid=2525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.568000 audit[2525]: AVC avc: denied { perfmon } for pid=2525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.568000 audit[2525]: AVC avc: denied { bpf } for pid=2525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.568000 audit[2525]: AVC avc: denied { bpf } for pid=2525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.568000 audit: BPF prog-id=75 op=LOAD Jul 2 00:44:35.568000 audit[2525]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=2402 pid=2525 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:35.568000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463376264336433303464303764666533616161613163376563643030 Jul 2 00:44:35.568000 audit: BPF prog-id=75 op=UNLOAD Jul 2 00:44:35.568000 audit: BPF prog-id=74 op=UNLOAD Jul 2 00:44:35.568000 audit[2525]: AVC avc: denied { bpf } for pid=2525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.568000 audit[2525]: AVC avc: denied { bpf } for pid=2525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.568000 audit[2525]: AVC avc: denied { bpf } for pid=2525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.568000 audit[2525]: AVC avc: denied { perfmon } for pid=2525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.568000 audit[2525]: AVC avc: denied { perfmon } for pid=2525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.568000 audit[2525]: AVC avc: denied { perfmon } for pid=2525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.568000 audit[2525]: AVC avc: denied { perfmon } for pid=2525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.568000 audit[2525]: AVC avc: denied { perfmon } for pid=2525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.568000 audit[2525]: AVC avc: denied { bpf } for pid=2525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.568000 audit[2525]: AVC avc: denied { bpf } for pid=2525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.568000 audit: BPF prog-id=76 op=LOAD Jul 2 00:44:35.568000 audit[2525]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=2402 pid=2525 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:35.568000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463376264336433303464303764666533616161613163376563643030 Jul 2 00:44:35.602810 systemd[1]: Started cri-containerd-61a41b2769551dcf57fa62c9ee55dca7c2600e052764f84fb0282d613cd3c02f.scope. Jul 2 00:44:35.621335 kubelet[2360]: W0702 00:44:35.620344 2360 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.31.16.66:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.16.66:6443: connect: connection refused Jul 2 00:44:35.621335 kubelet[2360]: E0702 00:44:35.620447 2360 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.16.66:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.16.66:6443: connect: connection refused Jul 2 00:44:35.633000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.633000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.633000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.633000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.633000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.633000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.633000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.633000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.634000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.634000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.634000 audit: BPF prog-id=77 op=LOAD Jul 2 00:44:35.635000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.635000 audit[2552]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400014db38 a2=10 a3=0 items=0 ppid=2451 pid=2552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:35.635000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862333632333633613334346662656662356131363234316435633137 Jul 2 00:44:35.635000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.635000 audit[2552]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=2451 pid=2552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:35.635000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862333632333633613334346662656662356131363234316435633137 Jul 2 00:44:35.636000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.636000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.636000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.636000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.636000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.636000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.636000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.636000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.636000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.636000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.636000 audit: BPF prog-id=78 op=LOAD Jul 2 00:44:35.636000 audit[2552]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=2451 pid=2552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:35.636000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862333632333633613334346662656662356131363234316435633137 Jul 2 00:44:35.637000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.637000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.637000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.637000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.637000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.637000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.637000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.637000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.637000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.637000 audit: BPF prog-id=79 op=LOAD Jul 2 00:44:35.637000 audit[2552]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=2451 pid=2552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:35.637000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862333632333633613334346662656662356131363234316435633137 Jul 2 00:44:35.641000 audit: BPF prog-id=79 op=UNLOAD Jul 2 00:44:35.641000 audit: BPF prog-id=78 op=UNLOAD Jul 2 00:44:35.641000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.641000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.641000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.641000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.641000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.641000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.641000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.641000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.641000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.641000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.641000 audit: BPF prog-id=80 op=LOAD Jul 2 00:44:35.641000 audit[2552]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=2451 pid=2552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:35.641000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862333632333633613334346662656662356131363234316435633137 Jul 2 00:44:35.657399 env[1740]: time="2024-07-02T00:44:35.657329059Z" level=info msg="StartContainer for \"4c7bd3d304d07dfe3aaaa1c7ecd00934c14c6710376b26708fd15fe6cdf957ae\" returns successfully" Jul 2 00:44:35.662000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.662000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.662000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.662000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.662000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.662000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.662000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.662000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.662000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.662000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.662000 audit: BPF prog-id=81 op=LOAD Jul 2 00:44:35.663000 audit[2557]: AVC avc: denied { bpf } for pid=2557 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.663000 audit[2557]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2409 pid=2557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:35.663000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631613431623237363935353164636635376661363263396565353564 Jul 2 00:44:35.664000 audit[2557]: AVC avc: denied { perfmon } for pid=2557 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.664000 audit[2557]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2409 pid=2557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:35.664000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631613431623237363935353164636635376661363263396565353564 Jul 2 00:44:35.664000 audit[2557]: AVC avc: denied { bpf } for pid=2557 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.664000 audit[2557]: AVC avc: denied { bpf } for pid=2557 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.664000 audit[2557]: AVC avc: denied { bpf } for pid=2557 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.664000 audit[2557]: AVC avc: denied { perfmon } for pid=2557 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.664000 audit[2557]: AVC avc: denied { perfmon } for pid=2557 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.664000 audit[2557]: AVC avc: denied { perfmon } for pid=2557 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.664000 audit[2557]: AVC avc: denied { perfmon } for pid=2557 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.664000 audit[2557]: AVC avc: denied { perfmon } for pid=2557 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.664000 audit[2557]: AVC avc: denied { bpf } for pid=2557 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.664000 audit[2557]: AVC avc: denied { bpf } for pid=2557 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.664000 audit: BPF prog-id=82 op=LOAD Jul 2 00:44:35.664000 audit[2557]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2409 pid=2557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:35.664000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631613431623237363935353164636635376661363263396565353564 Jul 2 00:44:35.666000 audit[2557]: AVC avc: denied { bpf } for pid=2557 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.666000 audit[2557]: AVC avc: denied { bpf } for pid=2557 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.666000 audit[2557]: AVC avc: denied { perfmon } for pid=2557 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.666000 audit[2557]: AVC avc: denied { perfmon } for pid=2557 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.666000 audit[2557]: AVC avc: denied { perfmon } for pid=2557 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.666000 audit[2557]: AVC avc: denied { perfmon } for pid=2557 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.666000 audit[2557]: AVC avc: denied { perfmon } for pid=2557 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.666000 audit[2557]: AVC avc: denied { bpf } for pid=2557 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.666000 audit[2557]: AVC avc: denied { bpf } for pid=2557 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.666000 audit: BPF prog-id=83 op=LOAD Jul 2 00:44:35.666000 audit[2557]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2409 pid=2557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:35.666000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631613431623237363935353164636635376661363263396565353564 Jul 2 00:44:35.669000 audit: BPF prog-id=83 op=UNLOAD Jul 2 00:44:35.669000 audit: BPF prog-id=82 op=UNLOAD Jul 2 00:44:35.670000 audit[2557]: AVC avc: denied { bpf } for pid=2557 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.670000 audit[2557]: AVC avc: denied { bpf } for pid=2557 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.670000 audit[2557]: AVC avc: denied { bpf } for pid=2557 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.670000 audit[2557]: AVC avc: denied { perfmon } for pid=2557 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.670000 audit[2557]: AVC avc: denied { perfmon } for pid=2557 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.670000 audit[2557]: AVC avc: denied { perfmon } for pid=2557 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.670000 audit[2557]: AVC avc: denied { perfmon } for pid=2557 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.670000 audit[2557]: AVC avc: denied { perfmon } for pid=2557 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.670000 audit[2557]: AVC avc: denied { bpf } for pid=2557 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.670000 audit[2557]: AVC avc: denied { bpf } for pid=2557 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:35.670000 audit: BPF prog-id=84 op=LOAD Jul 2 00:44:35.670000 audit[2557]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2409 pid=2557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:35.670000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631613431623237363935353164636635376661363263396565353564 Jul 2 00:44:35.736308 env[1740]: time="2024-07-02T00:44:35.736214564Z" level=info msg="StartContainer for \"8b362363a344fbefb5a16241d5c174d971674d94d18101ecf9b67aadde691fc3\" returns successfully" Jul 2 00:44:35.750842 env[1740]: time="2024-07-02T00:44:35.750774742Z" level=info msg="StartContainer for \"61a41b2769551dcf57fa62c9ee55dca7c2600e052764f84fb0282d613cd3c02f\" returns successfully" Jul 2 00:44:37.132973 kubelet[2360]: I0702 00:44:37.132922 2360 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-16-66" Jul 2 00:44:37.462286 update_engine[1728]: I0702 00:44:37.461580 1728 update_attempter.cc:509] Updating boot flags... Jul 2 00:44:39.251397 amazon-ssm-agent[1714]: 2024-07-02 00:44:39 INFO [MessagingDeliveryService] [Association] Schedule manager refreshed with 0 associations, 0 new associations associated Jul 2 00:44:39.364000 audit[2578]: AVC avc: denied { watch } for pid=2578 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6358 scontext=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 00:44:39.367103 kernel: kauditd_printk_skb: 380 callbacks suppressed Jul 2 00:44:39.367258 kernel: audit: type=1400 audit(1719881079.364:563): avc: denied { watch } for pid=2578 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6358 scontext=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 00:44:39.364000 audit[2578]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000077800 a2=fc6 a3=0 items=0 ppid=2451 pid=2578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 key=(null) Jul 2 00:44:39.386891 kernel: audit: type=1300 audit(1719881079.364:563): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000077800 a2=fc6 a3=0 items=0 ppid=2451 pid=2578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 key=(null) Jul 2 00:44:39.364000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 00:44:39.402238 kernel: audit: type=1327 audit(1719881079.364:563): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 00:44:39.365000 audit[2578]: AVC avc: denied { watch } for pid=2578 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6343 scontext=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 00:44:39.412304 kernel: audit: type=1400 audit(1719881079.365:564): avc: denied { watch } for pid=2578 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6343 scontext=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 00:44:39.365000 audit[2578]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40000f4220 a2=fc6 a3=0 items=0 ppid=2451 pid=2578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 key=(null) Jul 2 00:44:39.425041 kernel: audit: type=1300 audit(1719881079.365:564): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40000f4220 a2=fc6 a3=0 items=0 ppid=2451 pid=2578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 key=(null) Jul 2 00:44:39.365000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 00:44:39.435884 kernel: audit: type=1327 audit(1719881079.365:564): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 00:44:40.001000 audit[2586]: AVC avc: denied { watch } for pid=2586 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6358 scontext=system_u:system_r:svirt_lxc_net_t:s0:c247,c463 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 00:44:40.001000 audit[2586]: AVC avc: denied { watch } for pid=2586 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=6345 scontext=system_u:system_r:svirt_lxc_net_t:s0:c247,c463 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 00:44:40.021674 kernel: audit: type=1400 audit(1719881080.001:565): avc: denied { watch } for pid=2586 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6358 scontext=system_u:system_r:svirt_lxc_net_t:s0:c247,c463 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 00:44:40.021845 kernel: audit: type=1400 audit(1719881080.001:566): avc: denied { watch } for pid=2586 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=6345 scontext=system_u:system_r:svirt_lxc_net_t:s0:c247,c463 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 00:44:40.001000 audit[2586]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=4006267fb0 a2=fc6 a3=0 items=0 ppid=2409 pid=2586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c247,c463 key=(null) Jul 2 00:44:40.037915 kernel: audit: type=1300 audit(1719881080.001:566): arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=4006267fb0 a2=fc6 a3=0 items=0 ppid=2409 pid=2586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c247,c463 key=(null) Jul 2 00:44:40.001000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3636002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 00:44:40.072038 kernel: audit: type=1327 audit(1719881080.001:566): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3636002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 00:44:40.001000 audit[2586]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=4002962d20 a2=fc6 a3=0 items=0 ppid=2409 pid=2586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c247,c463 key=(null) Jul 2 00:44:40.001000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3636002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 00:44:40.010000 audit[2586]: AVC avc: denied { watch } for pid=2586 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6343 scontext=system_u:system_r:svirt_lxc_net_t:s0:c247,c463 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 00:44:40.010000 audit[2586]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=400096a5a0 a2=fc6 a3=0 items=0 ppid=2409 pid=2586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c247,c463 key=(null) Jul 2 00:44:40.010000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3636002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 00:44:40.023000 audit[2586]: AVC avc: denied { watch } for pid=2586 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=6360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c247,c463 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 00:44:40.023000 audit[2586]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=400327ea80 a2=fc6 a3=0 items=0 ppid=2409 pid=2586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c247,c463 key=(null) Jul 2 00:44:40.023000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3636002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 00:44:40.059000 audit[2586]: AVC avc: denied { watch } for pid=2586 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6343 scontext=system_u:system_r:svirt_lxc_net_t:s0:c247,c463 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 00:44:40.059000 audit[2586]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=68 a1=400239d820 a2=fc6 a3=0 items=0 ppid=2409 pid=2586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c247,c463 key=(null) Jul 2 00:44:40.059000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3636002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 00:44:40.059000 audit[2586]: AVC avc: denied { watch } for pid=2586 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6358 scontext=system_u:system_r:svirt_lxc_net_t:s0:c247,c463 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 00:44:40.059000 audit[2586]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=68 a1=4006799620 a2=fc6 a3=0 items=0 ppid=2409 pid=2586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c247,c463 key=(null) Jul 2 00:44:40.059000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3636002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 00:44:40.368303 kubelet[2360]: E0702 00:44:40.368244 2360 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ip-172-31-16-66\" not found" node="ip-172-31-16-66" Jul 2 00:44:40.430325 kubelet[2360]: I0702 00:44:40.430251 2360 kubelet_node_status.go:73] "Successfully registered node" node="ip-172-31-16-66" Jul 2 00:44:40.972273 kubelet[2360]: I0702 00:44:40.972214 2360 apiserver.go:52] "Watching apiserver" Jul 2 00:44:41.010825 kubelet[2360]: I0702 00:44:41.010781 2360 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Jul 2 00:44:43.121251 systemd[1]: Reloading. Jul 2 00:44:43.275904 /usr/lib/systemd/system-generators/torcx-generator[2832]: time="2024-07-02T00:44:43Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.5 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.5 /var/lib/torcx/store]" Jul 2 00:44:43.275969 /usr/lib/systemd/system-generators/torcx-generator[2832]: time="2024-07-02T00:44:43Z" level=info msg="torcx already run" Jul 2 00:44:43.463833 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 2 00:44:43.464576 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 2 00:44:43.505973 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 2 00:44:43.712000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.712000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.712000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.712000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.712000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.712000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.712000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.712000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.712000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.712000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.712000 audit: BPF prog-id=85 op=LOAD Jul 2 00:44:43.712000 audit: BPF prog-id=46 op=UNLOAD Jul 2 00:44:43.712000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.713000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.713000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.713000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.713000 audit: BPF prog-id=86 op=LOAD Jul 2 00:44:43.713000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.713000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.713000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.713000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.713000 audit: BPF prog-id=87 op=LOAD Jul 2 00:44:43.713000 audit: BPF prog-id=47 op=UNLOAD Jul 2 00:44:43.713000 audit: BPF prog-id=48 op=UNLOAD Jul 2 00:44:43.714000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.714000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.714000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.714000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.714000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.714000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.714000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.714000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.714000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.714000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.714000 audit: BPF prog-id=88 op=LOAD Jul 2 00:44:43.714000 audit: BPF prog-id=73 op=UNLOAD Jul 2 00:44:43.715000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.715000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.715000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.715000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.715000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.715000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.715000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.715000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.715000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.715000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.715000 audit: BPF prog-id=89 op=LOAD Jul 2 00:44:43.715000 audit: BPF prog-id=61 op=UNLOAD Jul 2 00:44:43.716000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.716000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.716000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.716000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.716000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.716000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.716000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.716000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.716000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.716000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.716000 audit: BPF prog-id=90 op=LOAD Jul 2 00:44:43.716000 audit: BPF prog-id=49 op=UNLOAD Jul 2 00:44:43.716000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.716000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.716000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.716000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.716000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.716000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.716000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.716000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.716000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.716000 audit: BPF prog-id=91 op=LOAD Jul 2 00:44:43.716000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.716000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.716000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.716000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.716000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.716000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.716000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.716000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.716000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.716000 audit: BPF prog-id=92 op=LOAD Jul 2 00:44:43.716000 audit: BPF prog-id=50 op=UNLOAD Jul 2 00:44:43.716000 audit: BPF prog-id=51 op=UNLOAD Jul 2 00:44:43.717000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.717000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.717000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.717000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.717000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.717000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.717000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.717000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.717000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.717000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.717000 audit: BPF prog-id=93 op=LOAD Jul 2 00:44:43.717000 audit: BPF prog-id=77 op=UNLOAD Jul 2 00:44:43.718000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.718000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.718000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.718000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.718000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.718000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.718000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.718000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.718000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.718000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.718000 audit: BPF prog-id=94 op=LOAD Jul 2 00:44:43.719000 audit: BPF prog-id=52 op=UNLOAD Jul 2 00:44:43.720000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.720000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.720000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.720000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.720000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.720000 audit: BPF prog-id=95 op=LOAD Jul 2 00:44:43.720000 audit: BPF prog-id=81 op=UNLOAD Jul 2 00:44:43.721000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.721000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.721000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.721000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.721000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.721000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.721000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.721000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.721000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.721000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.721000 audit: BPF prog-id=96 op=LOAD Jul 2 00:44:43.721000 audit: BPF prog-id=69 op=UNLOAD Jul 2 00:44:43.722000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.722000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.722000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.722000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.722000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.722000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.722000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.722000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.722000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.723000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.723000 audit: BPF prog-id=97 op=LOAD Jul 2 00:44:43.723000 audit: BPF prog-id=53 op=UNLOAD Jul 2 00:44:43.724000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.724000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.724000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.724000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.724000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.724000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.724000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.724000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.724000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.724000 audit: BPF prog-id=98 op=LOAD Jul 2 00:44:43.724000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.724000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.724000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.724000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.724000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.724000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.724000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.724000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.724000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.724000 audit: BPF prog-id=99 op=LOAD Jul 2 00:44:43.724000 audit: BPF prog-id=54 op=UNLOAD Jul 2 00:44:43.724000 audit: BPF prog-id=55 op=UNLOAD Jul 2 00:44:43.731000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.731000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.731000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.731000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.732000 audit: BPF prog-id=100 op=LOAD Jul 2 00:44:43.732000 audit: BPF prog-id=56 op=UNLOAD Jul 2 00:44:43.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.732000 audit: BPF prog-id=101 op=LOAD Jul 2 00:44:43.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.732000 audit: BPF prog-id=102 op=LOAD Jul 2 00:44:43.732000 audit: BPF prog-id=57 op=UNLOAD Jul 2 00:44:43.732000 audit: BPF prog-id=58 op=UNLOAD Jul 2 00:44:43.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.737000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.737000 audit: BPF prog-id=103 op=LOAD Jul 2 00:44:43.737000 audit: BPF prog-id=59 op=UNLOAD Jul 2 00:44:43.746000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.746000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.746000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.746000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.746000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.746000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.746000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.746000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.746000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.746000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.746000 audit: BPF prog-id=104 op=LOAD Jul 2 00:44:43.746000 audit: BPF prog-id=65 op=UNLOAD Jul 2 00:44:43.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:43.747000 audit: BPF prog-id=105 op=LOAD Jul 2 00:44:43.747000 audit: BPF prog-id=60 op=UNLOAD Jul 2 00:44:43.775969 kubelet[2360]: I0702 00:44:43.775918 2360 dynamic_cafile_content.go:171] "Shutting down controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 2 00:44:43.780993 systemd[1]: Stopping kubelet.service... Jul 2 00:44:43.797838 systemd[1]: kubelet.service: Deactivated successfully. Jul 2 00:44:43.797000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:44:43.798313 systemd[1]: Stopped kubelet.service. Jul 2 00:44:43.798401 systemd[1]: kubelet.service: Consumed 2.324s CPU time. Jul 2 00:44:43.801655 systemd[1]: Starting kubelet.service... Jul 2 00:44:44.302000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:44:44.302241 systemd[1]: Started kubelet.service. Jul 2 00:44:44.443331 kubelet[2892]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 2 00:44:44.443331 kubelet[2892]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Jul 2 00:44:44.443331 kubelet[2892]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 2 00:44:44.443974 kubelet[2892]: I0702 00:44:44.443393 2892 server.go:203] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 2 00:44:44.452888 kubelet[2892]: I0702 00:44:44.452789 2892 server.go:467] "Kubelet version" kubeletVersion="v1.28.7" Jul 2 00:44:44.453111 kubelet[2892]: I0702 00:44:44.453081 2892 server.go:469] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 2 00:44:44.453652 kubelet[2892]: I0702 00:44:44.453611 2892 server.go:895] "Client rotation is on, will bootstrap in background" Jul 2 00:44:44.463506 kubelet[2892]: I0702 00:44:44.463460 2892 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Jul 2 00:44:44.469027 kubelet[2892]: I0702 00:44:44.468452 2892 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 2 00:44:44.520542 kubelet[2892]: W0702 00:44:44.520348 2892 machine.go:65] Cannot read vendor id correctly, set empty. Jul 2 00:44:44.522088 kubelet[2892]: I0702 00:44:44.522034 2892 server.go:725] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 2 00:44:44.527189 kubelet[2892]: I0702 00:44:44.523940 2892 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 2 00:44:44.527189 kubelet[2892]: I0702 00:44:44.524297 2892 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Jul 2 00:44:44.527189 kubelet[2892]: I0702 00:44:44.524359 2892 topology_manager.go:138] "Creating topology manager with none policy" Jul 2 00:44:44.527189 kubelet[2892]: I0702 00:44:44.524381 2892 container_manager_linux.go:301] "Creating device plugin manager" Jul 2 00:44:44.527189 kubelet[2892]: I0702 00:44:44.524449 2892 state_mem.go:36] "Initialized new in-memory state store" Jul 2 00:44:44.527189 kubelet[2892]: I0702 00:44:44.524631 2892 kubelet.go:393] "Attempting to sync node with API server" Jul 2 00:44:44.527971 kubelet[2892]: I0702 00:44:44.524699 2892 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 2 00:44:44.527971 kubelet[2892]: I0702 00:44:44.524755 2892 kubelet.go:309] "Adding apiserver pod source" Jul 2 00:44:44.527971 kubelet[2892]: I0702 00:44:44.524780 2892 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 2 00:44:44.531410 kubelet[2892]: I0702 00:44:44.531362 2892 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 2 00:44:44.536013 kubelet[2892]: I0702 00:44:44.535965 2892 server.go:1232] "Started kubelet" Jul 2 00:44:44.552432 kubelet[2892]: I0702 00:44:44.546831 2892 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Jul 2 00:44:44.552432 kubelet[2892]: I0702 00:44:44.547285 2892 server.go:233] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 2 00:44:44.552432 kubelet[2892]: I0702 00:44:44.547381 2892 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Jul 2 00:44:44.552432 kubelet[2892]: I0702 00:44:44.548789 2892 server.go:462] "Adding debug handlers to kubelet server" Jul 2 00:44:44.557225 kubelet[2892]: E0702 00:44:44.554378 2892 cri_stats_provider.go:448] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Jul 2 00:44:44.557225 kubelet[2892]: E0702 00:44:44.554461 2892 kubelet.go:1431] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 2 00:44:44.564000 audit[2892]: AVC avc: denied { mac_admin } for pid=2892 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:44.568138 kernel: kauditd_printk_skb: 260 callbacks suppressed Jul 2 00:44:44.568208 kernel: audit: type=1400 audit(1719881084.564:817): avc: denied { mac_admin } for pid=2892 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:44.568354 kubelet[2892]: I0702 00:44:44.568314 2892 kubelet.go:1386] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Jul 2 00:44:44.568562 kubelet[2892]: I0702 00:44:44.568535 2892 kubelet.go:1390] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Jul 2 00:44:44.568734 kubelet[2892]: I0702 00:44:44.568710 2892 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 2 00:44:44.564000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 00:44:44.584337 kernel: audit: type=1401 audit(1719881084.564:817): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 00:44:44.564000 audit[2892]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=400098ced0 a1=4000a269a8 a2=400098cea0 a3=25 items=0 ppid=1 pid=2892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:44.597087 kernel: audit: type=1300 audit(1719881084.564:817): arch=c00000b7 syscall=5 success=no exit=-22 a0=400098ced0 a1=4000a269a8 a2=400098cea0 a3=25 items=0 ppid=1 pid=2892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:44.564000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 2 00:44:44.610045 kubelet[2892]: I0702 00:44:44.609990 2892 volume_manager.go:291] "Starting Kubelet Volume Manager" Jul 2 00:44:44.614789 kernel: audit: type=1327 audit(1719881084.564:817): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 2 00:44:44.616715 kubelet[2892]: I0702 00:44:44.615348 2892 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Jul 2 00:44:44.566000 audit[2892]: AVC avc: denied { mac_admin } for pid=2892 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:44.622515 kubelet[2892]: I0702 00:44:44.617326 2892 reconciler_new.go:29] "Reconciler: start to sync state" Jul 2 00:44:44.629153 kernel: audit: type=1400 audit(1719881084.566:818): avc: denied { mac_admin } for pid=2892 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:44.566000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 00:44:44.639677 kernel: audit: type=1401 audit(1719881084.566:818): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 00:44:44.566000 audit[2892]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40009666c0 a1=4000a269c0 a2=400098cf60 a3=25 items=0 ppid=1 pid=2892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:44.654843 kernel: audit: type=1300 audit(1719881084.566:818): arch=c00000b7 syscall=5 success=no exit=-22 a0=40009666c0 a1=4000a269c0 a2=400098cf60 a3=25 items=0 ppid=1 pid=2892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:44.566000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 2 00:44:44.669079 kubelet[2892]: I0702 00:44:44.669043 2892 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 2 00:44:44.675293 kernel: audit: type=1327 audit(1719881084.566:818): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 2 00:44:44.676588 kubelet[2892]: I0702 00:44:44.676547 2892 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 2 00:44:44.676810 kubelet[2892]: I0702 00:44:44.676785 2892 status_manager.go:217] "Starting to sync pod status with apiserver" Jul 2 00:44:44.676957 kubelet[2892]: I0702 00:44:44.676933 2892 kubelet.go:2303] "Starting kubelet main sync loop" Jul 2 00:44:44.678360 kubelet[2892]: E0702 00:44:44.678333 2892 kubelet.go:2327] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 2 00:44:44.746873 kubelet[2892]: E0702 00:44:44.746330 2892 container_manager_linux.go:881] "Unable to get rootfs data from cAdvisor interface" err="unable to find data in memory cache" Jul 2 00:44:44.757901 kubelet[2892]: I0702 00:44:44.757017 2892 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-16-66" Jul 2 00:44:44.779671 kubelet[2892]: E0702 00:44:44.779631 2892 kubelet.go:2327] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Jul 2 00:44:44.791695 kubelet[2892]: I0702 00:44:44.791637 2892 kubelet_node_status.go:108] "Node was previously registered" node="ip-172-31-16-66" Jul 2 00:44:44.791873 kubelet[2892]: I0702 00:44:44.791776 2892 kubelet_node_status.go:73] "Successfully registered node" node="ip-172-31-16-66" Jul 2 00:44:44.834000 audit[2578]: AVC avc: denied { watch } for pid=2578 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 2 00:44:44.834000 audit[2578]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000bfcd80 a2=fc6 a3=0 items=0 ppid=2451 pid=2578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 key=(null) Jul 2 00:44:44.862949 kernel: audit: type=1400 audit(1719881084.834:819): avc: denied { watch } for pid=2578 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 2 00:44:44.863082 kernel: audit: type=1300 audit(1719881084.834:819): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000bfcd80 a2=fc6 a3=0 items=0 ppid=2451 pid=2578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 key=(null) Jul 2 00:44:44.834000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 00:44:44.981927 kubelet[2892]: E0702 00:44:44.981865 2892 kubelet.go:2327] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Jul 2 00:44:45.034000 audit[2578]: AVC avc: denied { watch } for pid=2578 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6343 scontext=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 00:44:45.034000 audit[2578]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400087cc40 a2=fc6 a3=0 items=0 ppid=2451 pid=2578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 key=(null) Jul 2 00:44:45.034000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 00:44:45.036448 kubelet[2892]: I0702 00:44:45.036345 2892 cpu_manager.go:214] "Starting CPU manager" policy="none" Jul 2 00:44:45.036448 kubelet[2892]: I0702 00:44:45.036376 2892 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Jul 2 00:44:45.036448 kubelet[2892]: I0702 00:44:45.036406 2892 state_mem.go:36] "Initialized new in-memory state store" Jul 2 00:44:45.036684 kubelet[2892]: I0702 00:44:45.036639 2892 state_mem.go:88] "Updated default CPUSet" cpuSet="" Jul 2 00:44:45.036756 kubelet[2892]: I0702 00:44:45.036692 2892 state_mem.go:96] "Updated CPUSet assignments" assignments={} Jul 2 00:44:45.036756 kubelet[2892]: I0702 00:44:45.036710 2892 policy_none.go:49] "None policy: Start" Jul 2 00:44:45.037000 audit[2578]: AVC avc: denied { watch } for pid=2578 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6343 scontext=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 00:44:45.039344 kubelet[2892]: I0702 00:44:45.039313 2892 memory_manager.go:169] "Starting memorymanager" policy="None" Jul 2 00:44:45.039453 kubelet[2892]: I0702 00:44:45.039361 2892 state_mem.go:35] "Initializing new in-memory state store" Jul 2 00:44:45.039755 kubelet[2892]: I0702 00:44:45.039716 2892 state_mem.go:75] "Updated machine memory state" Jul 2 00:44:45.037000 audit[2578]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400087ce80 a2=fc6 a3=0 items=0 ppid=2451 pid=2578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 key=(null) Jul 2 00:44:45.037000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 00:44:45.043000 audit[2578]: AVC avc: denied { watch } for pid=2578 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6343 scontext=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 00:44:45.043000 audit[2578]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400087d200 a2=fc6 a3=0 items=0 ppid=2451 pid=2578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 key=(null) Jul 2 00:44:45.043000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 00:44:45.047000 audit[2578]: AVC avc: denied { watch } for pid=2578 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6343 scontext=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 00:44:45.047000 audit[2578]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000a39260 a2=fc6 a3=0 items=0 ppid=2451 pid=2578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 key=(null) Jul 2 00:44:45.047000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 00:44:45.057000 audit[2892]: AVC avc: denied { mac_admin } for pid=2892 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:45.057000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 00:44:45.057000 audit[2892]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000d9c210 a1=4000eb4ae0 a2=4000d9c1e0 a3=25 items=0 ppid=1 pid=2892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:45.057000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 2 00:44:45.059205 kubelet[2892]: I0702 00:44:45.058241 2892 manager.go:471] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 2 00:44:45.059367 kubelet[2892]: I0702 00:44:45.059338 2892 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Jul 2 00:44:45.060454 kubelet[2892]: I0702 00:44:45.060425 2892 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 2 00:44:45.382406 kubelet[2892]: I0702 00:44:45.382340 2892 topology_manager.go:215] "Topology Admit Handler" podUID="2128607d3c6eaa0e00a32e5d60a26908" podNamespace="kube-system" podName="kube-apiserver-ip-172-31-16-66" Jul 2 00:44:45.382576 kubelet[2892]: I0702 00:44:45.382504 2892 topology_manager.go:215] "Topology Admit Handler" podUID="7422f9a140114c1f54cc31843af12e38" podNamespace="kube-system" podName="kube-controller-manager-ip-172-31-16-66" Jul 2 00:44:45.382678 kubelet[2892]: I0702 00:44:45.382585 2892 topology_manager.go:215] "Topology Admit Handler" podUID="131cb62ba4846bd7723e2cf7c6360d04" podNamespace="kube-system" podName="kube-scheduler-ip-172-31-16-66" Jul 2 00:44:45.419225 kubelet[2892]: E0702 00:44:45.419162 2892 kubelet.go:1890] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-ip-172-31-16-66\" already exists" pod="kube-system/kube-controller-manager-ip-172-31-16-66" Jul 2 00:44:45.445669 kubelet[2892]: I0702 00:44:45.445610 2892 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/131cb62ba4846bd7723e2cf7c6360d04-kubeconfig\") pod \"kube-scheduler-ip-172-31-16-66\" (UID: \"131cb62ba4846bd7723e2cf7c6360d04\") " pod="kube-system/kube-scheduler-ip-172-31-16-66" Jul 2 00:44:45.446294 kubelet[2892]: I0702 00:44:45.445691 2892 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/2128607d3c6eaa0e00a32e5d60a26908-ca-certs\") pod \"kube-apiserver-ip-172-31-16-66\" (UID: \"2128607d3c6eaa0e00a32e5d60a26908\") " pod="kube-system/kube-apiserver-ip-172-31-16-66" Jul 2 00:44:45.446294 kubelet[2892]: I0702 00:44:45.445744 2892 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/2128607d3c6eaa0e00a32e5d60a26908-k8s-certs\") pod \"kube-apiserver-ip-172-31-16-66\" (UID: \"2128607d3c6eaa0e00a32e5d60a26908\") " pod="kube-system/kube-apiserver-ip-172-31-16-66" Jul 2 00:44:45.446294 kubelet[2892]: I0702 00:44:45.445789 2892 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/7422f9a140114c1f54cc31843af12e38-ca-certs\") pod \"kube-controller-manager-ip-172-31-16-66\" (UID: \"7422f9a140114c1f54cc31843af12e38\") " pod="kube-system/kube-controller-manager-ip-172-31-16-66" Jul 2 00:44:45.446294 kubelet[2892]: I0702 00:44:45.445841 2892 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/7422f9a140114c1f54cc31843af12e38-kubeconfig\") pod \"kube-controller-manager-ip-172-31-16-66\" (UID: \"7422f9a140114c1f54cc31843af12e38\") " pod="kube-system/kube-controller-manager-ip-172-31-16-66" Jul 2 00:44:45.446294 kubelet[2892]: I0702 00:44:45.445888 2892 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/2128607d3c6eaa0e00a32e5d60a26908-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-16-66\" (UID: \"2128607d3c6eaa0e00a32e5d60a26908\") " pod="kube-system/kube-apiserver-ip-172-31-16-66" Jul 2 00:44:45.446626 kubelet[2892]: I0702 00:44:45.445952 2892 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/7422f9a140114c1f54cc31843af12e38-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-16-66\" (UID: \"7422f9a140114c1f54cc31843af12e38\") " pod="kube-system/kube-controller-manager-ip-172-31-16-66" Jul 2 00:44:45.446626 kubelet[2892]: I0702 00:44:45.446003 2892 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/7422f9a140114c1f54cc31843af12e38-k8s-certs\") pod \"kube-controller-manager-ip-172-31-16-66\" (UID: \"7422f9a140114c1f54cc31843af12e38\") " pod="kube-system/kube-controller-manager-ip-172-31-16-66" Jul 2 00:44:45.446626 kubelet[2892]: I0702 00:44:45.446057 2892 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/7422f9a140114c1f54cc31843af12e38-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-16-66\" (UID: \"7422f9a140114c1f54cc31843af12e38\") " pod="kube-system/kube-controller-manager-ip-172-31-16-66" Jul 2 00:44:45.541405 kubelet[2892]: I0702 00:44:45.541330 2892 apiserver.go:52] "Watching apiserver" Jul 2 00:44:45.617494 kubelet[2892]: I0702 00:44:45.617422 2892 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Jul 2 00:44:45.839250 kubelet[2892]: I0702 00:44:45.839156 2892 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-ip-172-31-16-66" podStartSLOduration=0.839032579 podCreationTimestamp="2024-07-02 00:44:45 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-07-02 00:44:45.813435055 +0000 UTC m=+1.494705788" watchObservedRunningTime="2024-07-02 00:44:45.839032579 +0000 UTC m=+1.520303348" Jul 2 00:44:45.866703 kubelet[2892]: I0702 00:44:45.866630 2892 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-ip-172-31-16-66" podStartSLOduration=0.866455659 podCreationTimestamp="2024-07-02 00:44:45 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-07-02 00:44:45.839605344 +0000 UTC m=+1.520876077" watchObservedRunningTime="2024-07-02 00:44:45.866455659 +0000 UTC m=+1.547726380" Jul 2 00:44:45.958427 kubelet[2892]: I0702 00:44:45.958365 2892 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ip-172-31-16-66" podStartSLOduration=3.958284925 podCreationTimestamp="2024-07-02 00:44:42 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-07-02 00:44:45.867012223 +0000 UTC m=+1.548282944" watchObservedRunningTime="2024-07-02 00:44:45.958284925 +0000 UTC m=+1.639555658" Jul 2 00:44:51.992505 sudo[2004]: pam_unix(sudo:session): session closed for user root Jul 2 00:44:51.992000 audit[2004]: USER_END pid=2004 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 00:44:51.995032 kernel: kauditd_printk_skb: 17 callbacks suppressed Jul 2 00:44:51.995216 kernel: audit: type=1106 audit(1719881091.992:825): pid=2004 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 00:44:51.992000 audit[2004]: CRED_DISP pid=2004 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 00:44:52.010070 kernel: audit: type=1104 audit(1719881091.992:826): pid=2004 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 00:44:52.025150 sshd[2001]: pam_unix(sshd:session): session closed for user core Jul 2 00:44:52.026000 audit[2001]: USER_END pid=2001 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:44:52.027000 audit[2001]: CRED_DISP pid=2001 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:44:52.046419 kernel: audit: type=1106 audit(1719881092.026:827): pid=2001 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:44:52.046594 kernel: audit: type=1104 audit(1719881092.027:828): pid=2001 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:44:52.038747 systemd[1]: sshd@6-172.31.16.66:22-139.178.89.65:59882.service: Deactivated successfully. Jul 2 00:44:52.040071 systemd[1]: session-7.scope: Deactivated successfully. Jul 2 00:44:52.040412 systemd[1]: session-7.scope: Consumed 11.184s CPU time. Jul 2 00:44:52.038000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.16.66:22-139.178.89.65:59882 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:44:52.054894 kernel: audit: type=1131 audit(1719881092.038:829): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.16.66:22-139.178.89.65:59882 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:44:52.055603 systemd-logind[1726]: Session 7 logged out. Waiting for processes to exit. Jul 2 00:44:52.058062 systemd-logind[1726]: Removed session 7. Jul 2 00:44:59.017937 kubelet[2892]: I0702 00:44:59.017884 2892 kuberuntime_manager.go:1528] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Jul 2 00:44:59.018737 env[1740]: time="2024-07-02T00:44:59.018595628Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Jul 2 00:44:59.019402 kubelet[2892]: I0702 00:44:59.019009 2892 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Jul 2 00:44:59.106781 kubelet[2892]: I0702 00:44:59.106712 2892 topology_manager.go:215] "Topology Admit Handler" podUID="38c25c83-3638-4c47-bd4d-349d588917ec" podNamespace="kube-system" podName="kube-proxy-4zfz4" Jul 2 00:44:59.119219 systemd[1]: Created slice kubepods-besteffort-pod38c25c83_3638_4c47_bd4d_349d588917ec.slice. Jul 2 00:44:59.146998 kubelet[2892]: W0702 00:44:59.146940 2892 reflector.go:535] object-"kube-system"/"kube-proxy": failed to list *v1.ConfigMap: configmaps "kube-proxy" is forbidden: User "system:node:ip-172-31-16-66" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-16-66' and this object Jul 2 00:44:59.147318 kubelet[2892]: E0702 00:44:59.147007 2892 reflector.go:147] object-"kube-system"/"kube-proxy": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "kube-proxy" is forbidden: User "system:node:ip-172-31-16-66" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-16-66' and this object Jul 2 00:44:59.147475 kubelet[2892]: W0702 00:44:59.147430 2892 reflector.go:535] object-"kube-system"/"kube-root-ca.crt": failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ip-172-31-16-66" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-16-66' and this object Jul 2 00:44:59.147585 kubelet[2892]: E0702 00:44:59.147482 2892 reflector.go:147] object-"kube-system"/"kube-root-ca.crt": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ip-172-31-16-66" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-16-66' and this object Jul 2 00:44:59.218556 kubelet[2892]: I0702 00:44:59.218466 2892 topology_manager.go:215] "Topology Admit Handler" podUID="cfe901e0-e39c-45c3-9f35-09208548376d" podNamespace="tigera-operator" podName="tigera-operator-76c4974c85-brmwv" Jul 2 00:44:59.232226 systemd[1]: Created slice kubepods-besteffort-podcfe901e0_e39c_45c3_9f35_09208548376d.slice. Jul 2 00:44:59.238109 kubelet[2892]: I0702 00:44:59.237982 2892 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/38c25c83-3638-4c47-bd4d-349d588917ec-lib-modules\") pod \"kube-proxy-4zfz4\" (UID: \"38c25c83-3638-4c47-bd4d-349d588917ec\") " pod="kube-system/kube-proxy-4zfz4" Jul 2 00:44:59.238312 kubelet[2892]: I0702 00:44:59.238253 2892 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/38c25c83-3638-4c47-bd4d-349d588917ec-kube-proxy\") pod \"kube-proxy-4zfz4\" (UID: \"38c25c83-3638-4c47-bd4d-349d588917ec\") " pod="kube-system/kube-proxy-4zfz4" Jul 2 00:44:59.238388 kubelet[2892]: I0702 00:44:59.238323 2892 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-5hdnz\" (UniqueName: \"kubernetes.io/projected/38c25c83-3638-4c47-bd4d-349d588917ec-kube-api-access-5hdnz\") pod \"kube-proxy-4zfz4\" (UID: \"38c25c83-3638-4c47-bd4d-349d588917ec\") " pod="kube-system/kube-proxy-4zfz4" Jul 2 00:44:59.238457 kubelet[2892]: I0702 00:44:59.238441 2892 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/38c25c83-3638-4c47-bd4d-349d588917ec-xtables-lock\") pod \"kube-proxy-4zfz4\" (UID: \"38c25c83-3638-4c47-bd4d-349d588917ec\") " pod="kube-system/kube-proxy-4zfz4" Jul 2 00:44:59.339025 kubelet[2892]: I0702 00:44:59.338857 2892 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-l6cmk\" (UniqueName: \"kubernetes.io/projected/cfe901e0-e39c-45c3-9f35-09208548376d-kube-api-access-l6cmk\") pod \"tigera-operator-76c4974c85-brmwv\" (UID: \"cfe901e0-e39c-45c3-9f35-09208548376d\") " pod="tigera-operator/tigera-operator-76c4974c85-brmwv" Jul 2 00:44:59.339025 kubelet[2892]: I0702 00:44:59.338990 2892 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/cfe901e0-e39c-45c3-9f35-09208548376d-var-lib-calico\") pod \"tigera-operator-76c4974c85-brmwv\" (UID: \"cfe901e0-e39c-45c3-9f35-09208548376d\") " pod="tigera-operator/tigera-operator-76c4974c85-brmwv" Jul 2 00:44:59.539767 env[1740]: time="2024-07-02T00:44:59.539686634Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-76c4974c85-brmwv,Uid:cfe901e0-e39c-45c3-9f35-09208548376d,Namespace:tigera-operator,Attempt:0,}" Jul 2 00:44:59.581523 env[1740]: time="2024-07-02T00:44:59.581312242Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 00:44:59.581523 env[1740]: time="2024-07-02T00:44:59.581387136Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 00:44:59.581820 env[1740]: time="2024-07-02T00:44:59.581563503Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 00:44:59.582095 env[1740]: time="2024-07-02T00:44:59.581904622Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/cb957b259f73b5bc828d4de625ee3182bc747598cc1633a0ddfaf6b02213697f pid=2973 runtime=io.containerd.runc.v2 Jul 2 00:44:59.616087 systemd[1]: Started cri-containerd-cb957b259f73b5bc828d4de625ee3182bc747598cc1633a0ddfaf6b02213697f.scope. Jul 2 00:44:59.633488 systemd[1]: run-containerd-runc-k8s.io-cb957b259f73b5bc828d4de625ee3182bc747598cc1633a0ddfaf6b02213697f-runc.OeqFRw.mount: Deactivated successfully. Jul 2 00:44:59.665000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:59.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:59.680161 kernel: audit: type=1400 audit(1719881099.665:830): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:59.680319 kernel: audit: type=1400 audit(1719881099.672:831): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:59.680376 kernel: audit: type=1400 audit(1719881099.672:832): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:59.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:59.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:59.693189 kernel: audit: type=1400 audit(1719881099.672:833): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:59.693371 kernel: audit: type=1400 audit(1719881099.672:834): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:59.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:59.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:59.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:59.715038 kernel: audit: type=1400 audit(1719881099.672:835): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:59.715195 kernel: audit: type=1400 audit(1719881099.672:836): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:59.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:59.722232 kernel: audit: type=1400 audit(1719881099.672:837): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:59.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:59.732714 kernel: audit: type=1400 audit(1719881099.672:838): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:59.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:59.672000 audit: BPF prog-id=106 op=LOAD Jul 2 00:44:59.672000 audit[2984]: AVC avc: denied { bpf } for pid=2984 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:59.672000 audit[2984]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000227b38 a2=10 a3=0 items=0 ppid=2973 pid=2984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:59.740176 kernel: audit: type=1400 audit(1719881099.672:839): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:59.672000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362393537623235396637336235626338323864346465363235656533 Jul 2 00:44:59.672000 audit[2984]: AVC avc: denied { perfmon } for pid=2984 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:59.672000 audit[2984]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40002275a0 a2=3c a3=0 items=0 ppid=2973 pid=2984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:59.672000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362393537623235396637336235626338323864346465363235656533 Jul 2 00:44:59.672000 audit[2984]: AVC avc: denied { bpf } for pid=2984 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:59.672000 audit[2984]: AVC avc: denied { bpf } for pid=2984 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:59.672000 audit[2984]: AVC avc: denied { bpf } for pid=2984 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:59.672000 audit[2984]: AVC avc: denied { perfmon } for pid=2984 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:59.672000 audit[2984]: AVC avc: denied { perfmon } for pid=2984 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:59.672000 audit[2984]: AVC avc: denied { perfmon } for pid=2984 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:59.672000 audit[2984]: AVC avc: denied { perfmon } for pid=2984 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:59.672000 audit[2984]: AVC avc: denied { perfmon } for pid=2984 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:59.672000 audit[2984]: AVC avc: denied { bpf } for pid=2984 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:59.672000 audit[2984]: AVC avc: denied { bpf } for pid=2984 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:59.672000 audit: BPF prog-id=107 op=LOAD Jul 2 00:44:59.672000 audit[2984]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40002278e0 a2=78 a3=0 items=0 ppid=2973 pid=2984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:59.672000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362393537623235396637336235626338323864346465363235656533 Jul 2 00:44:59.678000 audit[2984]: AVC avc: denied { bpf } for pid=2984 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:59.678000 audit[2984]: AVC avc: denied { bpf } for pid=2984 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:59.678000 audit[2984]: AVC avc: denied { perfmon } for pid=2984 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:59.678000 audit[2984]: AVC avc: denied { perfmon } for pid=2984 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:59.678000 audit[2984]: AVC avc: denied { perfmon } for pid=2984 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:59.678000 audit[2984]: AVC avc: denied { perfmon } for pid=2984 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:59.678000 audit[2984]: AVC avc: denied { perfmon } for pid=2984 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:59.678000 audit[2984]: AVC avc: denied { bpf } for pid=2984 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:59.678000 audit[2984]: AVC avc: denied { bpf } for pid=2984 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:59.678000 audit: BPF prog-id=108 op=LOAD Jul 2 00:44:59.678000 audit[2984]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000227670 a2=78 a3=0 items=0 ppid=2973 pid=2984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:59.678000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362393537623235396637336235626338323864346465363235656533 Jul 2 00:44:59.685000 audit: BPF prog-id=108 op=UNLOAD Jul 2 00:44:59.685000 audit: BPF prog-id=107 op=UNLOAD Jul 2 00:44:59.685000 audit[2984]: AVC avc: denied { bpf } for pid=2984 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:59.685000 audit[2984]: AVC avc: denied { bpf } for pid=2984 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:59.685000 audit[2984]: AVC avc: denied { bpf } for pid=2984 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:59.685000 audit[2984]: AVC avc: denied { perfmon } for pid=2984 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:59.685000 audit[2984]: AVC avc: denied { perfmon } for pid=2984 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:59.685000 audit[2984]: AVC avc: denied { perfmon } for pid=2984 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:59.685000 audit[2984]: AVC avc: denied { perfmon } for pid=2984 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:59.685000 audit[2984]: AVC avc: denied { perfmon } for pid=2984 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:59.685000 audit[2984]: AVC avc: denied { bpf } for pid=2984 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:59.685000 audit[2984]: AVC avc: denied { bpf } for pid=2984 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:44:59.685000 audit: BPF prog-id=109 op=LOAD Jul 2 00:44:59.685000 audit[2984]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000227b40 a2=78 a3=0 items=0 ppid=2973 pid=2984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:44:59.685000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362393537623235396637336235626338323864346465363235656533 Jul 2 00:44:59.783960 env[1740]: time="2024-07-02T00:44:59.783880320Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-76c4974c85-brmwv,Uid:cfe901e0-e39c-45c3-9f35-09208548376d,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"cb957b259f73b5bc828d4de625ee3182bc747598cc1633a0ddfaf6b02213697f\"" Jul 2 00:44:59.789276 env[1740]: time="2024-07-02T00:44:59.789214127Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.34.0\"" Jul 2 00:45:00.329721 env[1740]: time="2024-07-02T00:45:00.329621271Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-4zfz4,Uid:38c25c83-3638-4c47-bd4d-349d588917ec,Namespace:kube-system,Attempt:0,}" Jul 2 00:45:00.356728 env[1740]: time="2024-07-02T00:45:00.356370874Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 00:45:00.356728 env[1740]: time="2024-07-02T00:45:00.356455944Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 00:45:00.356728 env[1740]: time="2024-07-02T00:45:00.356483208Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 00:45:00.357079 env[1740]: time="2024-07-02T00:45:00.356824939Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ba9f20011d7a479f6a7fac772f65acd51e6f0917f1ac99e6f00fca273e515833 pid=3016 runtime=io.containerd.runc.v2 Jul 2 00:45:00.383183 systemd[1]: Started cri-containerd-ba9f20011d7a479f6a7fac772f65acd51e6f0917f1ac99e6f00fca273e515833.scope. Jul 2 00:45:00.419000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.419000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.419000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.419000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.419000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.419000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.419000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.419000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.419000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.419000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.419000 audit: BPF prog-id=110 op=LOAD Jul 2 00:45:00.421000 audit[3025]: AVC avc: denied { bpf } for pid=3025 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.421000 audit[3025]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3016 pid=3025 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:00.421000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261396632303031316437613437396636613766616337373266363561 Jul 2 00:45:00.421000 audit[3025]: AVC avc: denied { perfmon } for pid=3025 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.421000 audit[3025]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3016 pid=3025 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:00.421000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261396632303031316437613437396636613766616337373266363561 Jul 2 00:45:00.422000 audit[3025]: AVC avc: denied { bpf } for pid=3025 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.422000 audit[3025]: AVC avc: denied { bpf } for pid=3025 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.422000 audit[3025]: AVC avc: denied { bpf } for pid=3025 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.422000 audit[3025]: AVC avc: denied { perfmon } for pid=3025 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.422000 audit[3025]: AVC avc: denied { perfmon } for pid=3025 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.422000 audit[3025]: AVC avc: denied { perfmon } for pid=3025 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.422000 audit[3025]: AVC avc: denied { perfmon } for pid=3025 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.422000 audit[3025]: AVC avc: denied { perfmon } for pid=3025 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.422000 audit[3025]: AVC avc: denied { bpf } for pid=3025 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.422000 audit[3025]: AVC avc: denied { bpf } for pid=3025 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.422000 audit: BPF prog-id=111 op=LOAD Jul 2 00:45:00.422000 audit[3025]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3016 pid=3025 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:00.422000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261396632303031316437613437396636613766616337373266363561 Jul 2 00:45:00.423000 audit[3025]: AVC avc: denied { bpf } for pid=3025 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.423000 audit[3025]: AVC avc: denied { bpf } for pid=3025 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.423000 audit[3025]: AVC avc: denied { perfmon } for pid=3025 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.423000 audit[3025]: AVC avc: denied { perfmon } for pid=3025 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.423000 audit[3025]: AVC avc: denied { perfmon } for pid=3025 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.423000 audit[3025]: AVC avc: denied { perfmon } for pid=3025 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.423000 audit[3025]: AVC avc: denied { perfmon } for pid=3025 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.423000 audit[3025]: AVC avc: denied { bpf } for pid=3025 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.423000 audit[3025]: AVC avc: denied { bpf } for pid=3025 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.423000 audit: BPF prog-id=112 op=LOAD Jul 2 00:45:00.423000 audit[3025]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3016 pid=3025 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:00.423000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261396632303031316437613437396636613766616337373266363561 Jul 2 00:45:00.425000 audit: BPF prog-id=112 op=UNLOAD Jul 2 00:45:00.425000 audit: BPF prog-id=111 op=UNLOAD Jul 2 00:45:00.425000 audit[3025]: AVC avc: denied { bpf } for pid=3025 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.425000 audit[3025]: AVC avc: denied { bpf } for pid=3025 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.425000 audit[3025]: AVC avc: denied { bpf } for pid=3025 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.425000 audit[3025]: AVC avc: denied { perfmon } for pid=3025 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.425000 audit[3025]: AVC avc: denied { perfmon } for pid=3025 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.425000 audit[3025]: AVC avc: denied { perfmon } for pid=3025 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.425000 audit[3025]: AVC avc: denied { perfmon } for pid=3025 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.425000 audit[3025]: AVC avc: denied { perfmon } for pid=3025 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.425000 audit[3025]: AVC avc: denied { bpf } for pid=3025 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.425000 audit[3025]: AVC avc: denied { bpf } for pid=3025 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.425000 audit: BPF prog-id=113 op=LOAD Jul 2 00:45:00.425000 audit[3025]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3016 pid=3025 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:00.425000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261396632303031316437613437396636613766616337373266363561 Jul 2 00:45:00.473768 env[1740]: time="2024-07-02T00:45:00.473692570Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-4zfz4,Uid:38c25c83-3638-4c47-bd4d-349d588917ec,Namespace:kube-system,Attempt:0,} returns sandbox id \"ba9f20011d7a479f6a7fac772f65acd51e6f0917f1ac99e6f00fca273e515833\"" Jul 2 00:45:00.482414 env[1740]: time="2024-07-02T00:45:00.482321615Z" level=info msg="CreateContainer within sandbox \"ba9f20011d7a479f6a7fac772f65acd51e6f0917f1ac99e6f00fca273e515833\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Jul 2 00:45:00.510736 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1937510492.mount: Deactivated successfully. Jul 2 00:45:00.536113 env[1740]: time="2024-07-02T00:45:00.536006416Z" level=info msg="CreateContainer within sandbox \"ba9f20011d7a479f6a7fac772f65acd51e6f0917f1ac99e6f00fca273e515833\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"ac9d49c345637c4727a8329e36dc59a245e962c9f47040c3d747f7b26cde1e9e\"" Jul 2 00:45:00.537549 env[1740]: time="2024-07-02T00:45:00.537483741Z" level=info msg="StartContainer for \"ac9d49c345637c4727a8329e36dc59a245e962c9f47040c3d747f7b26cde1e9e\"" Jul 2 00:45:00.581793 systemd[1]: Started cri-containerd-ac9d49c345637c4727a8329e36dc59a245e962c9f47040c3d747f7b26cde1e9e.scope. Jul 2 00:45:00.630000 audit[3058]: AVC avc: denied { perfmon } for pid=3058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.630000 audit[3058]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3016 pid=3058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:00.630000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163396434396333343536333763343732376138333239653336646335 Jul 2 00:45:00.630000 audit[3058]: AVC avc: denied { bpf } for pid=3058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.630000 audit[3058]: AVC avc: denied { bpf } for pid=3058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.630000 audit[3058]: AVC avc: denied { bpf } for pid=3058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.630000 audit[3058]: AVC avc: denied { perfmon } for pid=3058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.630000 audit[3058]: AVC avc: denied { perfmon } for pid=3058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.630000 audit[3058]: AVC avc: denied { perfmon } for pid=3058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.630000 audit[3058]: AVC avc: denied { perfmon } for pid=3058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.630000 audit[3058]: AVC avc: denied { perfmon } for pid=3058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.630000 audit[3058]: AVC avc: denied { bpf } for pid=3058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.630000 audit[3058]: AVC avc: denied { bpf } for pid=3058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.630000 audit: BPF prog-id=114 op=LOAD Jul 2 00:45:00.630000 audit[3058]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3016 pid=3058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:00.630000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163396434396333343536333763343732376138333239653336646335 Jul 2 00:45:00.632000 audit[3058]: AVC avc: denied { bpf } for pid=3058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.632000 audit[3058]: AVC avc: denied { bpf } for pid=3058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.632000 audit[3058]: AVC avc: denied { perfmon } for pid=3058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.632000 audit[3058]: AVC avc: denied { perfmon } for pid=3058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.632000 audit[3058]: AVC avc: denied { perfmon } for pid=3058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.632000 audit[3058]: AVC avc: denied { perfmon } for pid=3058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.632000 audit[3058]: AVC avc: denied { perfmon } for pid=3058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.632000 audit[3058]: AVC avc: denied { bpf } for pid=3058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.632000 audit[3058]: AVC avc: denied { bpf } for pid=3058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.632000 audit: BPF prog-id=115 op=LOAD Jul 2 00:45:00.632000 audit[3058]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3016 pid=3058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:00.632000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163396434396333343536333763343732376138333239653336646335 Jul 2 00:45:00.633000 audit: BPF prog-id=115 op=UNLOAD Jul 2 00:45:00.634000 audit: BPF prog-id=114 op=UNLOAD Jul 2 00:45:00.634000 audit[3058]: AVC avc: denied { bpf } for pid=3058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.634000 audit[3058]: AVC avc: denied { bpf } for pid=3058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.634000 audit[3058]: AVC avc: denied { bpf } for pid=3058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.634000 audit[3058]: AVC avc: denied { perfmon } for pid=3058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.634000 audit[3058]: AVC avc: denied { perfmon } for pid=3058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.634000 audit[3058]: AVC avc: denied { perfmon } for pid=3058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.634000 audit[3058]: AVC avc: denied { perfmon } for pid=3058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.634000 audit[3058]: AVC avc: denied { perfmon } for pid=3058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.634000 audit[3058]: AVC avc: denied { bpf } for pid=3058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.634000 audit[3058]: AVC avc: denied { bpf } for pid=3058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:00.634000 audit: BPF prog-id=116 op=LOAD Jul 2 00:45:00.634000 audit[3058]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3016 pid=3058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:00.634000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163396434396333343536333763343732376138333239653336646335 Jul 2 00:45:00.670957 env[1740]: time="2024-07-02T00:45:00.670824922Z" level=info msg="StartContainer for \"ac9d49c345637c4727a8329e36dc59a245e962c9f47040c3d747f7b26cde1e9e\" returns successfully" Jul 2 00:45:00.829000 audit[3109]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=3109 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 00:45:00.829000 audit[3109]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffeb73fe90 a2=0 a3=1 items=0 ppid=3068 pid=3109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:00.829000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 2 00:45:00.838000 audit[3110]: NETFILTER_CFG table=mangle:39 family=10 entries=1 op=nft_register_chain pid=3110 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 00:45:00.838000 audit[3110]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcd8d4160 a2=0 a3=1 items=0 ppid=3068 pid=3110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:00.838000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 2 00:45:00.850000 audit[3113]: NETFILTER_CFG table=nat:40 family=10 entries=1 op=nft_register_chain pid=3113 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 00:45:00.850000 audit[3113]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcd9ce030 a2=0 a3=1 items=0 ppid=3068 pid=3113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:00.850000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 2 00:45:00.852000 audit[3111]: NETFILTER_CFG table=nat:41 family=2 entries=1 op=nft_register_chain pid=3111 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 00:45:00.852000 audit[3111]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffa0076d0 a2=0 a3=1 items=0 ppid=3068 pid=3111 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:00.852000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 2 00:45:00.854000 audit[3114]: NETFILTER_CFG table=filter:42 family=10 entries=1 op=nft_register_chain pid=3114 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 00:45:00.854000 audit[3114]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff5261e90 a2=0 a3=1 items=0 ppid=3068 pid=3114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:00.854000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 2 00:45:00.857000 audit[3115]: NETFILTER_CFG table=filter:43 family=2 entries=1 op=nft_register_chain pid=3115 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 00:45:00.857000 audit[3115]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe337ff20 a2=0 a3=1 items=0 ppid=3068 pid=3115 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:00.857000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 2 00:45:00.936000 audit[3116]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=3116 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 00:45:00.936000 audit[3116]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffd6031060 a2=0 a3=1 items=0 ppid=3068 pid=3116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:00.936000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 2 00:45:00.947000 audit[3118]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=3118 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 00:45:00.947000 audit[3118]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffcb9ba860 a2=0 a3=1 items=0 ppid=3068 pid=3118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:00.947000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Jul 2 00:45:00.974858 kubelet[2892]: I0702 00:45:00.974533 2892 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-4zfz4" podStartSLOduration=1.974472891 podCreationTimestamp="2024-07-02 00:44:59 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-07-02 00:45:00.973542273 +0000 UTC m=+16.654813030" watchObservedRunningTime="2024-07-02 00:45:00.974472891 +0000 UTC m=+16.655743612" Jul 2 00:45:00.997000 audit[3121]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=3121 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 00:45:00.997000 audit[3121]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffcace8cd0 a2=0 a3=1 items=0 ppid=3068 pid=3121 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:00.997000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Jul 2 00:45:01.004000 audit[3122]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=3122 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 00:45:01.004000 audit[3122]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcaf16d70 a2=0 a3=1 items=0 ppid=3068 pid=3122 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:01.004000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 2 00:45:01.021000 audit[3124]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=3124 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 00:45:01.021000 audit[3124]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffe32e3cd0 a2=0 a3=1 items=0 ppid=3068 pid=3124 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:01.021000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 2 00:45:01.028000 audit[3125]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=3125 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 00:45:01.028000 audit[3125]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe77a4550 a2=0 a3=1 items=0 ppid=3068 pid=3125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:01.028000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 2 00:45:01.038000 audit[3127]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=3127 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 00:45:01.038000 audit[3127]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffdedbed80 a2=0 a3=1 items=0 ppid=3068 pid=3127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:01.038000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 2 00:45:01.052000 audit[3130]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=3130 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 00:45:01.052000 audit[3130]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffe9628790 a2=0 a3=1 items=0 ppid=3068 pid=3130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:01.052000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Jul 2 00:45:01.063000 audit[3131]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=3131 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 00:45:01.063000 audit[3131]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffee979d00 a2=0 a3=1 items=0 ppid=3068 pid=3131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:01.063000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 2 00:45:01.078000 audit[3133]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=3133 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 00:45:01.078000 audit[3133]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc7b1a510 a2=0 a3=1 items=0 ppid=3068 pid=3133 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:01.078000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 2 00:45:01.085000 audit[3134]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=3134 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 00:45:01.085000 audit[3134]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffea8cd540 a2=0 a3=1 items=0 ppid=3068 pid=3134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:01.085000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 2 00:45:01.097000 audit[3136]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=3136 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 00:45:01.097000 audit[3136]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe74e43f0 a2=0 a3=1 items=0 ppid=3068 pid=3136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:01.097000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 2 00:45:01.117000 audit[3139]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=3139 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 00:45:01.117000 audit[3139]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff8ed7710 a2=0 a3=1 items=0 ppid=3068 pid=3139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:01.117000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 2 00:45:01.130000 audit[3142]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=3142 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 00:45:01.130000 audit[3142]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc5b3fd10 a2=0 a3=1 items=0 ppid=3068 pid=3142 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:01.130000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 2 00:45:01.134000 audit[3143]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=3143 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 00:45:01.134000 audit[3143]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffe066b610 a2=0 a3=1 items=0 ppid=3068 pid=3143 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:01.134000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 2 00:45:01.143000 audit[3145]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=3145 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 00:45:01.143000 audit[3145]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffe4cf9de0 a2=0 a3=1 items=0 ppid=3068 pid=3145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:01.143000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 2 00:45:01.154000 audit[3148]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=3148 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 00:45:01.154000 audit[3148]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffdd6ae250 a2=0 a3=1 items=0 ppid=3068 pid=3148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:01.154000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 2 00:45:01.156000 audit[3149]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=3149 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 00:45:01.156000 audit[3149]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdc9c09f0 a2=0 a3=1 items=0 ppid=3068 pid=3149 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:01.156000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 2 00:45:01.162000 audit[3151]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=3151 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 00:45:01.162000 audit[3151]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffec1f8160 a2=0 a3=1 items=0 ppid=3068 pid=3151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:01.162000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 2 00:45:01.213000 audit[3157]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=3157 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 00:45:01.213000 audit[3157]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5164 a0=3 a1=ffffe7d58af0 a2=0 a3=1 items=0 ppid=3068 pid=3157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:01.213000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 00:45:01.231000 audit[3157]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=3157 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 00:45:01.231000 audit[3157]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5508 a0=3 a1=ffffe7d58af0 a2=0 a3=1 items=0 ppid=3068 pid=3157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:01.231000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 00:45:01.234000 audit[3163]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=3163 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 00:45:01.234000 audit[3163]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffda57b1b0 a2=0 a3=1 items=0 ppid=3068 pid=3163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:01.234000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 2 00:45:01.250000 audit[3165]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=3165 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 00:45:01.250000 audit[3165]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=fffff39b70e0 a2=0 a3=1 items=0 ppid=3068 pid=3165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:01.250000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Jul 2 00:45:01.266000 audit[3168]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=3168 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 00:45:01.266000 audit[3168]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffda6c9f30 a2=0 a3=1 items=0 ppid=3068 pid=3168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:01.266000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Jul 2 00:45:01.269000 audit[3169]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=3169 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 00:45:01.269000 audit[3169]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffebbf4d10 a2=0 a3=1 items=0 ppid=3068 pid=3169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:01.269000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 2 00:45:01.277000 audit[3171]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=3171 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 00:45:01.277000 audit[3171]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc6827200 a2=0 a3=1 items=0 ppid=3068 pid=3171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:01.277000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 2 00:45:01.279000 audit[3172]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=3172 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 00:45:01.279000 audit[3172]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff60e7c30 a2=0 a3=1 items=0 ppid=3068 pid=3172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:01.279000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 2 00:45:01.288000 audit[3174]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=3174 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 00:45:01.288000 audit[3174]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffc7f292c0 a2=0 a3=1 items=0 ppid=3068 pid=3174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:01.288000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Jul 2 00:45:01.300000 audit[3177]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=3177 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 00:45:01.300000 audit[3177]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=ffffed9e3280 a2=0 a3=1 items=0 ppid=3068 pid=3177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:01.300000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 2 00:45:01.303000 audit[3178]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=3178 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 00:45:01.303000 audit[3178]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd1b93340 a2=0 a3=1 items=0 ppid=3068 pid=3178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:01.303000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 2 00:45:01.311000 audit[3180]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=3180 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 00:45:01.311000 audit[3180]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd059fb30 a2=0 a3=1 items=0 ppid=3068 pid=3180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:01.311000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 2 00:45:01.313000 audit[3181]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=3181 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 00:45:01.313000 audit[3181]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcabb88a0 a2=0 a3=1 items=0 ppid=3068 pid=3181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:01.313000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 2 00:45:01.320000 audit[3183]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=3183 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 00:45:01.320000 audit[3183]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffdda133b0 a2=0 a3=1 items=0 ppid=3068 pid=3183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:01.320000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 2 00:45:01.335000 audit[3186]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=3186 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 00:45:01.335000 audit[3186]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe143cc80 a2=0 a3=1 items=0 ppid=3068 pid=3186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:01.335000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 2 00:45:01.350000 audit[3189]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=3189 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 00:45:01.350000 audit[3189]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffffdefe510 a2=0 a3=1 items=0 ppid=3068 pid=3189 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:01.350000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Jul 2 00:45:01.356000 audit[3190]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=3190 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 00:45:01.356000 audit[3190]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffc35ec6b0 a2=0 a3=1 items=0 ppid=3068 pid=3190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:01.356000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 2 00:45:01.362000 audit[3192]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=3192 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 00:45:01.362000 audit[3192]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffdf0b4e00 a2=0 a3=1 items=0 ppid=3068 pid=3192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:01.362000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 2 00:45:01.374000 audit[3195]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=3195 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 00:45:01.374000 audit[3195]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffd1a2b680 a2=0 a3=1 items=0 ppid=3068 pid=3195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:01.374000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 2 00:45:01.377000 audit[3196]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=3196 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 00:45:01.377000 audit[3196]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc29105b0 a2=0 a3=1 items=0 ppid=3068 pid=3196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:01.377000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 2 00:45:01.384000 audit[3198]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=3198 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 00:45:01.384000 audit[3198]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffde9897c0 a2=0 a3=1 items=0 ppid=3068 pid=3198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:01.384000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 2 00:45:01.388000 audit[3199]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=3199 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 00:45:01.388000 audit[3199]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc19c0610 a2=0 a3=1 items=0 ppid=3068 pid=3199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:01.388000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 2 00:45:01.395000 audit[3201]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=3201 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 00:45:01.395000 audit[3201]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffde60a2c0 a2=0 a3=1 items=0 ppid=3068 pid=3201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:01.395000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 2 00:45:01.406000 audit[3204]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=3204 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 00:45:01.406000 audit[3204]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff516c2b0 a2=0 a3=1 items=0 ppid=3068 pid=3204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:01.406000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 2 00:45:01.417000 audit[3206]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=3206 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 2 00:45:01.417000 audit[3206]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2004 a0=3 a1=ffffe92db7f0 a2=0 a3=1 items=0 ppid=3068 pid=3206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:01.417000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 00:45:01.418000 audit[3206]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=3206 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 2 00:45:01.418000 audit[3206]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2056 a0=3 a1=ffffe92db7f0 a2=0 a3=1 items=0 ppid=3068 pid=3206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:01.418000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 00:45:02.154307 env[1740]: time="2024-07-02T00:45:02.154244948Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.34.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:45:02.161701 env[1740]: time="2024-07-02T00:45:02.161626249Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5886f48e233edcb89c0e8e3cdbdc40101f3c2dfbe67d7717f01d19c27cd78f92,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:45:02.167242 env[1740]: time="2024-07-02T00:45:02.167173735Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.34.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:45:02.170453 env[1740]: time="2024-07-02T00:45:02.170382151Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:479ddc7ff9ab095058b96f6710bbf070abada86332e267d6e5dcc1df36ba2cc5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:45:02.171810 env[1740]: time="2024-07-02T00:45:02.171751088Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.34.0\" returns image reference \"sha256:5886f48e233edcb89c0e8e3cdbdc40101f3c2dfbe67d7717f01d19c27cd78f92\"" Jul 2 00:45:02.178538 env[1740]: time="2024-07-02T00:45:02.178474632Z" level=info msg="CreateContainer within sandbox \"cb957b259f73b5bc828d4de625ee3182bc747598cc1633a0ddfaf6b02213697f\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Jul 2 00:45:02.204869 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3921356888.mount: Deactivated successfully. Jul 2 00:45:02.218854 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1321360450.mount: Deactivated successfully. Jul 2 00:45:02.227379 env[1740]: time="2024-07-02T00:45:02.227318955Z" level=info msg="CreateContainer within sandbox \"cb957b259f73b5bc828d4de625ee3182bc747598cc1633a0ddfaf6b02213697f\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"e5d538d0ece0bd42f2a238b3dc25737c19cb2716eecad1bc1a538c48a10a53b8\"" Jul 2 00:45:02.228560 env[1740]: time="2024-07-02T00:45:02.228483145Z" level=info msg="StartContainer for \"e5d538d0ece0bd42f2a238b3dc25737c19cb2716eecad1bc1a538c48a10a53b8\"" Jul 2 00:45:02.259994 systemd[1]: Started cri-containerd-e5d538d0ece0bd42f2a238b3dc25737c19cb2716eecad1bc1a538c48a10a53b8.scope. Jul 2 00:45:02.295000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:02.295000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:02.295000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:02.295000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:02.296000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:02.296000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:02.296000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:02.296000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:02.296000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:02.296000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:02.296000 audit: BPF prog-id=117 op=LOAD Jul 2 00:45:02.297000 audit[3215]: AVC avc: denied { bpf } for pid=3215 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:02.297000 audit[3215]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2973 pid=3215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:02.297000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535643533386430656365306264343266326132333862336463323537 Jul 2 00:45:02.297000 audit[3215]: AVC avc: denied { perfmon } for pid=3215 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:02.297000 audit[3215]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2973 pid=3215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:02.297000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535643533386430656365306264343266326132333862336463323537 Jul 2 00:45:02.297000 audit[3215]: AVC avc: denied { bpf } for pid=3215 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:02.297000 audit[3215]: AVC avc: denied { bpf } for pid=3215 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:02.297000 audit[3215]: AVC avc: denied { bpf } for pid=3215 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:02.297000 audit[3215]: AVC avc: denied { perfmon } for pid=3215 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:02.297000 audit[3215]: AVC avc: denied { perfmon } for pid=3215 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:02.297000 audit[3215]: AVC avc: denied { perfmon } for pid=3215 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:02.297000 audit[3215]: AVC avc: denied { perfmon } for pid=3215 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:02.297000 audit[3215]: AVC avc: denied { perfmon } for pid=3215 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:02.297000 audit[3215]: AVC avc: denied { bpf } for pid=3215 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:02.297000 audit[3215]: AVC avc: denied { bpf } for pid=3215 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:02.297000 audit: BPF prog-id=118 op=LOAD Jul 2 00:45:02.297000 audit[3215]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2973 pid=3215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:02.297000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535643533386430656365306264343266326132333862336463323537 Jul 2 00:45:02.297000 audit[3215]: AVC avc: denied { bpf } for pid=3215 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:02.297000 audit[3215]: AVC avc: denied { bpf } for pid=3215 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:02.297000 audit[3215]: AVC avc: denied { perfmon } for pid=3215 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:02.297000 audit[3215]: AVC avc: denied { perfmon } for pid=3215 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:02.297000 audit[3215]: AVC avc: denied { perfmon } for pid=3215 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:02.297000 audit[3215]: AVC avc: denied { perfmon } for pid=3215 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:02.297000 audit[3215]: AVC avc: denied { perfmon } for pid=3215 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:02.297000 audit[3215]: AVC avc: denied { bpf } for pid=3215 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:02.297000 audit[3215]: AVC avc: denied { bpf } for pid=3215 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:02.297000 audit: BPF prog-id=119 op=LOAD Jul 2 00:45:02.297000 audit[3215]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2973 pid=3215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:02.297000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535643533386430656365306264343266326132333862336463323537 Jul 2 00:45:02.297000 audit: BPF prog-id=119 op=UNLOAD Jul 2 00:45:02.297000 audit: BPF prog-id=118 op=UNLOAD Jul 2 00:45:02.297000 audit[3215]: AVC avc: denied { bpf } for pid=3215 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:02.297000 audit[3215]: AVC avc: denied { bpf } for pid=3215 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:02.297000 audit[3215]: AVC avc: denied { bpf } for pid=3215 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:02.297000 audit[3215]: AVC avc: denied { perfmon } for pid=3215 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:02.297000 audit[3215]: AVC avc: denied { perfmon } for pid=3215 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:02.297000 audit[3215]: AVC avc: denied { perfmon } for pid=3215 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:02.297000 audit[3215]: AVC avc: denied { perfmon } for pid=3215 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:02.297000 audit[3215]: AVC avc: denied { perfmon } for pid=3215 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:02.297000 audit[3215]: AVC avc: denied { bpf } for pid=3215 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:02.297000 audit[3215]: AVC avc: denied { bpf } for pid=3215 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:02.297000 audit: BPF prog-id=120 op=LOAD Jul 2 00:45:02.297000 audit[3215]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2973 pid=3215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:02.297000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535643533386430656365306264343266326132333862336463323537 Jul 2 00:45:02.331818 env[1740]: time="2024-07-02T00:45:02.331721005Z" level=info msg="StartContainer for \"e5d538d0ece0bd42f2a238b3dc25737c19cb2716eecad1bc1a538c48a10a53b8\" returns successfully" Jul 2 00:45:04.699005 kubelet[2892]: I0702 00:45:04.698937 2892 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="tigera-operator/tigera-operator-76c4974c85-brmwv" podStartSLOduration=3.31281851 podCreationTimestamp="2024-07-02 00:44:59 +0000 UTC" firstStartedPulling="2024-07-02 00:44:59.786412659 +0000 UTC m=+15.467683380" lastFinishedPulling="2024-07-02 00:45:02.172462209 +0000 UTC m=+17.853732930" observedRunningTime="2024-07-02 00:45:02.966867691 +0000 UTC m=+18.648138436" watchObservedRunningTime="2024-07-02 00:45:04.69886806 +0000 UTC m=+20.380138781" Jul 2 00:45:08.654193 kernel: kauditd_printk_skb: 357 callbacks suppressed Jul 2 00:45:08.654376 kernel: audit: type=1325 audit(1719881108.646:941): table=filter:89 family=2 entries=14 op=nft_register_rule pid=3251 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 00:45:08.646000 audit[3251]: NETFILTER_CFG table=filter:89 family=2 entries=14 op=nft_register_rule pid=3251 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 00:45:08.646000 audit[3251]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5164 a0=3 a1=ffffe119e190 a2=0 a3=1 items=0 ppid=3068 pid=3251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:08.664852 kernel: audit: type=1300 audit(1719881108.646:941): arch=c00000b7 syscall=211 success=yes exit=5164 a0=3 a1=ffffe119e190 a2=0 a3=1 items=0 ppid=3068 pid=3251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:08.646000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 00:45:08.670157 kernel: audit: type=1327 audit(1719881108.646:941): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 00:45:08.646000 audit[3251]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=3251 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 00:45:08.646000 audit[3251]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffe119e190 a2=0 a3=1 items=0 ppid=3068 pid=3251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:08.685954 kernel: audit: type=1325 audit(1719881108.646:942): table=nat:90 family=2 entries=12 op=nft_register_rule pid=3251 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 00:45:08.686108 kernel: audit: type=1300 audit(1719881108.646:942): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffe119e190 a2=0 a3=1 items=0 ppid=3068 pid=3251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:08.646000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 00:45:08.691257 kernel: audit: type=1327 audit(1719881108.646:942): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 00:45:08.685000 audit[3253]: NETFILTER_CFG table=filter:91 family=2 entries=15 op=nft_register_rule pid=3253 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 00:45:08.685000 audit[3253]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5908 a0=3 a1=fffff7f1c1f0 a2=0 a3=1 items=0 ppid=3068 pid=3253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:08.708811 kernel: audit: type=1325 audit(1719881108.685:943): table=filter:91 family=2 entries=15 op=nft_register_rule pid=3253 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 00:45:08.708964 kernel: audit: type=1300 audit(1719881108.685:943): arch=c00000b7 syscall=211 success=yes exit=5908 a0=3 a1=fffff7f1c1f0 a2=0 a3=1 items=0 ppid=3068 pid=3253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:08.685000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 00:45:08.713998 kernel: audit: type=1327 audit(1719881108.685:943): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 00:45:08.690000 audit[3253]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=3253 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 00:45:08.690000 audit[3253]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffff7f1c1f0 a2=0 a3=1 items=0 ppid=3068 pid=3253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:08.690000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 00:45:08.720186 kernel: audit: type=1325 audit(1719881108.690:944): table=nat:92 family=2 entries=12 op=nft_register_rule pid=3253 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 00:45:08.826987 kubelet[2892]: I0702 00:45:08.826927 2892 topology_manager.go:215] "Topology Admit Handler" podUID="85b7416e-40a4-469f-9ffa-7cfdd9450278" podNamespace="calico-system" podName="calico-typha-8685484b8c-mhbbt" Jul 2 00:45:08.837461 systemd[1]: Created slice kubepods-besteffort-pod85b7416e_40a4_469f_9ffa_7cfdd9450278.slice. Jul 2 00:45:08.906852 kubelet[2892]: I0702 00:45:08.906690 2892 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/85b7416e-40a4-469f-9ffa-7cfdd9450278-tigera-ca-bundle\") pod \"calico-typha-8685484b8c-mhbbt\" (UID: \"85b7416e-40a4-469f-9ffa-7cfdd9450278\") " pod="calico-system/calico-typha-8685484b8c-mhbbt" Jul 2 00:45:08.906852 kubelet[2892]: I0702 00:45:08.906792 2892 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/85b7416e-40a4-469f-9ffa-7cfdd9450278-typha-certs\") pod \"calico-typha-8685484b8c-mhbbt\" (UID: \"85b7416e-40a4-469f-9ffa-7cfdd9450278\") " pod="calico-system/calico-typha-8685484b8c-mhbbt" Jul 2 00:45:08.907081 kubelet[2892]: I0702 00:45:08.906862 2892 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-5vwj8\" (UniqueName: \"kubernetes.io/projected/85b7416e-40a4-469f-9ffa-7cfdd9450278-kube-api-access-5vwj8\") pod \"calico-typha-8685484b8c-mhbbt\" (UID: \"85b7416e-40a4-469f-9ffa-7cfdd9450278\") " pod="calico-system/calico-typha-8685484b8c-mhbbt" Jul 2 00:45:09.033672 kubelet[2892]: I0702 00:45:09.033613 2892 topology_manager.go:215] "Topology Admit Handler" podUID="db1efefd-dd33-4ee8-b403-4bc1312b918e" podNamespace="calico-system" podName="calico-node-hwwh6" Jul 2 00:45:09.066051 systemd[1]: Created slice kubepods-besteffort-poddb1efefd_dd33_4ee8_b403_4bc1312b918e.slice. Jul 2 00:45:09.108158 kubelet[2892]: I0702 00:45:09.108025 2892 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/db1efefd-dd33-4ee8-b403-4bc1312b918e-cni-net-dir\") pod \"calico-node-hwwh6\" (UID: \"db1efefd-dd33-4ee8-b403-4bc1312b918e\") " pod="calico-system/calico-node-hwwh6" Jul 2 00:45:09.108394 kubelet[2892]: I0702 00:45:09.108298 2892 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-ssqzc\" (UniqueName: \"kubernetes.io/projected/db1efefd-dd33-4ee8-b403-4bc1312b918e-kube-api-access-ssqzc\") pod \"calico-node-hwwh6\" (UID: \"db1efefd-dd33-4ee8-b403-4bc1312b918e\") " pod="calico-system/calico-node-hwwh6" Jul 2 00:45:09.108477 kubelet[2892]: I0702 00:45:09.108457 2892 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/db1efefd-dd33-4ee8-b403-4bc1312b918e-var-lib-calico\") pod \"calico-node-hwwh6\" (UID: \"db1efefd-dd33-4ee8-b403-4bc1312b918e\") " pod="calico-system/calico-node-hwwh6" Jul 2 00:45:09.108563 kubelet[2892]: I0702 00:45:09.108538 2892 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/db1efefd-dd33-4ee8-b403-4bc1312b918e-lib-modules\") pod \"calico-node-hwwh6\" (UID: \"db1efefd-dd33-4ee8-b403-4bc1312b918e\") " pod="calico-system/calico-node-hwwh6" Jul 2 00:45:09.108773 kubelet[2892]: I0702 00:45:09.108643 2892 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/db1efefd-dd33-4ee8-b403-4bc1312b918e-xtables-lock\") pod \"calico-node-hwwh6\" (UID: \"db1efefd-dd33-4ee8-b403-4bc1312b918e\") " pod="calico-system/calico-node-hwwh6" Jul 2 00:45:09.108923 kubelet[2892]: I0702 00:45:09.108830 2892 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/db1efefd-dd33-4ee8-b403-4bc1312b918e-tigera-ca-bundle\") pod \"calico-node-hwwh6\" (UID: \"db1efefd-dd33-4ee8-b403-4bc1312b918e\") " pod="calico-system/calico-node-hwwh6" Jul 2 00:45:09.109008 kubelet[2892]: I0702 00:45:09.108976 2892 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/db1efefd-dd33-4ee8-b403-4bc1312b918e-cni-bin-dir\") pod \"calico-node-hwwh6\" (UID: \"db1efefd-dd33-4ee8-b403-4bc1312b918e\") " pod="calico-system/calico-node-hwwh6" Jul 2 00:45:09.109138 kubelet[2892]: I0702 00:45:09.109086 2892 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/db1efefd-dd33-4ee8-b403-4bc1312b918e-flexvol-driver-host\") pod \"calico-node-hwwh6\" (UID: \"db1efefd-dd33-4ee8-b403-4bc1312b918e\") " pod="calico-system/calico-node-hwwh6" Jul 2 00:45:09.109301 kubelet[2892]: I0702 00:45:09.109260 2892 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/db1efefd-dd33-4ee8-b403-4bc1312b918e-var-run-calico\") pod \"calico-node-hwwh6\" (UID: \"db1efefd-dd33-4ee8-b403-4bc1312b918e\") " pod="calico-system/calico-node-hwwh6" Jul 2 00:45:09.109468 kubelet[2892]: I0702 00:45:09.109432 2892 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/db1efefd-dd33-4ee8-b403-4bc1312b918e-cni-log-dir\") pod \"calico-node-hwwh6\" (UID: \"db1efefd-dd33-4ee8-b403-4bc1312b918e\") " pod="calico-system/calico-node-hwwh6" Jul 2 00:45:09.109700 kubelet[2892]: I0702 00:45:09.109652 2892 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/db1efefd-dd33-4ee8-b403-4bc1312b918e-policysync\") pod \"calico-node-hwwh6\" (UID: \"db1efefd-dd33-4ee8-b403-4bc1312b918e\") " pod="calico-system/calico-node-hwwh6" Jul 2 00:45:09.109897 kubelet[2892]: I0702 00:45:09.109839 2892 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/db1efefd-dd33-4ee8-b403-4bc1312b918e-node-certs\") pod \"calico-node-hwwh6\" (UID: \"db1efefd-dd33-4ee8-b403-4bc1312b918e\") " pod="calico-system/calico-node-hwwh6" Jul 2 00:45:09.148353 env[1740]: time="2024-07-02T00:45:09.148276026Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-8685484b8c-mhbbt,Uid:85b7416e-40a4-469f-9ffa-7cfdd9450278,Namespace:calico-system,Attempt:0,}" Jul 2 00:45:09.187112 env[1740]: time="2024-07-02T00:45:09.185577565Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 00:45:09.187642 env[1740]: time="2024-07-02T00:45:09.187565299Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 00:45:09.187937 env[1740]: time="2024-07-02T00:45:09.187847483Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 00:45:09.188680 env[1740]: time="2024-07-02T00:45:09.188578163Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/dba174148dec9b5c2f3015cc8be956d36903a47e637a365d277636f0c09d1b39 pid=3263 runtime=io.containerd.runc.v2 Jul 2 00:45:09.217180 kubelet[2892]: E0702 00:45:09.215290 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.217180 kubelet[2892]: W0702 00:45:09.215328 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.217180 kubelet[2892]: E0702 00:45:09.215635 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.219384 kubelet[2892]: E0702 00:45:09.219342 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.219659 kubelet[2892]: W0702 00:45:09.219604 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.220237 kubelet[2892]: E0702 00:45:09.220197 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.237164 kubelet[2892]: E0702 00:45:09.235927 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.237164 kubelet[2892]: W0702 00:45:09.235964 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.237859 kubelet[2892]: E0702 00:45:09.237557 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.237859 kubelet[2892]: W0702 00:45:09.237597 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.238049 kubelet[2892]: E0702 00:45:09.237983 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.238049 kubelet[2892]: W0702 00:45:09.238001 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.238049 kubelet[2892]: E0702 00:45:09.238033 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.238277 kubelet[2892]: E0702 00:45:09.238084 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.238518 kubelet[2892]: E0702 00:45:09.238479 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.238644 kubelet[2892]: W0702 00:45:09.238517 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.238644 kubelet[2892]: E0702 00:45:09.238548 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.241183 kubelet[2892]: E0702 00:45:09.238916 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.241183 kubelet[2892]: W0702 00:45:09.238948 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.241183 kubelet[2892]: E0702 00:45:09.238985 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.241183 kubelet[2892]: E0702 00:45:09.239651 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.241183 kubelet[2892]: E0702 00:45:09.240639 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.241183 kubelet[2892]: W0702 00:45:09.240661 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.241183 kubelet[2892]: E0702 00:45:09.240697 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.241183 kubelet[2892]: E0702 00:45:09.241190 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.241798 kubelet[2892]: W0702 00:45:09.241211 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.241798 kubelet[2892]: E0702 00:45:09.241243 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.241798 kubelet[2892]: E0702 00:45:09.241698 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.241798 kubelet[2892]: W0702 00:45:09.241722 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.241798 kubelet[2892]: E0702 00:45:09.241751 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.242222 kubelet[2892]: E0702 00:45:09.242183 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.242222 kubelet[2892]: W0702 00:45:09.242215 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.242395 kubelet[2892]: E0702 00:45:09.242246 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.276692 systemd[1]: Started cri-containerd-dba174148dec9b5c2f3015cc8be956d36903a47e637a365d277636f0c09d1b39.scope. Jul 2 00:45:09.285389 kubelet[2892]: E0702 00:45:09.285328 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.285389 kubelet[2892]: W0702 00:45:09.285383 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.285694 kubelet[2892]: E0702 00:45:09.285426 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.298110 kubelet[2892]: I0702 00:45:09.298028 2892 topology_manager.go:215] "Topology Admit Handler" podUID="63f3d045-d881-483e-8a8c-c34301573e52" podNamespace="calico-system" podName="csi-node-driver-hnrns" Jul 2 00:45:09.298764 kubelet[2892]: E0702 00:45:09.298707 2892 pod_workers.go:1300] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-hnrns" podUID="63f3d045-d881-483e-8a8c-c34301573e52" Jul 2 00:45:09.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.362000 audit: BPF prog-id=121 op=LOAD Jul 2 00:45:09.363000 audit[3272]: AVC avc: denied { bpf } for pid=3272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.363000 audit[3272]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3263 pid=3272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:09.363000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462613137343134386465633962356332663330313563633862653935 Jul 2 00:45:09.364000 audit[3272]: AVC avc: denied { perfmon } for pid=3272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.364000 audit[3272]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3263 pid=3272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:09.364000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462613137343134386465633962356332663330313563633862653935 Jul 2 00:45:09.365000 audit[3272]: AVC avc: denied { bpf } for pid=3272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.365000 audit[3272]: AVC avc: denied { bpf } for pid=3272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.365000 audit[3272]: AVC avc: denied { bpf } for pid=3272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.365000 audit[3272]: AVC avc: denied { perfmon } for pid=3272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.365000 audit[3272]: AVC avc: denied { perfmon } for pid=3272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.365000 audit[3272]: AVC avc: denied { perfmon } for pid=3272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.365000 audit[3272]: AVC avc: denied { perfmon } for pid=3272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.365000 audit[3272]: AVC avc: denied { perfmon } for pid=3272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.365000 audit[3272]: AVC avc: denied { bpf } for pid=3272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.365000 audit[3272]: AVC avc: denied { bpf } for pid=3272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.365000 audit: BPF prog-id=122 op=LOAD Jul 2 00:45:09.365000 audit[3272]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3263 pid=3272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:09.365000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462613137343134386465633962356332663330313563633862653935 Jul 2 00:45:09.367000 audit[3272]: AVC avc: denied { bpf } for pid=3272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.367000 audit[3272]: AVC avc: denied { bpf } for pid=3272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.367000 audit[3272]: AVC avc: denied { perfmon } for pid=3272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.367000 audit[3272]: AVC avc: denied { perfmon } for pid=3272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.367000 audit[3272]: AVC avc: denied { perfmon } for pid=3272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.367000 audit[3272]: AVC avc: denied { perfmon } for pid=3272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.367000 audit[3272]: AVC avc: denied { perfmon } for pid=3272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.367000 audit[3272]: AVC avc: denied { bpf } for pid=3272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.367000 audit[3272]: AVC avc: denied { bpf } for pid=3272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.367000 audit: BPF prog-id=123 op=LOAD Jul 2 00:45:09.367000 audit[3272]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3263 pid=3272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:09.367000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462613137343134386465633962356332663330313563633862653935 Jul 2 00:45:09.367000 audit: BPF prog-id=123 op=UNLOAD Jul 2 00:45:09.367000 audit: BPF prog-id=122 op=UNLOAD Jul 2 00:45:09.367000 audit[3272]: AVC avc: denied { bpf } for pid=3272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.367000 audit[3272]: AVC avc: denied { bpf } for pid=3272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.367000 audit[3272]: AVC avc: denied { bpf } for pid=3272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.367000 audit[3272]: AVC avc: denied { perfmon } for pid=3272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.367000 audit[3272]: AVC avc: denied { perfmon } for pid=3272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.367000 audit[3272]: AVC avc: denied { perfmon } for pid=3272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.367000 audit[3272]: AVC avc: denied { perfmon } for pid=3272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.367000 audit[3272]: AVC avc: denied { perfmon } for pid=3272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.367000 audit[3272]: AVC avc: denied { bpf } for pid=3272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.367000 audit[3272]: AVC avc: denied { bpf } for pid=3272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.367000 audit: BPF prog-id=124 op=LOAD Jul 2 00:45:09.367000 audit[3272]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3263 pid=3272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:09.367000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462613137343134386465633962356332663330313563633862653935 Jul 2 00:45:09.375600 env[1740]: time="2024-07-02T00:45:09.375546913Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-hwwh6,Uid:db1efefd-dd33-4ee8-b403-4bc1312b918e,Namespace:calico-system,Attempt:0,}" Jul 2 00:45:09.385654 kubelet[2892]: E0702 00:45:09.385431 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.385654 kubelet[2892]: W0702 00:45:09.385489 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.385654 kubelet[2892]: E0702 00:45:09.385532 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.386462 kubelet[2892]: E0702 00:45:09.386418 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.386647 kubelet[2892]: W0702 00:45:09.386468 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.386647 kubelet[2892]: E0702 00:45:09.386509 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.387094 kubelet[2892]: E0702 00:45:09.387049 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.387094 kubelet[2892]: W0702 00:45:09.387081 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.388508 kubelet[2892]: E0702 00:45:09.387114 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.388628 kubelet[2892]: E0702 00:45:09.388609 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.388706 kubelet[2892]: W0702 00:45:09.388636 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.388706 kubelet[2892]: E0702 00:45:09.388672 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.389232 kubelet[2892]: E0702 00:45:09.389192 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.389232 kubelet[2892]: W0702 00:45:09.389223 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.389428 kubelet[2892]: E0702 00:45:09.389281 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.389830 kubelet[2892]: E0702 00:45:09.389666 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.389830 kubelet[2892]: W0702 00:45:09.389694 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.389830 kubelet[2892]: E0702 00:45:09.389724 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.390541 kubelet[2892]: E0702 00:45:09.390499 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.390541 kubelet[2892]: W0702 00:45:09.390533 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.390763 kubelet[2892]: E0702 00:45:09.390581 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.391197 kubelet[2892]: E0702 00:45:09.391158 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.391197 kubelet[2892]: W0702 00:45:09.391190 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.391396 kubelet[2892]: E0702 00:45:09.391235 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.394035 kubelet[2892]: E0702 00:45:09.391881 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.394035 kubelet[2892]: W0702 00:45:09.391912 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.394035 kubelet[2892]: E0702 00:45:09.391945 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.395103 kubelet[2892]: E0702 00:45:09.395046 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.395103 kubelet[2892]: W0702 00:45:09.395080 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.395364 kubelet[2892]: E0702 00:45:09.395156 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.397670 kubelet[2892]: E0702 00:45:09.397364 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.397670 kubelet[2892]: W0702 00:45:09.397430 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.397670 kubelet[2892]: E0702 00:45:09.397473 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.398585 kubelet[2892]: E0702 00:45:09.398509 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.398585 kubelet[2892]: W0702 00:45:09.398578 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.398821 kubelet[2892]: E0702 00:45:09.398651 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.399290 kubelet[2892]: E0702 00:45:09.399250 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.399395 kubelet[2892]: W0702 00:45:09.399288 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.399395 kubelet[2892]: E0702 00:45:09.399348 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.400365 kubelet[2892]: E0702 00:45:09.400317 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.400365 kubelet[2892]: W0702 00:45:09.400354 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.400624 kubelet[2892]: E0702 00:45:09.400392 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.400880 kubelet[2892]: E0702 00:45:09.400810 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.400880 kubelet[2892]: W0702 00:45:09.400874 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.401063 kubelet[2892]: E0702 00:45:09.400910 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.403514 kubelet[2892]: E0702 00:45:09.403462 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.403514 kubelet[2892]: W0702 00:45:09.403502 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.403781 kubelet[2892]: E0702 00:45:09.403540 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.403995 kubelet[2892]: E0702 00:45:09.403962 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.403995 kubelet[2892]: W0702 00:45:09.403990 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.406451 kubelet[2892]: E0702 00:45:09.404022 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.406756 kubelet[2892]: E0702 00:45:09.406712 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.406756 kubelet[2892]: W0702 00:45:09.406749 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.406945 kubelet[2892]: E0702 00:45:09.406789 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.407212 kubelet[2892]: E0702 00:45:09.407180 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.407212 kubelet[2892]: W0702 00:45:09.407206 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.407360 kubelet[2892]: E0702 00:45:09.407234 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.407727 kubelet[2892]: E0702 00:45:09.407672 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.407727 kubelet[2892]: W0702 00:45:09.407721 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.407921 kubelet[2892]: E0702 00:45:09.407755 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.413563 kubelet[2892]: E0702 00:45:09.413224 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.413563 kubelet[2892]: W0702 00:45:09.413258 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.413563 kubelet[2892]: E0702 00:45:09.413296 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.413563 kubelet[2892]: I0702 00:45:09.413364 2892 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/63f3d045-d881-483e-8a8c-c34301573e52-varrun\") pod \"csi-node-driver-hnrns\" (UID: \"63f3d045-d881-483e-8a8c-c34301573e52\") " pod="calico-system/csi-node-driver-hnrns" Jul 2 00:45:09.414248 kubelet[2892]: E0702 00:45:09.414040 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.414248 kubelet[2892]: W0702 00:45:09.414069 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.414248 kubelet[2892]: E0702 00:45:09.414134 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.414248 kubelet[2892]: I0702 00:45:09.414187 2892 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/63f3d045-d881-483e-8a8c-c34301573e52-kubelet-dir\") pod \"csi-node-driver-hnrns\" (UID: \"63f3d045-d881-483e-8a8c-c34301573e52\") " pod="calico-system/csi-node-driver-hnrns" Jul 2 00:45:09.414671 kubelet[2892]: E0702 00:45:09.414605 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.414768 kubelet[2892]: W0702 00:45:09.414669 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.414768 kubelet[2892]: E0702 00:45:09.414717 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.418438 kubelet[2892]: E0702 00:45:09.417281 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.418438 kubelet[2892]: W0702 00:45:09.417323 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.418438 kubelet[2892]: E0702 00:45:09.417374 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.418438 kubelet[2892]: E0702 00:45:09.418110 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.418438 kubelet[2892]: W0702 00:45:09.418186 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.418438 kubelet[2892]: E0702 00:45:09.418230 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.418438 kubelet[2892]: I0702 00:45:09.418278 2892 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/63f3d045-d881-483e-8a8c-c34301573e52-socket-dir\") pod \"csi-node-driver-hnrns\" (UID: \"63f3d045-d881-483e-8a8c-c34301573e52\") " pod="calico-system/csi-node-driver-hnrns" Jul 2 00:45:09.419041 kubelet[2892]: E0702 00:45:09.419001 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.419041 kubelet[2892]: W0702 00:45:09.419036 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.419339 kubelet[2892]: E0702 00:45:09.419301 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.419421 kubelet[2892]: I0702 00:45:09.419363 2892 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-nbcj4\" (UniqueName: \"kubernetes.io/projected/63f3d045-d881-483e-8a8c-c34301573e52-kube-api-access-nbcj4\") pod \"csi-node-driver-hnrns\" (UID: \"63f3d045-d881-483e-8a8c-c34301573e52\") " pod="calico-system/csi-node-driver-hnrns" Jul 2 00:45:09.421509 kubelet[2892]: E0702 00:45:09.421459 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.421509 kubelet[2892]: W0702 00:45:09.421497 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.421846 kubelet[2892]: E0702 00:45:09.421793 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.421958 kubelet[2892]: E0702 00:45:09.421932 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.421958 kubelet[2892]: W0702 00:45:09.421950 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.422176 kubelet[2892]: E0702 00:45:09.422105 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.422420 kubelet[2892]: E0702 00:45:09.422388 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.422420 kubelet[2892]: W0702 00:45:09.422415 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.422729 kubelet[2892]: E0702 00:45:09.422626 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.422729 kubelet[2892]: I0702 00:45:09.422695 2892 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/63f3d045-d881-483e-8a8c-c34301573e52-registration-dir\") pod \"csi-node-driver-hnrns\" (UID: \"63f3d045-d881-483e-8a8c-c34301573e52\") " pod="calico-system/csi-node-driver-hnrns" Jul 2 00:45:09.422894 kubelet[2892]: E0702 00:45:09.422818 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.422894 kubelet[2892]: W0702 00:45:09.422836 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.423051 kubelet[2892]: E0702 00:45:09.422999 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.423367 kubelet[2892]: E0702 00:45:09.423331 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.423367 kubelet[2892]: W0702 00:45:09.423361 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.423626 kubelet[2892]: E0702 00:45:09.423397 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.423907 kubelet[2892]: E0702 00:45:09.423870 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.423907 kubelet[2892]: W0702 00:45:09.423901 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.424058 kubelet[2892]: E0702 00:45:09.423938 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.424312 kubelet[2892]: E0702 00:45:09.424280 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.424312 kubelet[2892]: W0702 00:45:09.424307 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.424445 kubelet[2892]: E0702 00:45:09.424335 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.424685 kubelet[2892]: E0702 00:45:09.424651 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.424788 kubelet[2892]: W0702 00:45:09.424689 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.424788 kubelet[2892]: E0702 00:45:09.424717 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.425076 kubelet[2892]: E0702 00:45:09.425042 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.425076 kubelet[2892]: W0702 00:45:09.425070 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.425530 kubelet[2892]: E0702 00:45:09.425102 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.443434 env[1740]: time="2024-07-02T00:45:09.443193963Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 00:45:09.443434 env[1740]: time="2024-07-02T00:45:09.443377494Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 00:45:09.443643 env[1740]: time="2024-07-02T00:45:09.443463331Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 00:45:09.443895 env[1740]: time="2024-07-02T00:45:09.443809572Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a2dbdf0faf56491cd0349292b96195d4b32358c71fdf95418588528bae6639cd pid=3346 runtime=io.containerd.runc.v2 Jul 2 00:45:09.478570 env[1740]: time="2024-07-02T00:45:09.478496727Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-8685484b8c-mhbbt,Uid:85b7416e-40a4-469f-9ffa-7cfdd9450278,Namespace:calico-system,Attempt:0,} returns sandbox id \"dba174148dec9b5c2f3015cc8be956d36903a47e637a365d277636f0c09d1b39\"" Jul 2 00:45:09.484890 env[1740]: time="2024-07-02T00:45:09.484840108Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.28.0\"" Jul 2 00:45:09.505813 systemd[1]: Started cri-containerd-a2dbdf0faf56491cd0349292b96195d4b32358c71fdf95418588528bae6639cd.scope. Jul 2 00:45:09.527241 kubelet[2892]: E0702 00:45:09.526308 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.527241 kubelet[2892]: W0702 00:45:09.526374 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.527241 kubelet[2892]: E0702 00:45:09.526416 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.527241 kubelet[2892]: E0702 00:45:09.527030 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.527241 kubelet[2892]: W0702 00:45:09.527053 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.527241 kubelet[2892]: E0702 00:45:09.527085 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.527724 kubelet[2892]: E0702 00:45:09.527546 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.527724 kubelet[2892]: W0702 00:45:09.527580 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.527724 kubelet[2892]: E0702 00:45:09.527611 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.528005 kubelet[2892]: E0702 00:45:09.527965 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.528005 kubelet[2892]: W0702 00:45:09.528000 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.528209 kubelet[2892]: E0702 00:45:09.528042 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.528595 kubelet[2892]: E0702 00:45:09.528553 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.528595 kubelet[2892]: W0702 00:45:09.528585 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.528789 kubelet[2892]: E0702 00:45:09.528628 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.532224 kubelet[2892]: E0702 00:45:09.529192 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.532224 kubelet[2892]: W0702 00:45:09.529226 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.532224 kubelet[2892]: E0702 00:45:09.529270 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.532224 kubelet[2892]: E0702 00:45:09.530194 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.532224 kubelet[2892]: W0702 00:45:09.530219 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.532224 kubelet[2892]: E0702 00:45:09.530451 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.532224 kubelet[2892]: E0702 00:45:09.530890 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.532224 kubelet[2892]: W0702 00:45:09.530911 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.532224 kubelet[2892]: E0702 00:45:09.531098 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.532224 kubelet[2892]: E0702 00:45:09.531569 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.532894 kubelet[2892]: W0702 00:45:09.531592 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.532894 kubelet[2892]: E0702 00:45:09.531772 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.535215 kubelet[2892]: E0702 00:45:09.533644 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.535215 kubelet[2892]: W0702 00:45:09.533678 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.535215 kubelet[2892]: E0702 00:45:09.533917 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.538186 kubelet[2892]: E0702 00:45:09.536291 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.538186 kubelet[2892]: W0702 00:45:09.536329 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.538186 kubelet[2892]: E0702 00:45:09.536529 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.538186 kubelet[2892]: E0702 00:45:09.536788 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.538186 kubelet[2892]: W0702 00:45:09.536806 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.538186 kubelet[2892]: E0702 00:45:09.536952 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.538186 kubelet[2892]: E0702 00:45:09.537305 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.538186 kubelet[2892]: W0702 00:45:09.537324 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.538186 kubelet[2892]: E0702 00:45:09.537477 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.538186 kubelet[2892]: E0702 00:45:09.537755 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.538876 kubelet[2892]: W0702 00:45:09.537774 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.538876 kubelet[2892]: E0702 00:45:09.537986 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.538876 kubelet[2892]: E0702 00:45:09.538550 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.538876 kubelet[2892]: W0702 00:45:09.538571 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.538876 kubelet[2892]: E0702 00:45:09.538752 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.539169 kubelet[2892]: E0702 00:45:09.538969 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.539169 kubelet[2892]: W0702 00:45:09.538984 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.539312 kubelet[2892]: E0702 00:45:09.539218 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.539448 kubelet[2892]: E0702 00:45:09.539411 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.539448 kubelet[2892]: W0702 00:45:09.539439 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.539621 kubelet[2892]: E0702 00:45:09.539586 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.542521 kubelet[2892]: E0702 00:45:09.539827 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.542521 kubelet[2892]: W0702 00:45:09.539855 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.542521 kubelet[2892]: E0702 00:45:09.540188 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.542521 kubelet[2892]: E0702 00:45:09.540371 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.542521 kubelet[2892]: W0702 00:45:09.540388 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.542521 kubelet[2892]: E0702 00:45:09.540751 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.542521 kubelet[2892]: W0702 00:45:09.540782 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.542521 kubelet[2892]: E0702 00:45:09.541091 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.542521 kubelet[2892]: W0702 00:45:09.541107 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.542521 kubelet[2892]: E0702 00:45:09.541500 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.543301 kubelet[2892]: W0702 00:45:09.541520 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.543301 kubelet[2892]: E0702 00:45:09.541551 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.543301 kubelet[2892]: E0702 00:45:09.541599 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.543301 kubelet[2892]: E0702 00:45:09.542204 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.543301 kubelet[2892]: E0702 00:45:09.542439 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.547588 kubelet[2892]: E0702 00:45:09.547540 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.547588 kubelet[2892]: W0702 00:45:09.547576 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.547833 kubelet[2892]: E0702 00:45:09.547626 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.549215 kubelet[2892]: E0702 00:45:09.548159 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.549215 kubelet[2892]: W0702 00:45:09.548190 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.549215 kubelet[2892]: E0702 00:45:09.548231 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.552277 kubelet[2892]: E0702 00:45:09.550291 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.552277 kubelet[2892]: W0702 00:45:09.550329 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.552277 kubelet[2892]: E0702 00:45:09.550367 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.577936 kubelet[2892]: E0702 00:45:09.577899 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:09.578335 kubelet[2892]: W0702 00:45:09.578298 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:09.578553 kubelet[2892]: E0702 00:45:09.578529 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:09.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.651000 audit: BPF prog-id=125 op=LOAD Jul 2 00:45:09.651000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.651000 audit[3356]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3346 pid=3356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:09.651000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132646264663066616635363439316364303334393239326239363139 Jul 2 00:45:09.651000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.651000 audit[3356]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3346 pid=3356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:09.651000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132646264663066616635363439316364303334393239326239363139 Jul 2 00:45:09.651000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.651000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.651000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.651000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.651000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.651000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.651000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.651000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.651000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.651000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.651000 audit: BPF prog-id=126 op=LOAD Jul 2 00:45:09.651000 audit[3356]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3346 pid=3356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:09.651000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132646264663066616635363439316364303334393239326239363139 Jul 2 00:45:09.652000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.652000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.652000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.652000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.652000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.652000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.652000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.652000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.652000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.652000 audit: BPF prog-id=127 op=LOAD Jul 2 00:45:09.652000 audit[3356]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3346 pid=3356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:09.652000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132646264663066616635363439316364303334393239326239363139 Jul 2 00:45:09.652000 audit: BPF prog-id=127 op=UNLOAD Jul 2 00:45:09.652000 audit: BPF prog-id=126 op=UNLOAD Jul 2 00:45:09.652000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.652000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.652000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.652000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.652000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.652000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.652000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.652000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.652000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.652000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:09.652000 audit: BPF prog-id=128 op=LOAD Jul 2 00:45:09.652000 audit[3356]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3346 pid=3356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:09.652000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132646264663066616635363439316364303334393239326239363139 Jul 2 00:45:09.717836 env[1740]: time="2024-07-02T00:45:09.707705895Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-hwwh6,Uid:db1efefd-dd33-4ee8-b403-4bc1312b918e,Namespace:calico-system,Attempt:0,} returns sandbox id \"a2dbdf0faf56491cd0349292b96195d4b32358c71fdf95418588528bae6639cd\"" Jul 2 00:45:09.736000 audit[3417]: NETFILTER_CFG table=filter:93 family=2 entries=16 op=nft_register_rule pid=3417 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 00:45:09.736000 audit[3417]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5908 a0=3 a1=ffffeca0ccb0 a2=0 a3=1 items=0 ppid=3068 pid=3417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:09.736000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 00:45:09.740000 audit[3417]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=3417 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 00:45:09.740000 audit[3417]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffeca0ccb0 a2=0 a3=1 items=0 ppid=3068 pid=3417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:09.740000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 00:45:10.678904 kubelet[2892]: E0702 00:45:10.678806 2892 pod_workers.go:1300] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-hnrns" podUID="63f3d045-d881-483e-8a8c-c34301573e52" Jul 2 00:45:11.793196 env[1740]: time="2024-07-02T00:45:11.793114305Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:45:11.798522 env[1740]: time="2024-07-02T00:45:11.798465386Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2551880d36cd0ce4c6820747ffe4c40cbf344d26df0ecd878808432ad4f78f03,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:45:11.802931 env[1740]: time="2024-07-02T00:45:11.802876098Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:45:11.807726 env[1740]: time="2024-07-02T00:45:11.807665032Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:eff1501af12b7e27e2ef8f4e55d03d837bcb017aa5663e22e519059c452d51ed,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:45:11.810333 env[1740]: time="2024-07-02T00:45:11.809247363Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.28.0\" returns image reference \"sha256:2551880d36cd0ce4c6820747ffe4c40cbf344d26df0ecd878808432ad4f78f03\"" Jul 2 00:45:11.820269 env[1740]: time="2024-07-02T00:45:11.820208346Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.28.0\"" Jul 2 00:45:11.862873 env[1740]: time="2024-07-02T00:45:11.862594160Z" level=info msg="CreateContainer within sandbox \"dba174148dec9b5c2f3015cc8be956d36903a47e637a365d277636f0c09d1b39\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Jul 2 00:45:11.897755 env[1740]: time="2024-07-02T00:45:11.897687157Z" level=info msg="CreateContainer within sandbox \"dba174148dec9b5c2f3015cc8be956d36903a47e637a365d277636f0c09d1b39\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"2b1fad52fbc4dfb694346210993b5e332e289b305c2458f10dd03ba1b766c128\"" Jul 2 00:45:11.900383 env[1740]: time="2024-07-02T00:45:11.900331815Z" level=info msg="StartContainer for \"2b1fad52fbc4dfb694346210993b5e332e289b305c2458f10dd03ba1b766c128\"" Jul 2 00:45:11.946336 systemd[1]: Started cri-containerd-2b1fad52fbc4dfb694346210993b5e332e289b305c2458f10dd03ba1b766c128.scope. Jul 2 00:45:12.015000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:12.015000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:12.015000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:12.015000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:12.015000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:12.015000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:12.015000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:12.015000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:12.015000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:12.015000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:12.015000 audit: BPF prog-id=129 op=LOAD Jul 2 00:45:12.017000 audit[3427]: AVC avc: denied { bpf } for pid=3427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:12.017000 audit[3427]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3263 pid=3427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:12.017000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262316661643532666263346466623639343334363231303939336235 Jul 2 00:45:12.018000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:12.018000 audit[3427]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3263 pid=3427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:12.018000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262316661643532666263346466623639343334363231303939336235 Jul 2 00:45:12.019000 audit[3427]: AVC avc: denied { bpf } for pid=3427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:12.019000 audit[3427]: AVC avc: denied { bpf } for pid=3427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:12.019000 audit[3427]: AVC avc: denied { bpf } for pid=3427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:12.019000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:12.019000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:12.019000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:12.019000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:12.019000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:12.019000 audit[3427]: AVC avc: denied { bpf } for pid=3427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:12.019000 audit[3427]: AVC avc: denied { bpf } for pid=3427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:12.019000 audit: BPF prog-id=130 op=LOAD Jul 2 00:45:12.019000 audit[3427]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3263 pid=3427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:12.019000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262316661643532666263346466623639343334363231303939336235 Jul 2 00:45:12.021000 audit[3427]: AVC avc: denied { bpf } for pid=3427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:12.021000 audit[3427]: AVC avc: denied { bpf } for pid=3427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:12.021000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:12.021000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:12.021000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:12.021000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:12.021000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:12.021000 audit[3427]: AVC avc: denied { bpf } for pid=3427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:12.021000 audit[3427]: AVC avc: denied { bpf } for pid=3427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:12.021000 audit: BPF prog-id=131 op=LOAD Jul 2 00:45:12.021000 audit[3427]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3263 pid=3427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:12.021000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262316661643532666263346466623639343334363231303939336235 Jul 2 00:45:12.024000 audit: BPF prog-id=131 op=UNLOAD Jul 2 00:45:12.024000 audit: BPF prog-id=130 op=UNLOAD Jul 2 00:45:12.024000 audit[3427]: AVC avc: denied { bpf } for pid=3427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:12.024000 audit[3427]: AVC avc: denied { bpf } for pid=3427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:12.024000 audit[3427]: AVC avc: denied { bpf } for pid=3427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:12.024000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:12.024000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:12.024000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:12.024000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:12.024000 audit[3427]: AVC avc: denied { perfmon } for pid=3427 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:12.024000 audit[3427]: AVC avc: denied { bpf } for pid=3427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:12.024000 audit[3427]: AVC avc: denied { bpf } for pid=3427 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:12.024000 audit: BPF prog-id=132 op=LOAD Jul 2 00:45:12.024000 audit[3427]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3263 pid=3427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:12.024000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262316661643532666263346466623639343334363231303939336235 Jul 2 00:45:12.120755 env[1740]: time="2024-07-02T00:45:12.120564735Z" level=info msg="StartContainer for \"2b1fad52fbc4dfb694346210993b5e332e289b305c2458f10dd03ba1b766c128\" returns successfully" Jul 2 00:45:12.679447 kubelet[2892]: E0702 00:45:12.679312 2892 pod_workers.go:1300] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-hnrns" podUID="63f3d045-d881-483e-8a8c-c34301573e52" Jul 2 00:45:13.015309 kubelet[2892]: I0702 00:45:13.014841 2892 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-typha-8685484b8c-mhbbt" podStartSLOduration=2.68765041 podCreationTimestamp="2024-07-02 00:45:08 +0000 UTC" firstStartedPulling="2024-07-02 00:45:09.484009983 +0000 UTC m=+25.165280716" lastFinishedPulling="2024-07-02 00:45:11.811087949 +0000 UTC m=+27.492358670" observedRunningTime="2024-07-02 00:45:13.014487604 +0000 UTC m=+28.695758337" watchObservedRunningTime="2024-07-02 00:45:13.014728364 +0000 UTC m=+28.695999109" Jul 2 00:45:13.042187 kubelet[2892]: E0702 00:45:13.042107 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:13.042187 kubelet[2892]: W0702 00:45:13.042177 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:13.042487 kubelet[2892]: E0702 00:45:13.042220 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:13.042732 kubelet[2892]: E0702 00:45:13.042691 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:13.042732 kubelet[2892]: W0702 00:45:13.042727 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:13.042963 kubelet[2892]: E0702 00:45:13.042766 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:13.044063 kubelet[2892]: E0702 00:45:13.044015 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:13.044258 kubelet[2892]: W0702 00:45:13.044071 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:13.044258 kubelet[2892]: E0702 00:45:13.044111 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:13.044622 kubelet[2892]: E0702 00:45:13.044582 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:13.044622 kubelet[2892]: W0702 00:45:13.044618 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:13.044867 kubelet[2892]: E0702 00:45:13.044655 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:13.045381 kubelet[2892]: E0702 00:45:13.045333 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:13.045381 kubelet[2892]: W0702 00:45:13.045374 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:13.045622 kubelet[2892]: E0702 00:45:13.045414 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:13.045884 kubelet[2892]: E0702 00:45:13.045844 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:13.045884 kubelet[2892]: W0702 00:45:13.045879 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:13.046108 kubelet[2892]: E0702 00:45:13.045914 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:13.047379 kubelet[2892]: E0702 00:45:13.047328 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:13.047379 kubelet[2892]: W0702 00:45:13.047368 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:13.047653 kubelet[2892]: E0702 00:45:13.047410 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:13.047868 kubelet[2892]: E0702 00:45:13.047830 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:13.047868 kubelet[2892]: W0702 00:45:13.047862 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:13.048050 kubelet[2892]: E0702 00:45:13.047899 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:13.049369 kubelet[2892]: E0702 00:45:13.049321 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:13.049369 kubelet[2892]: W0702 00:45:13.049370 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:13.049645 kubelet[2892]: E0702 00:45:13.049413 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:13.051025 kubelet[2892]: E0702 00:45:13.050923 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:13.051025 kubelet[2892]: W0702 00:45:13.051017 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:13.051338 kubelet[2892]: E0702 00:45:13.051061 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:13.053039 kubelet[2892]: E0702 00:45:13.052987 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:13.053039 kubelet[2892]: W0702 00:45:13.053028 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:13.053414 kubelet[2892]: E0702 00:45:13.053071 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:13.053653 kubelet[2892]: E0702 00:45:13.053601 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:13.053795 kubelet[2892]: W0702 00:45:13.053659 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:13.053795 kubelet[2892]: E0702 00:45:13.053698 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:13.055644 kubelet[2892]: E0702 00:45:13.055591 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:13.055644 kubelet[2892]: W0702 00:45:13.055631 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:13.055938 kubelet[2892]: E0702 00:45:13.055673 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:13.056214 kubelet[2892]: E0702 00:45:13.056172 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:13.056214 kubelet[2892]: W0702 00:45:13.056209 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:13.056457 kubelet[2892]: E0702 00:45:13.056246 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:13.059922 kubelet[2892]: E0702 00:45:13.059871 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:13.059922 kubelet[2892]: W0702 00:45:13.059913 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:13.060230 kubelet[2892]: E0702 00:45:13.059956 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:13.061383 kubelet[2892]: E0702 00:45:13.061331 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:13.061383 kubelet[2892]: W0702 00:45:13.061373 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:13.061688 kubelet[2892]: E0702 00:45:13.061418 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:13.063144 kubelet[2892]: E0702 00:45:13.063069 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:13.063335 kubelet[2892]: W0702 00:45:13.063107 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:13.063335 kubelet[2892]: E0702 00:45:13.063213 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:13.065357 kubelet[2892]: E0702 00:45:13.065308 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:13.065357 kubelet[2892]: W0702 00:45:13.065346 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:13.065822 kubelet[2892]: E0702 00:45:13.065655 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:13.065822 kubelet[2892]: E0702 00:45:13.065818 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:13.066043 kubelet[2892]: W0702 00:45:13.065839 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:13.066437 kubelet[2892]: E0702 00:45:13.066196 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:13.067355 kubelet[2892]: E0702 00:45:13.067307 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:13.067355 kubelet[2892]: W0702 00:45:13.067346 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:13.067759 kubelet[2892]: E0702 00:45:13.067675 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:13.069312 kubelet[2892]: E0702 00:45:13.069189 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:13.069312 kubelet[2892]: W0702 00:45:13.069303 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:13.069861 kubelet[2892]: E0702 00:45:13.069624 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:13.070267 kubelet[2892]: E0702 00:45:13.070220 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:13.070267 kubelet[2892]: W0702 00:45:13.070260 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:13.070669 kubelet[2892]: E0702 00:45:13.070578 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:13.070838 kubelet[2892]: E0702 00:45:13.070799 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:13.070838 kubelet[2892]: W0702 00:45:13.070833 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:13.071353 kubelet[2892]: E0702 00:45:13.071105 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:13.072481 kubelet[2892]: E0702 00:45:13.072427 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:13.072481 kubelet[2892]: W0702 00:45:13.072471 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:13.072918 kubelet[2892]: E0702 00:45:13.072841 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:13.073079 kubelet[2892]: E0702 00:45:13.072961 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:13.073079 kubelet[2892]: W0702 00:45:13.072981 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:13.073458 kubelet[2892]: E0702 00:45:13.073347 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:13.079380 kubelet[2892]: E0702 00:45:13.079330 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:13.079380 kubelet[2892]: W0702 00:45:13.079370 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:13.079802 kubelet[2892]: E0702 00:45:13.079690 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:13.079938 kubelet[2892]: E0702 00:45:13.079806 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:13.079938 kubelet[2892]: W0702 00:45:13.079827 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:13.080439 kubelet[2892]: E0702 00:45:13.080108 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:13.081353 kubelet[2892]: E0702 00:45:13.081306 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:13.081353 kubelet[2892]: W0702 00:45:13.081345 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:13.082800 kubelet[2892]: E0702 00:45:13.081664 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:13.082800 kubelet[2892]: E0702 00:45:13.081762 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:13.082800 kubelet[2892]: W0702 00:45:13.081782 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:13.082800 kubelet[2892]: E0702 00:45:13.082320 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:13.083374 kubelet[2892]: E0702 00:45:13.083338 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:13.083476 kubelet[2892]: W0702 00:45:13.083371 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:13.083476 kubelet[2892]: E0702 00:45:13.083420 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:13.084288 kubelet[2892]: E0702 00:45:13.084001 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:13.084288 kubelet[2892]: W0702 00:45:13.084028 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:13.084288 kubelet[2892]: E0702 00:45:13.084077 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:13.085690 kubelet[2892]: E0702 00:45:13.085431 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:13.085690 kubelet[2892]: W0702 00:45:13.085460 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:13.085690 kubelet[2892]: E0702 00:45:13.085502 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:13.086334 kubelet[2892]: E0702 00:45:13.086300 2892 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 00:45:13.086517 kubelet[2892]: W0702 00:45:13.086488 2892 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 00:45:13.086674 kubelet[2892]: E0702 00:45:13.086647 2892 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 00:45:13.117563 env[1740]: time="2024-07-02T00:45:13.117499361Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:45:13.123431 env[1740]: time="2024-07-02T00:45:13.123348578Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:4b6a6a9b369fa6127e23e376ac423670fa81290e0860917acaacae108e3cc064,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:45:13.127067 env[1740]: time="2024-07-02T00:45:13.127003840Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:45:13.130514 env[1740]: time="2024-07-02T00:45:13.130430271Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:e57c9db86f1cee1ae6f41257eed1ee2f363783177809217a2045502a09cf7cee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:45:13.132210 env[1740]: time="2024-07-02T00:45:13.132096302Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.28.0\" returns image reference \"sha256:4b6a6a9b369fa6127e23e376ac423670fa81290e0860917acaacae108e3cc064\"" Jul 2 00:45:13.139661 env[1740]: time="2024-07-02T00:45:13.139583145Z" level=info msg="CreateContainer within sandbox \"a2dbdf0faf56491cd0349292b96195d4b32358c71fdf95418588528bae6639cd\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Jul 2 00:45:13.172794 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount489606603.mount: Deactivated successfully. Jul 2 00:45:13.183633 env[1740]: time="2024-07-02T00:45:13.183539546Z" level=info msg="CreateContainer within sandbox \"a2dbdf0faf56491cd0349292b96195d4b32358c71fdf95418588528bae6639cd\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"5790beeae0b617a68a1ef69a4c1a3a0dbbe1f6d385d2490af71def9a7b11dbb6\"" Jul 2 00:45:13.184827 env[1740]: time="2024-07-02T00:45:13.184760478Z" level=info msg="StartContainer for \"5790beeae0b617a68a1ef69a4c1a3a0dbbe1f6d385d2490af71def9a7b11dbb6\"" Jul 2 00:45:13.285957 systemd[1]: Started cri-containerd-5790beeae0b617a68a1ef69a4c1a3a0dbbe1f6d385d2490af71def9a7b11dbb6.scope. Jul 2 00:45:13.346000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:13.346000 audit[3501]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3346 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:13.346000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537393062656561653062363137613638613165663639613463316133 Jul 2 00:45:13.346000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:13.346000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:13.346000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:13.346000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:13.346000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:13.346000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:13.346000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:13.346000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:13.346000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:13.346000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:13.346000 audit: BPF prog-id=133 op=LOAD Jul 2 00:45:13.346000 audit[3501]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3346 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:13.346000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537393062656561653062363137613638613165663639613463316133 Jul 2 00:45:13.346000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:13.346000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:13.346000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:13.346000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:13.346000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:13.346000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:13.346000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:13.346000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:13.346000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:13.346000 audit: BPF prog-id=134 op=LOAD Jul 2 00:45:13.346000 audit[3501]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3346 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:13.346000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537393062656561653062363137613638613165663639613463316133 Jul 2 00:45:13.346000 audit: BPF prog-id=134 op=UNLOAD Jul 2 00:45:13.346000 audit: BPF prog-id=133 op=UNLOAD Jul 2 00:45:13.346000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:13.346000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:13.346000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:13.346000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:13.346000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:13.346000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:13.346000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:13.346000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:13.346000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:13.346000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:13.346000 audit: BPF prog-id=135 op=LOAD Jul 2 00:45:13.346000 audit[3501]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3346 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:13.346000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537393062656561653062363137613638613165663639613463316133 Jul 2 00:45:13.390342 env[1740]: time="2024-07-02T00:45:13.390270757Z" level=info msg="StartContainer for \"5790beeae0b617a68a1ef69a4c1a3a0dbbe1f6d385d2490af71def9a7b11dbb6\" returns successfully" Jul 2 00:45:13.445044 systemd[1]: cri-containerd-5790beeae0b617a68a1ef69a4c1a3a0dbbe1f6d385d2490af71def9a7b11dbb6.scope: Deactivated successfully. Jul 2 00:45:13.449000 audit: BPF prog-id=135 op=UNLOAD Jul 2 00:45:13.834057 systemd[1]: run-containerd-runc-k8s.io-5790beeae0b617a68a1ef69a4c1a3a0dbbe1f6d385d2490af71def9a7b11dbb6-runc.NpD76c.mount: Deactivated successfully. Jul 2 00:45:13.834312 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-5790beeae0b617a68a1ef69a4c1a3a0dbbe1f6d385d2490af71def9a7b11dbb6-rootfs.mount: Deactivated successfully. Jul 2 00:45:13.880620 env[1740]: time="2024-07-02T00:45:13.880554937Z" level=info msg="shim disconnected" id=5790beeae0b617a68a1ef69a4c1a3a0dbbe1f6d385d2490af71def9a7b11dbb6 Jul 2 00:45:13.880904 env[1740]: time="2024-07-02T00:45:13.880870565Z" level=warning msg="cleaning up after shim disconnected" id=5790beeae0b617a68a1ef69a4c1a3a0dbbe1f6d385d2490af71def9a7b11dbb6 namespace=k8s.io Jul 2 00:45:13.881071 env[1740]: time="2024-07-02T00:45:13.881044064Z" level=info msg="cleaning up dead shim" Jul 2 00:45:13.901370 env[1740]: time="2024-07-02T00:45:13.901295386Z" level=warning msg="cleanup warnings time=\"2024-07-02T00:45:13Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3538 runtime=io.containerd.runc.v2\n" Jul 2 00:45:13.992575 kubelet[2892]: I0702 00:45:13.992512 2892 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 2 00:45:13.996290 env[1740]: time="2024-07-02T00:45:13.996214424Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.28.0\"" Jul 2 00:45:14.679671 kubelet[2892]: E0702 00:45:14.679616 2892 pod_workers.go:1300] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-hnrns" podUID="63f3d045-d881-483e-8a8c-c34301573e52" Jul 2 00:45:16.679818 kubelet[2892]: E0702 00:45:16.679443 2892 pod_workers.go:1300] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-hnrns" podUID="63f3d045-d881-483e-8a8c-c34301573e52" Jul 2 00:45:18.680284 kubelet[2892]: E0702 00:45:18.680068 2892 pod_workers.go:1300] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-hnrns" podUID="63f3d045-d881-483e-8a8c-c34301573e52" Jul 2 00:45:18.736987 env[1740]: time="2024-07-02T00:45:18.736924636Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:45:18.740347 env[1740]: time="2024-07-02T00:45:18.740281785Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:adcb19ea66141abcd7dc426e3205f2e6ff26e524a3f7148c97f3d49933f502ee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:45:18.743892 env[1740]: time="2024-07-02T00:45:18.743831476Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:45:18.746174 env[1740]: time="2024-07-02T00:45:18.746074327Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:67fdc0954d3c96f9a7938fca4d5759c835b773dfb5cb513903e89d21462d886e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:45:18.747657 env[1740]: time="2024-07-02T00:45:18.747587281Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.28.0\" returns image reference \"sha256:adcb19ea66141abcd7dc426e3205f2e6ff26e524a3f7148c97f3d49933f502ee\"" Jul 2 00:45:18.754284 env[1740]: time="2024-07-02T00:45:18.753994651Z" level=info msg="CreateContainer within sandbox \"a2dbdf0faf56491cd0349292b96195d4b32358c71fdf95418588528bae6639cd\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Jul 2 00:45:18.783710 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4131390662.mount: Deactivated successfully. Jul 2 00:45:18.793176 env[1740]: time="2024-07-02T00:45:18.792797612Z" level=info msg="CreateContainer within sandbox \"a2dbdf0faf56491cd0349292b96195d4b32358c71fdf95418588528bae6639cd\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"1b5880503b7ba5e8b4bf1a977fa7a8b9b00c205c5798c50cfb7d3025242d41a6\"" Jul 2 00:45:18.795557 env[1740]: time="2024-07-02T00:45:18.795503273Z" level=info msg="StartContainer for \"1b5880503b7ba5e8b4bf1a977fa7a8b9b00c205c5798c50cfb7d3025242d41a6\"" Jul 2 00:45:18.846187 systemd[1]: run-containerd-runc-k8s.io-1b5880503b7ba5e8b4bf1a977fa7a8b9b00c205c5798c50cfb7d3025242d41a6-runc.2ycsTT.mount: Deactivated successfully. Jul 2 00:45:18.854565 systemd[1]: Started cri-containerd-1b5880503b7ba5e8b4bf1a977fa7a8b9b00c205c5798c50cfb7d3025242d41a6.scope. Jul 2 00:45:18.913898 kernel: kauditd_printk_skb: 223 callbacks suppressed Jul 2 00:45:18.914157 kernel: audit: type=1400 audit(1719881118.904:1008): avc: denied { perfmon } for pid=3566 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:18.904000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:18.904000 audit[3566]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3346 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:18.924834 kernel: audit: type=1300 audit(1719881118.904:1008): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3346 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:18.924930 kernel: audit: type=1327 audit(1719881118.904:1008): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162353838303530336237626135653862346266316139373766613761 Jul 2 00:45:18.904000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162353838303530336237626135653862346266316139373766613761 Jul 2 00:45:18.904000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:18.941538 kernel: audit: type=1400 audit(1719881118.904:1009): avc: denied { bpf } for pid=3566 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:18.904000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:18.904000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:18.955798 kernel: audit: type=1400 audit(1719881118.904:1009): avc: denied { bpf } for pid=3566 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:18.955944 kernel: audit: type=1400 audit(1719881118.904:1009): avc: denied { bpf } for pid=3566 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:18.956112 kernel: audit: type=1400 audit(1719881118.904:1009): avc: denied { perfmon } for pid=3566 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:18.904000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:18.904000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:18.969347 kernel: audit: type=1400 audit(1719881118.904:1009): avc: denied { perfmon } for pid=3566 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:18.977170 kernel: audit: type=1400 audit(1719881118.904:1009): avc: denied { perfmon } for pid=3566 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:18.977340 kernel: audit: type=1400 audit(1719881118.904:1009): avc: denied { perfmon } for pid=3566 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:18.904000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:18.904000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:18.904000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:18.904000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:18.904000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:18.904000 audit: BPF prog-id=136 op=LOAD Jul 2 00:45:18.904000 audit[3566]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3346 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:18.904000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162353838303530336237626135653862346266316139373766613761 Jul 2 00:45:18.906000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:18.906000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:18.906000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:18.906000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:18.906000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:18.906000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:18.906000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:18.906000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:18.906000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:18.906000 audit: BPF prog-id=137 op=LOAD Jul 2 00:45:18.906000 audit[3566]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3346 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:18.906000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162353838303530336237626135653862346266316139373766613761 Jul 2 00:45:18.912000 audit: BPF prog-id=137 op=UNLOAD Jul 2 00:45:18.912000 audit: BPF prog-id=136 op=UNLOAD Jul 2 00:45:18.913000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:18.913000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:18.913000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:18.913000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:18.913000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:18.913000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:18.913000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:18.913000 audit[3566]: AVC avc: denied { perfmon } for pid=3566 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:18.913000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:18.913000 audit[3566]: AVC avc: denied { bpf } for pid=3566 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:18.913000 audit: BPF prog-id=138 op=LOAD Jul 2 00:45:18.913000 audit[3566]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3346 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:18.913000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162353838303530336237626135653862346266316139373766613761 Jul 2 00:45:18.994451 env[1740]: time="2024-07-02T00:45:18.994380646Z" level=info msg="StartContainer for \"1b5880503b7ba5e8b4bf1a977fa7a8b9b00c205c5798c50cfb7d3025242d41a6\" returns successfully" Jul 2 00:45:19.871234 env[1740]: time="2024-07-02T00:45:19.871097653Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 2 00:45:19.876579 systemd[1]: cri-containerd-1b5880503b7ba5e8b4bf1a977fa7a8b9b00c205c5798c50cfb7d3025242d41a6.scope: Deactivated successfully. Jul 2 00:45:19.879000 audit: BPF prog-id=138 op=UNLOAD Jul 2 00:45:19.913030 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-1b5880503b7ba5e8b4bf1a977fa7a8b9b00c205c5798c50cfb7d3025242d41a6-rootfs.mount: Deactivated successfully. Jul 2 00:45:19.942603 kubelet[2892]: I0702 00:45:19.942485 2892 kubelet_node_status.go:493] "Fast updating node status as it just became ready" Jul 2 00:45:19.989247 kubelet[2892]: I0702 00:45:19.989192 2892 topology_manager.go:215] "Topology Admit Handler" podUID="20d53756-c26c-4ea2-823d-ccf0a1b83f65" podNamespace="kube-system" podName="coredns-5dd5756b68-lzxkr" Jul 2 00:45:20.001510 systemd[1]: Created slice kubepods-burstable-pod20d53756_c26c_4ea2_823d_ccf0a1b83f65.slice. Jul 2 00:45:20.016685 kubelet[2892]: I0702 00:45:20.016614 2892 topology_manager.go:215] "Topology Admit Handler" podUID="f67ec736-8618-4365-aaa8-a8e6e546dc9c" podNamespace="calico-system" podName="calico-kube-controllers-c8788dcc9-vfkj6" Jul 2 00:45:20.027415 kubelet[2892]: I0702 00:45:20.027362 2892 topology_manager.go:215] "Topology Admit Handler" podUID="25185ee7-6762-421c-a038-1a114d80eaae" podNamespace="kube-system" podName="coredns-5dd5756b68-npzjs" Jul 2 00:45:20.037584 systemd[1]: Created slice kubepods-besteffort-podf67ec736_8618_4365_aaa8_a8e6e546dc9c.slice. Jul 2 00:45:20.073404 systemd[1]: Created slice kubepods-burstable-pod25185ee7_6762_421c_a038_1a114d80eaae.slice. Jul 2 00:45:20.128064 kubelet[2892]: I0702 00:45:20.127263 2892 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-48p92\" (UniqueName: \"kubernetes.io/projected/f67ec736-8618-4365-aaa8-a8e6e546dc9c-kube-api-access-48p92\") pod \"calico-kube-controllers-c8788dcc9-vfkj6\" (UID: \"f67ec736-8618-4365-aaa8-a8e6e546dc9c\") " pod="calico-system/calico-kube-controllers-c8788dcc9-vfkj6" Jul 2 00:45:20.128064 kubelet[2892]: I0702 00:45:20.127393 2892 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-vml2w\" (UniqueName: \"kubernetes.io/projected/20d53756-c26c-4ea2-823d-ccf0a1b83f65-kube-api-access-vml2w\") pod \"coredns-5dd5756b68-lzxkr\" (UID: \"20d53756-c26c-4ea2-823d-ccf0a1b83f65\") " pod="kube-system/coredns-5dd5756b68-lzxkr" Jul 2 00:45:20.128064 kubelet[2892]: I0702 00:45:20.127522 2892 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/20d53756-c26c-4ea2-823d-ccf0a1b83f65-config-volume\") pod \"coredns-5dd5756b68-lzxkr\" (UID: \"20d53756-c26c-4ea2-823d-ccf0a1b83f65\") " pod="kube-system/coredns-5dd5756b68-lzxkr" Jul 2 00:45:20.128064 kubelet[2892]: I0702 00:45:20.127620 2892 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/f67ec736-8618-4365-aaa8-a8e6e546dc9c-tigera-ca-bundle\") pod \"calico-kube-controllers-c8788dcc9-vfkj6\" (UID: \"f67ec736-8618-4365-aaa8-a8e6e546dc9c\") " pod="calico-system/calico-kube-controllers-c8788dcc9-vfkj6" Jul 2 00:45:20.228438 kubelet[2892]: I0702 00:45:20.228357 2892 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-7qhbm\" (UniqueName: \"kubernetes.io/projected/25185ee7-6762-421c-a038-1a114d80eaae-kube-api-access-7qhbm\") pod \"coredns-5dd5756b68-npzjs\" (UID: \"25185ee7-6762-421c-a038-1a114d80eaae\") " pod="kube-system/coredns-5dd5756b68-npzjs" Jul 2 00:45:20.228717 kubelet[2892]: I0702 00:45:20.228679 2892 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/25185ee7-6762-421c-a038-1a114d80eaae-config-volume\") pod \"coredns-5dd5756b68-npzjs\" (UID: \"25185ee7-6762-421c-a038-1a114d80eaae\") " pod="kube-system/coredns-5dd5756b68-npzjs" Jul 2 00:45:20.316219 env[1740]: time="2024-07-02T00:45:20.315725832Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-lzxkr,Uid:20d53756-c26c-4ea2-823d-ccf0a1b83f65,Namespace:kube-system,Attempt:0,}" Jul 2 00:45:20.362429 env[1740]: time="2024-07-02T00:45:20.362363048Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-c8788dcc9-vfkj6,Uid:f67ec736-8618-4365-aaa8-a8e6e546dc9c,Namespace:calico-system,Attempt:0,}" Jul 2 00:45:20.389257 env[1740]: time="2024-07-02T00:45:20.389036667Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-npzjs,Uid:25185ee7-6762-421c-a038-1a114d80eaae,Namespace:kube-system,Attempt:0,}" Jul 2 00:45:20.691591 systemd[1]: Created slice kubepods-besteffort-pod63f3d045_d881_483e_8a8c_c34301573e52.slice. Jul 2 00:45:20.709288 env[1740]: time="2024-07-02T00:45:20.708650574Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-hnrns,Uid:63f3d045-d881-483e-8a8c-c34301573e52,Namespace:calico-system,Attempt:0,}" Jul 2 00:45:20.802521 env[1740]: time="2024-07-02T00:45:20.801572323Z" level=info msg="shim disconnected" id=1b5880503b7ba5e8b4bf1a977fa7a8b9b00c205c5798c50cfb7d3025242d41a6 Jul 2 00:45:20.802521 env[1740]: time="2024-07-02T00:45:20.801645859Z" level=warning msg="cleaning up after shim disconnected" id=1b5880503b7ba5e8b4bf1a977fa7a8b9b00c205c5798c50cfb7d3025242d41a6 namespace=k8s.io Jul 2 00:45:20.802521 env[1740]: time="2024-07-02T00:45:20.801669260Z" level=info msg="cleaning up dead shim" Jul 2 00:45:20.840954 env[1740]: time="2024-07-02T00:45:20.840089321Z" level=warning msg="cleanup warnings time=\"2024-07-02T00:45:20Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3611 runtime=io.containerd.runc.v2\n" Jul 2 00:45:21.042429 env[1740]: time="2024-07-02T00:45:21.042332855Z" level=error msg="Failed to destroy network for sandbox \"da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 00:45:21.047503 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2-shm.mount: Deactivated successfully. Jul 2 00:45:21.051341 env[1740]: time="2024-07-02T00:45:21.051243231Z" level=error msg="encountered an error cleaning up failed sandbox \"da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 00:45:21.051711 env[1740]: time="2024-07-02T00:45:21.051623888Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-lzxkr,Uid:20d53756-c26c-4ea2-823d-ccf0a1b83f65,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 00:45:21.052708 kubelet[2892]: E0702 00:45:21.052303 2892 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 00:45:21.052708 kubelet[2892]: E0702 00:45:21.052439 2892 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5dd5756b68-lzxkr" Jul 2 00:45:21.052708 kubelet[2892]: E0702 00:45:21.052487 2892 kuberuntime_manager.go:1171] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5dd5756b68-lzxkr" Jul 2 00:45:21.053625 kubelet[2892]: E0702 00:45:21.052637 2892 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-5dd5756b68-lzxkr_kube-system(20d53756-c26c-4ea2-823d-ccf0a1b83f65)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-5dd5756b68-lzxkr_kube-system(20d53756-c26c-4ea2-823d-ccf0a1b83f65)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5dd5756b68-lzxkr" podUID="20d53756-c26c-4ea2-823d-ccf0a1b83f65" Jul 2 00:45:21.061954 kubelet[2892]: I0702 00:45:21.061891 2892 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2" Jul 2 00:45:21.068861 env[1740]: time="2024-07-02T00:45:21.068748740Z" level=info msg="StopPodSandbox for \"da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2\"" Jul 2 00:45:21.087530 env[1740]: time="2024-07-02T00:45:21.087473786Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.28.0\"" Jul 2 00:45:21.148270 env[1740]: time="2024-07-02T00:45:21.148077381Z" level=error msg="Failed to destroy network for sandbox \"17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 00:45:21.152688 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef-shm.mount: Deactivated successfully. Jul 2 00:45:21.156640 env[1740]: time="2024-07-02T00:45:21.156544172Z" level=error msg="encountered an error cleaning up failed sandbox \"17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 00:45:21.156996 env[1740]: time="2024-07-02T00:45:21.156906180Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-npzjs,Uid:25185ee7-6762-421c-a038-1a114d80eaae,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 00:45:21.158469 kubelet[2892]: E0702 00:45:21.157714 2892 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 00:45:21.158469 kubelet[2892]: E0702 00:45:21.157824 2892 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5dd5756b68-npzjs" Jul 2 00:45:21.158469 kubelet[2892]: E0702 00:45:21.157888 2892 kuberuntime_manager.go:1171] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5dd5756b68-npzjs" Jul 2 00:45:21.158852 kubelet[2892]: E0702 00:45:21.157993 2892 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-5dd5756b68-npzjs_kube-system(25185ee7-6762-421c-a038-1a114d80eaae)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-5dd5756b68-npzjs_kube-system(25185ee7-6762-421c-a038-1a114d80eaae)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5dd5756b68-npzjs" podUID="25185ee7-6762-421c-a038-1a114d80eaae" Jul 2 00:45:21.167709 env[1740]: time="2024-07-02T00:45:21.167621689Z" level=error msg="Failed to destroy network for sandbox \"2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 00:45:21.174217 env[1740]: time="2024-07-02T00:45:21.172451803Z" level=error msg="encountered an error cleaning up failed sandbox \"2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 00:45:21.174217 env[1740]: time="2024-07-02T00:45:21.172547756Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-c8788dcc9-vfkj6,Uid:f67ec736-8618-4365-aaa8-a8e6e546dc9c,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 00:45:21.171759 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b-shm.mount: Deactivated successfully. Jul 2 00:45:21.175984 kubelet[2892]: E0702 00:45:21.175022 2892 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 00:45:21.175984 kubelet[2892]: E0702 00:45:21.175236 2892 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-c8788dcc9-vfkj6" Jul 2 00:45:21.175984 kubelet[2892]: E0702 00:45:21.175328 2892 kuberuntime_manager.go:1171] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-c8788dcc9-vfkj6" Jul 2 00:45:21.176395 kubelet[2892]: E0702 00:45:21.175459 2892 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-c8788dcc9-vfkj6_calico-system(f67ec736-8618-4365-aaa8-a8e6e546dc9c)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-c8788dcc9-vfkj6_calico-system(f67ec736-8618-4365-aaa8-a8e6e546dc9c)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-c8788dcc9-vfkj6" podUID="f67ec736-8618-4365-aaa8-a8e6e546dc9c" Jul 2 00:45:21.195960 env[1740]: time="2024-07-02T00:45:21.195884814Z" level=error msg="Failed to destroy network for sandbox \"6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 00:45:21.200448 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3-shm.mount: Deactivated successfully. Jul 2 00:45:21.204010 env[1740]: time="2024-07-02T00:45:21.203914392Z" level=error msg="encountered an error cleaning up failed sandbox \"6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 00:45:21.204211 env[1740]: time="2024-07-02T00:45:21.204026533Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-hnrns,Uid:63f3d045-d881-483e-8a8c-c34301573e52,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 00:45:21.207689 kubelet[2892]: E0702 00:45:21.204607 2892 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 00:45:21.207689 kubelet[2892]: E0702 00:45:21.204731 2892 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-hnrns" Jul 2 00:45:21.207689 kubelet[2892]: E0702 00:45:21.204772 2892 kuberuntime_manager.go:1171] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-hnrns" Jul 2 00:45:21.208029 kubelet[2892]: E0702 00:45:21.206683 2892 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-hnrns_calico-system(63f3d045-d881-483e-8a8c-c34301573e52)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-hnrns_calico-system(63f3d045-d881-483e-8a8c-c34301573e52)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-hnrns" podUID="63f3d045-d881-483e-8a8c-c34301573e52" Jul 2 00:45:21.235454 env[1740]: time="2024-07-02T00:45:21.235355332Z" level=error msg="StopPodSandbox for \"da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2\" failed" error="failed to destroy network for sandbox \"da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 00:45:21.236959 kubelet[2892]: E0702 00:45:21.236389 2892 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2" Jul 2 00:45:21.236959 kubelet[2892]: E0702 00:45:21.236728 2892 kuberuntime_manager.go:1380] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2"} Jul 2 00:45:21.236959 kubelet[2892]: E0702 00:45:21.236830 2892 kuberuntime_manager.go:1080] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"20d53756-c26c-4ea2-823d-ccf0a1b83f65\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 2 00:45:21.236959 kubelet[2892]: E0702 00:45:21.236908 2892 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"20d53756-c26c-4ea2-823d-ccf0a1b83f65\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5dd5756b68-lzxkr" podUID="20d53756-c26c-4ea2-823d-ccf0a1b83f65" Jul 2 00:45:22.081635 kubelet[2892]: I0702 00:45:22.081548 2892 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b" Jul 2 00:45:22.083377 env[1740]: time="2024-07-02T00:45:22.083323880Z" level=info msg="StopPodSandbox for \"2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b\"" Jul 2 00:45:22.089560 kubelet[2892]: I0702 00:45:22.088276 2892 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3" Jul 2 00:45:22.090240 env[1740]: time="2024-07-02T00:45:22.090176291Z" level=info msg="StopPodSandbox for \"6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3\"" Jul 2 00:45:22.095175 kubelet[2892]: I0702 00:45:22.095101 2892 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef" Jul 2 00:45:22.096286 env[1740]: time="2024-07-02T00:45:22.096196901Z" level=info msg="StopPodSandbox for \"17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef\"" Jul 2 00:45:22.208929 env[1740]: time="2024-07-02T00:45:22.208853461Z" level=error msg="StopPodSandbox for \"6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3\" failed" error="failed to destroy network for sandbox \"6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 00:45:22.209802 kubelet[2892]: E0702 00:45:22.209480 2892 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3" Jul 2 00:45:22.209802 kubelet[2892]: E0702 00:45:22.209567 2892 kuberuntime_manager.go:1380] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3"} Jul 2 00:45:22.209802 kubelet[2892]: E0702 00:45:22.209661 2892 kuberuntime_manager.go:1080] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"63f3d045-d881-483e-8a8c-c34301573e52\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 2 00:45:22.209802 kubelet[2892]: E0702 00:45:22.209744 2892 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"63f3d045-d881-483e-8a8c-c34301573e52\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-hnrns" podUID="63f3d045-d881-483e-8a8c-c34301573e52" Jul 2 00:45:22.230037 env[1740]: time="2024-07-02T00:45:22.229937260Z" level=error msg="StopPodSandbox for \"2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b\" failed" error="failed to destroy network for sandbox \"2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 00:45:22.230978 kubelet[2892]: E0702 00:45:22.230642 2892 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b" Jul 2 00:45:22.230978 kubelet[2892]: E0702 00:45:22.230764 2892 kuberuntime_manager.go:1380] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b"} Jul 2 00:45:22.230978 kubelet[2892]: E0702 00:45:22.230855 2892 kuberuntime_manager.go:1080] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"f67ec736-8618-4365-aaa8-a8e6e546dc9c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 2 00:45:22.230978 kubelet[2892]: E0702 00:45:22.230916 2892 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"f67ec736-8618-4365-aaa8-a8e6e546dc9c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-c8788dcc9-vfkj6" podUID="f67ec736-8618-4365-aaa8-a8e6e546dc9c" Jul 2 00:45:22.264383 env[1740]: time="2024-07-02T00:45:22.264309524Z" level=error msg="StopPodSandbox for \"17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef\" failed" error="failed to destroy network for sandbox \"17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 00:45:22.265323 kubelet[2892]: E0702 00:45:22.264920 2892 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef" Jul 2 00:45:22.265323 kubelet[2892]: E0702 00:45:22.265000 2892 kuberuntime_manager.go:1380] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef"} Jul 2 00:45:22.265323 kubelet[2892]: E0702 00:45:22.265097 2892 kuberuntime_manager.go:1080] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"25185ee7-6762-421c-a038-1a114d80eaae\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 2 00:45:22.265323 kubelet[2892]: E0702 00:45:22.265182 2892 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"25185ee7-6762-421c-a038-1a114d80eaae\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5dd5756b68-npzjs" podUID="25185ee7-6762-421c-a038-1a114d80eaae" Jul 2 00:45:28.580697 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2806545677.mount: Deactivated successfully. Jul 2 00:45:28.652848 env[1740]: time="2024-07-02T00:45:28.652787969Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:45:28.658822 env[1740]: time="2024-07-02T00:45:28.658763426Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:d80cbd636ae2754a08d04558f0436508a17d92258e4712cc4a6299f43497607f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:45:28.660844 env[1740]: time="2024-07-02T00:45:28.660793809Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:45:28.663765 env[1740]: time="2024-07-02T00:45:28.663698640Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:95f8004836427050c9997ad0800819ced5636f6bda647b4158fc7c497910c8d0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:45:28.664920 env[1740]: time="2024-07-02T00:45:28.664868483Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.28.0\" returns image reference \"sha256:d80cbd636ae2754a08d04558f0436508a17d92258e4712cc4a6299f43497607f\"" Jul 2 00:45:28.700480 env[1740]: time="2024-07-02T00:45:28.700363403Z" level=info msg="CreateContainer within sandbox \"a2dbdf0faf56491cd0349292b96195d4b32358c71fdf95418588528bae6639cd\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Jul 2 00:45:28.734356 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1644276146.mount: Deactivated successfully. Jul 2 00:45:28.743861 env[1740]: time="2024-07-02T00:45:28.743775674Z" level=info msg="CreateContainer within sandbox \"a2dbdf0faf56491cd0349292b96195d4b32358c71fdf95418588528bae6639cd\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"56cf5c61a0c377c3c98f96c1cbe98fef4a7120137ff312e36ee615cf90d26d1d\"" Jul 2 00:45:28.745731 env[1740]: time="2024-07-02T00:45:28.745674032Z" level=info msg="StartContainer for \"56cf5c61a0c377c3c98f96c1cbe98fef4a7120137ff312e36ee615cf90d26d1d\"" Jul 2 00:45:28.789829 systemd[1]: Started cri-containerd-56cf5c61a0c377c3c98f96c1cbe98fef4a7120137ff312e36ee615cf90d26d1d.scope. Jul 2 00:45:28.847446 kernel: kauditd_printk_skb: 34 callbacks suppressed Jul 2 00:45:28.847625 kernel: audit: type=1400 audit(1719881128.838:1015): avc: denied { perfmon } for pid=3844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:28.838000 audit[3844]: AVC avc: denied { perfmon } for pid=3844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:28.838000 audit[3844]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3346 pid=3844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:28.857863 kernel: audit: type=1300 audit(1719881128.838:1015): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3346 pid=3844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:28.838000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536636635633631613063333737633363393866393663316362653938 Jul 2 00:45:28.867261 kernel: audit: type=1327 audit(1719881128.838:1015): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536636635633631613063333737633363393866393663316362653938 Jul 2 00:45:28.868215 kernel: audit: type=1400 audit(1719881128.838:1016): avc: denied { bpf } for pid=3844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:28.838000 audit[3844]: AVC avc: denied { bpf } for pid=3844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:28.838000 audit[3844]: AVC avc: denied { bpf } for pid=3844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:28.880857 kernel: audit: type=1400 audit(1719881128.838:1016): avc: denied { bpf } for pid=3844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:28.838000 audit[3844]: AVC avc: denied { bpf } for pid=3844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:28.888562 kernel: audit: type=1400 audit(1719881128.838:1016): avc: denied { bpf } for pid=3844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:28.838000 audit[3844]: AVC avc: denied { perfmon } for pid=3844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:28.896228 kernel: audit: type=1400 audit(1719881128.838:1016): avc: denied { perfmon } for pid=3844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:28.838000 audit[3844]: AVC avc: denied { perfmon } for pid=3844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:28.904955 kernel: audit: type=1400 audit(1719881128.838:1016): avc: denied { perfmon } for pid=3844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:28.838000 audit[3844]: AVC avc: denied { perfmon } for pid=3844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:28.912158 kernel: audit: type=1400 audit(1719881128.838:1016): avc: denied { perfmon } for pid=3844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:28.838000 audit[3844]: AVC avc: denied { perfmon } for pid=3844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:28.919549 kernel: audit: type=1400 audit(1719881128.838:1016): avc: denied { perfmon } for pid=3844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:28.838000 audit[3844]: AVC avc: denied { perfmon } for pid=3844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:28.838000 audit[3844]: AVC avc: denied { bpf } for pid=3844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:28.838000 audit[3844]: AVC avc: denied { bpf } for pid=3844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:28.838000 audit: BPF prog-id=139 op=LOAD Jul 2 00:45:28.838000 audit[3844]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3346 pid=3844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:28.838000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536636635633631613063333737633363393866393663316362653938 Jul 2 00:45:28.840000 audit[3844]: AVC avc: denied { bpf } for pid=3844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:28.840000 audit[3844]: AVC avc: denied { bpf } for pid=3844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:28.840000 audit[3844]: AVC avc: denied { perfmon } for pid=3844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:28.840000 audit[3844]: AVC avc: denied { perfmon } for pid=3844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:28.840000 audit[3844]: AVC avc: denied { perfmon } for pid=3844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:28.840000 audit[3844]: AVC avc: denied { perfmon } for pid=3844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:28.840000 audit[3844]: AVC avc: denied { perfmon } for pid=3844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:28.840000 audit[3844]: AVC avc: denied { bpf } for pid=3844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:28.840000 audit[3844]: AVC avc: denied { bpf } for pid=3844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:28.840000 audit: BPF prog-id=140 op=LOAD Jul 2 00:45:28.840000 audit[3844]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3346 pid=3844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:28.840000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536636635633631613063333737633363393866393663316362653938 Jul 2 00:45:28.846000 audit: BPF prog-id=140 op=UNLOAD Jul 2 00:45:28.846000 audit: BPF prog-id=139 op=UNLOAD Jul 2 00:45:28.846000 audit[3844]: AVC avc: denied { bpf } for pid=3844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:28.846000 audit[3844]: AVC avc: denied { bpf } for pid=3844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:28.846000 audit[3844]: AVC avc: denied { bpf } for pid=3844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:28.846000 audit[3844]: AVC avc: denied { perfmon } for pid=3844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:28.846000 audit[3844]: AVC avc: denied { perfmon } for pid=3844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:28.846000 audit[3844]: AVC avc: denied { perfmon } for pid=3844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:28.846000 audit[3844]: AVC avc: denied { perfmon } for pid=3844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:28.846000 audit[3844]: AVC avc: denied { perfmon } for pid=3844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:28.846000 audit[3844]: AVC avc: denied { bpf } for pid=3844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:28.846000 audit[3844]: AVC avc: denied { bpf } for pid=3844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:28.846000 audit: BPF prog-id=141 op=LOAD Jul 2 00:45:28.846000 audit[3844]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3346 pid=3844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:28.846000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536636635633631613063333737633363393866393663316362653938 Jul 2 00:45:28.930355 env[1740]: time="2024-07-02T00:45:28.930278644Z" level=info msg="StartContainer for \"56cf5c61a0c377c3c98f96c1cbe98fef4a7120137ff312e36ee615cf90d26d1d\" returns successfully" Jul 2 00:45:29.060807 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Jul 2 00:45:29.060936 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Jul 2 00:45:30.165510 systemd[1]: run-containerd-runc-k8s.io-56cf5c61a0c377c3c98f96c1cbe98fef4a7120137ff312e36ee615cf90d26d1d-runc.iqxBZI.mount: Deactivated successfully. Jul 2 00:45:30.841000 audit[3975]: AVC avc: denied { write } for pid=3975 comm="tee" name="fd" dev="proc" ino=20474 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 2 00:45:30.841000 audit[3975]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffcd54da22 a2=241 a3=1b6 items=1 ppid=3950 pid=3975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:30.841000 audit: CWD cwd="/etc/service/enabled/bird6/log" Jul 2 00:45:30.841000 audit: PATH item=0 name="/dev/fd/63" inode=20471 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 00:45:30.841000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 2 00:45:30.886000 audit[3988]: AVC avc: denied { write } for pid=3988 comm="tee" name="fd" dev="proc" ino=21095 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 2 00:45:30.886000 audit[3988]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe5a36a22 a2=241 a3=1b6 items=1 ppid=3955 pid=3988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:30.886000 audit: CWD cwd="/etc/service/enabled/felix/log" Jul 2 00:45:30.886000 audit: PATH item=0 name="/dev/fd/63" inode=20478 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 00:45:30.886000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 2 00:45:30.890000 audit[3998]: AVC avc: denied { write } for pid=3998 comm="tee" name="fd" dev="proc" ino=21102 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 2 00:45:30.890000 audit[3998]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffdb94ea12 a2=241 a3=1b6 items=1 ppid=3947 pid=3998 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:30.890000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Jul 2 00:45:30.890000 audit: PATH item=0 name="/dev/fd/63" inode=21090 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 00:45:30.890000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 2 00:45:30.900000 audit[3995]: AVC avc: denied { write } for pid=3995 comm="tee" name="fd" dev="proc" ino=21108 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 2 00:45:30.900000 audit[3995]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffdc2afa24 a2=241 a3=1b6 items=1 ppid=3946 pid=3995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:30.900000 audit: CWD cwd="/etc/service/enabled/cni/log" Jul 2 00:45:30.900000 audit: PATH item=0 name="/dev/fd/63" inode=21089 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 00:45:30.900000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 2 00:45:30.909000 audit[4008]: AVC avc: denied { write } for pid=4008 comm="tee" name="fd" dev="proc" ino=21113 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 2 00:45:30.909000 audit[4008]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe0903a22 a2=241 a3=1b6 items=1 ppid=3951 pid=4008 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:30.909000 audit: CWD cwd="/etc/service/enabled/confd/log" Jul 2 00:45:30.909000 audit: PATH item=0 name="/dev/fd/63" inode=21099 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 00:45:30.909000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 2 00:45:30.942000 audit[4019]: AVC avc: denied { write } for pid=4019 comm="tee" name="fd" dev="proc" ino=21121 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 2 00:45:30.942000 audit[4019]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc20dca13 a2=241 a3=1b6 items=1 ppid=3957 pid=4019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:30.942000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Jul 2 00:45:30.942000 audit: PATH item=0 name="/dev/fd/63" inode=21110 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 00:45:30.942000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 2 00:45:30.945000 audit[4023]: AVC avc: denied { write } for pid=4023 comm="tee" name="fd" dev="proc" ino=21125 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 2 00:45:30.945000 audit[4023]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe8e6fa23 a2=241 a3=1b6 items=1 ppid=3949 pid=4023 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:30.945000 audit: CWD cwd="/etc/service/enabled/bird/log" Jul 2 00:45:30.945000 audit: PATH item=0 name="/dev/fd/63" inode=21522 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 00:45:30.945000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 2 00:45:32.679827 env[1740]: time="2024-07-02T00:45:32.679755833Z" level=info msg="StopPodSandbox for \"da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2\"" Jul 2 00:45:32.778709 kubelet[2892]: I0702 00:45:32.777286 2892 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-node-hwwh6" podStartSLOduration=4.823453265 podCreationTimestamp="2024-07-02 00:45:09 +0000 UTC" firstStartedPulling="2024-07-02 00:45:09.711679084 +0000 UTC m=+25.392949817" lastFinishedPulling="2024-07-02 00:45:28.665440757 +0000 UTC m=+44.346711490" observedRunningTime="2024-07-02 00:45:29.172739185 +0000 UTC m=+44.854009942" watchObservedRunningTime="2024-07-02 00:45:32.777214938 +0000 UTC m=+48.458485659" Jul 2 00:45:32.858255 env[1740]: 2024-07-02 00:45:32.773 [INFO][4063] k8s.go 608: Cleaning up netns ContainerID="da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2" Jul 2 00:45:32.858255 env[1740]: 2024-07-02 00:45:32.773 [INFO][4063] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2" iface="eth0" netns="/var/run/netns/cni-1ff808b4-f29c-39b3-7a29-22277c53d73c" Jul 2 00:45:32.858255 env[1740]: 2024-07-02 00:45:32.774 [INFO][4063] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2" iface="eth0" netns="/var/run/netns/cni-1ff808b4-f29c-39b3-7a29-22277c53d73c" Jul 2 00:45:32.858255 env[1740]: 2024-07-02 00:45:32.774 [INFO][4063] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2" iface="eth0" netns="/var/run/netns/cni-1ff808b4-f29c-39b3-7a29-22277c53d73c" Jul 2 00:45:32.858255 env[1740]: 2024-07-02 00:45:32.775 [INFO][4063] k8s.go 615: Releasing IP address(es) ContainerID="da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2" Jul 2 00:45:32.858255 env[1740]: 2024-07-02 00:45:32.775 [INFO][4063] utils.go 188: Calico CNI releasing IP address ContainerID="da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2" Jul 2 00:45:32.858255 env[1740]: 2024-07-02 00:45:32.834 [INFO][4069] ipam_plugin.go 411: Releasing address using handleID ContainerID="da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2" HandleID="k8s-pod-network.da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2" Workload="ip--172--31--16--66-k8s-coredns--5dd5756b68--lzxkr-eth0" Jul 2 00:45:32.858255 env[1740]: 2024-07-02 00:45:32.834 [INFO][4069] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 00:45:32.858255 env[1740]: 2024-07-02 00:45:32.834 [INFO][4069] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 00:45:32.858255 env[1740]: 2024-07-02 00:45:32.850 [WARNING][4069] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2" HandleID="k8s-pod-network.da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2" Workload="ip--172--31--16--66-k8s-coredns--5dd5756b68--lzxkr-eth0" Jul 2 00:45:32.858255 env[1740]: 2024-07-02 00:45:32.850 [INFO][4069] ipam_plugin.go 439: Releasing address using workloadID ContainerID="da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2" HandleID="k8s-pod-network.da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2" Workload="ip--172--31--16--66-k8s-coredns--5dd5756b68--lzxkr-eth0" Jul 2 00:45:32.858255 env[1740]: 2024-07-02 00:45:32.853 [INFO][4069] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 00:45:32.858255 env[1740]: 2024-07-02 00:45:32.855 [INFO][4063] k8s.go 621: Teardown processing complete. ContainerID="da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2" Jul 2 00:45:32.863691 systemd[1]: run-netns-cni\x2d1ff808b4\x2df29c\x2d39b3\x2d7a29\x2d22277c53d73c.mount: Deactivated successfully. Jul 2 00:45:32.866515 env[1740]: time="2024-07-02T00:45:32.866456960Z" level=info msg="TearDown network for sandbox \"da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2\" successfully" Jul 2 00:45:32.866687 env[1740]: time="2024-07-02T00:45:32.866630253Z" level=info msg="StopPodSandbox for \"da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2\" returns successfully" Jul 2 00:45:32.869662 env[1740]: time="2024-07-02T00:45:32.869606423Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-lzxkr,Uid:20d53756-c26c-4ea2-823d-ccf0a1b83f65,Namespace:kube-system,Attempt:1,}" Jul 2 00:45:33.157085 (udev-worker)[4098]: Network interface NamePolicy= disabled on kernel command line. Jul 2 00:45:33.158421 systemd-networkd[1450]: calid0419aa3f55: Link UP Jul 2 00:45:33.163543 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 2 00:45:33.163693 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calid0419aa3f55: link becomes ready Jul 2 00:45:33.163645 systemd-networkd[1450]: calid0419aa3f55: Gained carrier Jul 2 00:45:33.207292 env[1740]: 2024-07-02 00:45:32.943 [INFO][4077] utils.go 100: File /var/lib/calico/mtu does not exist Jul 2 00:45:33.207292 env[1740]: 2024-07-02 00:45:32.969 [INFO][4077] plugin.go 326: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--16--66-k8s-coredns--5dd5756b68--lzxkr-eth0 coredns-5dd5756b68- kube-system 20d53756-c26c-4ea2-823d-ccf0a1b83f65 719 0 2024-07-02 00:44:59 +0000 UTC map[k8s-app:kube-dns pod-template-hash:5dd5756b68 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ip-172-31-16-66 coredns-5dd5756b68-lzxkr eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calid0419aa3f55 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="e84a10e870392a1753ce627be56335de725357c9c8d2bae441eeee0dae533d64" Namespace="kube-system" Pod="coredns-5dd5756b68-lzxkr" WorkloadEndpoint="ip--172--31--16--66-k8s-coredns--5dd5756b68--lzxkr-" Jul 2 00:45:33.207292 env[1740]: 2024-07-02 00:45:32.969 [INFO][4077] k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="e84a10e870392a1753ce627be56335de725357c9c8d2bae441eeee0dae533d64" Namespace="kube-system" Pod="coredns-5dd5756b68-lzxkr" WorkloadEndpoint="ip--172--31--16--66-k8s-coredns--5dd5756b68--lzxkr-eth0" Jul 2 00:45:33.207292 env[1740]: 2024-07-02 00:45:33.016 [INFO][4089] ipam_plugin.go 224: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="e84a10e870392a1753ce627be56335de725357c9c8d2bae441eeee0dae533d64" HandleID="k8s-pod-network.e84a10e870392a1753ce627be56335de725357c9c8d2bae441eeee0dae533d64" Workload="ip--172--31--16--66-k8s-coredns--5dd5756b68--lzxkr-eth0" Jul 2 00:45:33.207292 env[1740]: 2024-07-02 00:45:33.036 [INFO][4089] ipam_plugin.go 264: Auto assigning IP ContainerID="e84a10e870392a1753ce627be56335de725357c9c8d2bae441eeee0dae533d64" HandleID="k8s-pod-network.e84a10e870392a1753ce627be56335de725357c9c8d2bae441eeee0dae533d64" Workload="ip--172--31--16--66-k8s-coredns--5dd5756b68--lzxkr-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000346550), Attrs:map[string]string{"namespace":"kube-system", "node":"ip-172-31-16-66", "pod":"coredns-5dd5756b68-lzxkr", "timestamp":"2024-07-02 00:45:33.016869458 +0000 UTC"}, Hostname:"ip-172-31-16-66", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 2 00:45:33.207292 env[1740]: 2024-07-02 00:45:33.037 [INFO][4089] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 00:45:33.207292 env[1740]: 2024-07-02 00:45:33.037 [INFO][4089] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 00:45:33.207292 env[1740]: 2024-07-02 00:45:33.037 [INFO][4089] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-16-66' Jul 2 00:45:33.207292 env[1740]: 2024-07-02 00:45:33.045 [INFO][4089] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.e84a10e870392a1753ce627be56335de725357c9c8d2bae441eeee0dae533d64" host="ip-172-31-16-66" Jul 2 00:45:33.207292 env[1740]: 2024-07-02 00:45:33.055 [INFO][4089] ipam.go 372: Looking up existing affinities for host host="ip-172-31-16-66" Jul 2 00:45:33.207292 env[1740]: 2024-07-02 00:45:33.067 [INFO][4089] ipam.go 489: Trying affinity for 192.168.19.128/26 host="ip-172-31-16-66" Jul 2 00:45:33.207292 env[1740]: 2024-07-02 00:45:33.075 [INFO][4089] ipam.go 155: Attempting to load block cidr=192.168.19.128/26 host="ip-172-31-16-66" Jul 2 00:45:33.207292 env[1740]: 2024-07-02 00:45:33.084 [INFO][4089] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.19.128/26 host="ip-172-31-16-66" Jul 2 00:45:33.207292 env[1740]: 2024-07-02 00:45:33.084 [INFO][4089] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.19.128/26 handle="k8s-pod-network.e84a10e870392a1753ce627be56335de725357c9c8d2bae441eeee0dae533d64" host="ip-172-31-16-66" Jul 2 00:45:33.207292 env[1740]: 2024-07-02 00:45:33.087 [INFO][4089] ipam.go 1685: Creating new handle: k8s-pod-network.e84a10e870392a1753ce627be56335de725357c9c8d2bae441eeee0dae533d64 Jul 2 00:45:33.207292 env[1740]: 2024-07-02 00:45:33.104 [INFO][4089] ipam.go 1203: Writing block in order to claim IPs block=192.168.19.128/26 handle="k8s-pod-network.e84a10e870392a1753ce627be56335de725357c9c8d2bae441eeee0dae533d64" host="ip-172-31-16-66" Jul 2 00:45:33.207292 env[1740]: 2024-07-02 00:45:33.124 [INFO][4089] ipam.go 1216: Successfully claimed IPs: [192.168.19.129/26] block=192.168.19.128/26 handle="k8s-pod-network.e84a10e870392a1753ce627be56335de725357c9c8d2bae441eeee0dae533d64" host="ip-172-31-16-66" Jul 2 00:45:33.207292 env[1740]: 2024-07-02 00:45:33.124 [INFO][4089] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.19.129/26] handle="k8s-pod-network.e84a10e870392a1753ce627be56335de725357c9c8d2bae441eeee0dae533d64" host="ip-172-31-16-66" Jul 2 00:45:33.207292 env[1740]: 2024-07-02 00:45:33.124 [INFO][4089] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 00:45:33.207292 env[1740]: 2024-07-02 00:45:33.124 [INFO][4089] ipam_plugin.go 282: Calico CNI IPAM assigned addresses IPv4=[192.168.19.129/26] IPv6=[] ContainerID="e84a10e870392a1753ce627be56335de725357c9c8d2bae441eeee0dae533d64" HandleID="k8s-pod-network.e84a10e870392a1753ce627be56335de725357c9c8d2bae441eeee0dae533d64" Workload="ip--172--31--16--66-k8s-coredns--5dd5756b68--lzxkr-eth0" Jul 2 00:45:33.208646 env[1740]: 2024-07-02 00:45:33.135 [INFO][4077] k8s.go 386: Populated endpoint ContainerID="e84a10e870392a1753ce627be56335de725357c9c8d2bae441eeee0dae533d64" Namespace="kube-system" Pod="coredns-5dd5756b68-lzxkr" WorkloadEndpoint="ip--172--31--16--66-k8s-coredns--5dd5756b68--lzxkr-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--16--66-k8s-coredns--5dd5756b68--lzxkr-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"20d53756-c26c-4ea2-823d-ccf0a1b83f65", ResourceVersion:"719", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 0, 44, 59, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-16-66", ContainerID:"", Pod:"coredns-5dd5756b68-lzxkr", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.19.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calid0419aa3f55", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 00:45:33.208646 env[1740]: 2024-07-02 00:45:33.135 [INFO][4077] k8s.go 387: Calico CNI using IPs: [192.168.19.129/32] ContainerID="e84a10e870392a1753ce627be56335de725357c9c8d2bae441eeee0dae533d64" Namespace="kube-system" Pod="coredns-5dd5756b68-lzxkr" WorkloadEndpoint="ip--172--31--16--66-k8s-coredns--5dd5756b68--lzxkr-eth0" Jul 2 00:45:33.208646 env[1740]: 2024-07-02 00:45:33.135 [INFO][4077] dataplane_linux.go 68: Setting the host side veth name to calid0419aa3f55 ContainerID="e84a10e870392a1753ce627be56335de725357c9c8d2bae441eeee0dae533d64" Namespace="kube-system" Pod="coredns-5dd5756b68-lzxkr" WorkloadEndpoint="ip--172--31--16--66-k8s-coredns--5dd5756b68--lzxkr-eth0" Jul 2 00:45:33.208646 env[1740]: 2024-07-02 00:45:33.164 [INFO][4077] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="e84a10e870392a1753ce627be56335de725357c9c8d2bae441eeee0dae533d64" Namespace="kube-system" Pod="coredns-5dd5756b68-lzxkr" WorkloadEndpoint="ip--172--31--16--66-k8s-coredns--5dd5756b68--lzxkr-eth0" Jul 2 00:45:33.208646 env[1740]: 2024-07-02 00:45:33.164 [INFO][4077] k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="e84a10e870392a1753ce627be56335de725357c9c8d2bae441eeee0dae533d64" Namespace="kube-system" Pod="coredns-5dd5756b68-lzxkr" WorkloadEndpoint="ip--172--31--16--66-k8s-coredns--5dd5756b68--lzxkr-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--16--66-k8s-coredns--5dd5756b68--lzxkr-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"20d53756-c26c-4ea2-823d-ccf0a1b83f65", ResourceVersion:"719", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 0, 44, 59, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-16-66", ContainerID:"e84a10e870392a1753ce627be56335de725357c9c8d2bae441eeee0dae533d64", Pod:"coredns-5dd5756b68-lzxkr", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.19.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calid0419aa3f55", MAC:"f6:29:3c:a8:d5:8e", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 00:45:33.208646 env[1740]: 2024-07-02 00:45:33.203 [INFO][4077] k8s.go 500: Wrote updated endpoint to datastore ContainerID="e84a10e870392a1753ce627be56335de725357c9c8d2bae441eeee0dae533d64" Namespace="kube-system" Pod="coredns-5dd5756b68-lzxkr" WorkloadEndpoint="ip--172--31--16--66-k8s-coredns--5dd5756b68--lzxkr-eth0" Jul 2 00:45:33.239801 env[1740]: time="2024-07-02T00:45:33.239662785Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 00:45:33.239801 env[1740]: time="2024-07-02T00:45:33.239744194Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 00:45:33.240190 env[1740]: time="2024-07-02T00:45:33.239771158Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 00:45:33.240775 env[1740]: time="2024-07-02T00:45:33.240674898Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e84a10e870392a1753ce627be56335de725357c9c8d2bae441eeee0dae533d64 pid=4117 runtime=io.containerd.runc.v2 Jul 2 00:45:33.293185 systemd[1]: Started cri-containerd-e84a10e870392a1753ce627be56335de725357c9c8d2bae441eeee0dae533d64.scope. Jul 2 00:45:33.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.381000 audit: BPF prog-id=142 op=LOAD Jul 2 00:45:33.382000 audit[4127]: AVC avc: denied { bpf } for pid=4127 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.382000 audit[4127]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4117 pid=4127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:33.382000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538346131306538373033393261313735336365363237626535363333 Jul 2 00:45:33.382000 audit[4127]: AVC avc: denied { perfmon } for pid=4127 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.382000 audit[4127]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4117 pid=4127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:33.382000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538346131306538373033393261313735336365363237626535363333 Jul 2 00:45:33.382000 audit[4127]: AVC avc: denied { bpf } for pid=4127 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.382000 audit[4127]: AVC avc: denied { bpf } for pid=4127 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.382000 audit[4127]: AVC avc: denied { bpf } for pid=4127 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.382000 audit[4127]: AVC avc: denied { perfmon } for pid=4127 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.382000 audit[4127]: AVC avc: denied { perfmon } for pid=4127 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.382000 audit[4127]: AVC avc: denied { perfmon } for pid=4127 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.382000 audit[4127]: AVC avc: denied { perfmon } for pid=4127 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.382000 audit[4127]: AVC avc: denied { perfmon } for pid=4127 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.382000 audit[4127]: AVC avc: denied { bpf } for pid=4127 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.382000 audit[4127]: AVC avc: denied { bpf } for pid=4127 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.382000 audit: BPF prog-id=143 op=LOAD Jul 2 00:45:33.382000 audit[4127]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4117 pid=4127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:33.382000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538346131306538373033393261313735336365363237626535363333 Jul 2 00:45:33.383000 audit[4127]: AVC avc: denied { bpf } for pid=4127 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.383000 audit[4127]: AVC avc: denied { bpf } for pid=4127 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.383000 audit[4127]: AVC avc: denied { perfmon } for pid=4127 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.383000 audit[4127]: AVC avc: denied { perfmon } for pid=4127 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.383000 audit[4127]: AVC avc: denied { perfmon } for pid=4127 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.383000 audit[4127]: AVC avc: denied { perfmon } for pid=4127 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.383000 audit[4127]: AVC avc: denied { perfmon } for pid=4127 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.383000 audit[4127]: AVC avc: denied { bpf } for pid=4127 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.383000 audit[4127]: AVC avc: denied { bpf } for pid=4127 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.383000 audit: BPF prog-id=144 op=LOAD Jul 2 00:45:33.383000 audit[4127]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4117 pid=4127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:33.383000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538346131306538373033393261313735336365363237626535363333 Jul 2 00:45:33.383000 audit: BPF prog-id=144 op=UNLOAD Jul 2 00:45:33.383000 audit: BPF prog-id=143 op=UNLOAD Jul 2 00:45:33.383000 audit[4127]: AVC avc: denied { bpf } for pid=4127 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.383000 audit[4127]: AVC avc: denied { bpf } for pid=4127 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.383000 audit[4127]: AVC avc: denied { bpf } for pid=4127 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.383000 audit[4127]: AVC avc: denied { perfmon } for pid=4127 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.383000 audit[4127]: AVC avc: denied { perfmon } for pid=4127 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.383000 audit[4127]: AVC avc: denied { perfmon } for pid=4127 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.383000 audit[4127]: AVC avc: denied { perfmon } for pid=4127 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.383000 audit[4127]: AVC avc: denied { perfmon } for pid=4127 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.383000 audit[4127]: AVC avc: denied { bpf } for pid=4127 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.383000 audit[4127]: AVC avc: denied { bpf } for pid=4127 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.383000 audit: BPF prog-id=145 op=LOAD Jul 2 00:45:33.383000 audit[4127]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4117 pid=4127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:33.383000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538346131306538373033393261313735336365363237626535363333 Jul 2 00:45:33.438000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.16.66:22-139.178.89.65:54278 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:45:33.439062 systemd[1]: Started sshd@7-172.31.16.66:22-139.178.89.65:54278.service. Jul 2 00:45:33.544570 env[1740]: time="2024-07-02T00:45:33.544500228Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-lzxkr,Uid:20d53756-c26c-4ea2-823d-ccf0a1b83f65,Namespace:kube-system,Attempt:1,} returns sandbox id \"e84a10e870392a1753ce627be56335de725357c9c8d2bae441eeee0dae533d64\"" Jul 2 00:45:33.551598 env[1740]: time="2024-07-02T00:45:33.551542331Z" level=info msg="CreateContainer within sandbox \"e84a10e870392a1753ce627be56335de725357c9c8d2bae441eeee0dae533d64\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 2 00:45:33.583956 env[1740]: time="2024-07-02T00:45:33.583879112Z" level=info msg="CreateContainer within sandbox \"e84a10e870392a1753ce627be56335de725357c9c8d2bae441eeee0dae533d64\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"29e938a9bcf1c796cf00f56c0a6aa4f30bca5bdf016d0050940e4b7ffd352bda\"" Jul 2 00:45:33.584996 env[1740]: time="2024-07-02T00:45:33.584918909Z" level=info msg="StartContainer for \"29e938a9bcf1c796cf00f56c0a6aa4f30bca5bdf016d0050940e4b7ffd352bda\"" Jul 2 00:45:33.631305 systemd[1]: Started cri-containerd-29e938a9bcf1c796cf00f56c0a6aa4f30bca5bdf016d0050940e4b7ffd352bda.scope. Jul 2 00:45:33.632000 audit[4148]: USER_ACCT pid=4148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:45:33.635422 sshd[4148]: Accepted publickey for core from 139.178.89.65 port 54278 ssh2: RSA SHA256:8y6JErBds/WgSuzw1b/2wKJnltsiajeNUW/adFCuF/s Jul 2 00:45:33.636000 audit[4148]: CRED_ACQ pid=4148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:45:33.636000 audit[4148]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffe528150 a2=3 a3=1 items=0 ppid=1 pid=4148 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:33.636000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 00:45:33.641996 sshd[4148]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 00:45:33.652785 systemd[1]: Started session-8.scope. Jul 2 00:45:33.658245 systemd-logind[1726]: New session 8 of user core. Jul 2 00:45:33.681000 audit[4148]: USER_START pid=4148 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:45:33.685000 audit[4180]: CRED_ACQ pid=4180 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:45:33.717000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.717000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.717000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.717000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.717000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.717000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.717000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.717000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.717000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.717000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.717000 audit: BPF prog-id=146 op=LOAD Jul 2 00:45:33.718000 audit[4165]: AVC avc: denied { bpf } for pid=4165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.718000 audit[4165]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4117 pid=4165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:33.718000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239653933386139626366316337393663663030663536633061366161 Jul 2 00:45:33.719000 audit[4165]: AVC avc: denied { perfmon } for pid=4165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.719000 audit[4165]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4117 pid=4165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:33.719000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239653933386139626366316337393663663030663536633061366161 Jul 2 00:45:33.719000 audit[4165]: AVC avc: denied { bpf } for pid=4165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.719000 audit[4165]: AVC avc: denied { bpf } for pid=4165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.719000 audit[4165]: AVC avc: denied { bpf } for pid=4165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.719000 audit[4165]: AVC avc: denied { perfmon } for pid=4165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.719000 audit[4165]: AVC avc: denied { perfmon } for pid=4165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.719000 audit[4165]: AVC avc: denied { perfmon } for pid=4165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.719000 audit[4165]: AVC avc: denied { perfmon } for pid=4165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.719000 audit[4165]: AVC avc: denied { perfmon } for pid=4165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.719000 audit[4165]: AVC avc: denied { bpf } for pid=4165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.719000 audit[4165]: AVC avc: denied { bpf } for pid=4165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.719000 audit: BPF prog-id=147 op=LOAD Jul 2 00:45:33.719000 audit[4165]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4117 pid=4165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:33.719000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239653933386139626366316337393663663030663536633061366161 Jul 2 00:45:33.719000 audit[4165]: AVC avc: denied { bpf } for pid=4165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.719000 audit[4165]: AVC avc: denied { bpf } for pid=4165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.719000 audit[4165]: AVC avc: denied { perfmon } for pid=4165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.719000 audit[4165]: AVC avc: denied { perfmon } for pid=4165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.719000 audit[4165]: AVC avc: denied { perfmon } for pid=4165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.719000 audit[4165]: AVC avc: denied { perfmon } for pid=4165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.719000 audit[4165]: AVC avc: denied { perfmon } for pid=4165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.719000 audit[4165]: AVC avc: denied { bpf } for pid=4165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.719000 audit[4165]: AVC avc: denied { bpf } for pid=4165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.719000 audit: BPF prog-id=148 op=LOAD Jul 2 00:45:33.719000 audit[4165]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4117 pid=4165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:33.719000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239653933386139626366316337393663663030663536633061366161 Jul 2 00:45:33.719000 audit: BPF prog-id=148 op=UNLOAD Jul 2 00:45:33.719000 audit: BPF prog-id=147 op=UNLOAD Jul 2 00:45:33.719000 audit[4165]: AVC avc: denied { bpf } for pid=4165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.719000 audit[4165]: AVC avc: denied { bpf } for pid=4165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.719000 audit[4165]: AVC avc: denied { bpf } for pid=4165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.719000 audit[4165]: AVC avc: denied { perfmon } for pid=4165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.719000 audit[4165]: AVC avc: denied { perfmon } for pid=4165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.719000 audit[4165]: AVC avc: denied { perfmon } for pid=4165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.719000 audit[4165]: AVC avc: denied { perfmon } for pid=4165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.719000 audit[4165]: AVC avc: denied { perfmon } for pid=4165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.719000 audit[4165]: AVC avc: denied { bpf } for pid=4165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.719000 audit[4165]: AVC avc: denied { bpf } for pid=4165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:33.719000 audit: BPF prog-id=149 op=LOAD Jul 2 00:45:33.719000 audit[4165]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4117 pid=4165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:33.719000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239653933386139626366316337393663663030663536633061366161 Jul 2 00:45:33.784865 env[1740]: time="2024-07-02T00:45:33.784771486Z" level=info msg="StartContainer for \"29e938a9bcf1c796cf00f56c0a6aa4f30bca5bdf016d0050940e4b7ffd352bda\" returns successfully" Jul 2 00:45:33.867977 systemd[1]: run-containerd-runc-k8s.io-e84a10e870392a1753ce627be56335de725357c9c8d2bae441eeee0dae533d64-runc.1oBWwU.mount: Deactivated successfully. Jul 2 00:45:33.877270 kubelet[2892]: I0702 00:45:33.875716 2892 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 2 00:45:33.987000 audit[4218]: NETFILTER_CFG table=filter:95 family=2 entries=15 op=nft_register_rule pid=4218 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 00:45:33.990585 kernel: kauditd_printk_skb: 190 callbacks suppressed Jul 2 00:45:33.990754 kernel: audit: type=1325 audit(1719881133.987:1070): table=filter:95 family=2 entries=15 op=nft_register_rule pid=4218 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 00:45:33.987000 audit[4218]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5164 a0=3 a1=ffffd2e3bac0 a2=0 a3=1 items=0 ppid=3068 pid=4218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:33.987000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 00:45:34.059887 kernel: audit: type=1300 audit(1719881133.987:1070): arch=c00000b7 syscall=211 success=yes exit=5164 a0=3 a1=ffffd2e3bac0 a2=0 a3=1 items=0 ppid=3068 pid=4218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:34.060061 kernel: audit: type=1327 audit(1719881133.987:1070): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 00:45:34.040000 audit[4218]: NETFILTER_CFG table=nat:96 family=2 entries=19 op=nft_register_chain pid=4218 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 00:45:34.040000 audit[4218]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=ffffd2e3bac0 a2=0 a3=1 items=0 ppid=3068 pid=4218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:34.082682 kernel: audit: type=1325 audit(1719881134.040:1071): table=nat:96 family=2 entries=19 op=nft_register_chain pid=4218 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 00:45:34.082828 kernel: audit: type=1300 audit(1719881134.040:1071): arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=ffffd2e3bac0 a2=0 a3=1 items=0 ppid=3068 pid=4218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:34.040000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 00:45:34.091821 kernel: audit: type=1327 audit(1719881134.040:1071): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 00:45:34.135482 sshd[4148]: pam_unix(sshd:session): session closed for user core Jul 2 00:45:34.136000 audit[4148]: USER_END pid=4148 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:45:34.137000 audit[4148]: CRED_DISP pid=4148 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:45:34.151165 systemd[1]: sshd@7-172.31.16.66:22-139.178.89.65:54278.service: Deactivated successfully. Jul 2 00:45:34.152480 systemd[1]: session-8.scope: Deactivated successfully. Jul 2 00:45:34.155245 systemd-logind[1726]: Session 8 logged out. Waiting for processes to exit. Jul 2 00:45:34.157026 systemd-logind[1726]: Removed session 8. Jul 2 00:45:34.158839 kernel: audit: type=1106 audit(1719881134.136:1072): pid=4148 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:45:34.158975 kernel: audit: type=1104 audit(1719881134.137:1073): pid=4148 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:45:34.149000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.16.66:22-139.178.89.65:54278 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:45:34.170560 kernel: audit: type=1131 audit(1719881134.149:1074): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.16.66:22-139.178.89.65:54278 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:45:34.191574 kubelet[2892]: I0702 00:45:34.191511 2892 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/coredns-5dd5756b68-lzxkr" podStartSLOduration=35.191450368 podCreationTimestamp="2024-07-02 00:44:59 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-07-02 00:45:34.187357134 +0000 UTC m=+49.868627879" watchObservedRunningTime="2024-07-02 00:45:34.191450368 +0000 UTC m=+49.872721101" Jul 2 00:45:34.292000 audit[4227]: NETFILTER_CFG table=filter:97 family=2 entries=14 op=nft_register_rule pid=4227 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 00:45:34.299666 kernel: audit: type=1325 audit(1719881134.292:1075): table=filter:97 family=2 entries=14 op=nft_register_rule pid=4227 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 00:45:34.292000 audit[4227]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5164 a0=3 a1=ffffc86ea8a0 a2=0 a3=1 items=0 ppid=3068 pid=4227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:34.292000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 00:45:34.298000 audit[4227]: NETFILTER_CFG table=nat:98 family=2 entries=14 op=nft_register_rule pid=4227 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 00:45:34.298000 audit[4227]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3468 a0=3 a1=ffffc86ea8a0 a2=0 a3=1 items=0 ppid=3068 pid=4227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:34.298000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 00:45:34.682567 env[1740]: time="2024-07-02T00:45:34.682412852Z" level=info msg="StopPodSandbox for \"17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef\"" Jul 2 00:45:34.908819 env[1740]: 2024-07-02 00:45:34.810 [INFO][4263] k8s.go 608: Cleaning up netns ContainerID="17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef" Jul 2 00:45:34.908819 env[1740]: 2024-07-02 00:45:34.811 [INFO][4263] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef" iface="eth0" netns="/var/run/netns/cni-742c2e51-a6ff-844b-9fee-e1e379332c59" Jul 2 00:45:34.908819 env[1740]: 2024-07-02 00:45:34.811 [INFO][4263] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef" iface="eth0" netns="/var/run/netns/cni-742c2e51-a6ff-844b-9fee-e1e379332c59" Jul 2 00:45:34.908819 env[1740]: 2024-07-02 00:45:34.812 [INFO][4263] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef" iface="eth0" netns="/var/run/netns/cni-742c2e51-a6ff-844b-9fee-e1e379332c59" Jul 2 00:45:34.908819 env[1740]: 2024-07-02 00:45:34.812 [INFO][4263] k8s.go 615: Releasing IP address(es) ContainerID="17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef" Jul 2 00:45:34.908819 env[1740]: 2024-07-02 00:45:34.812 [INFO][4263] utils.go 188: Calico CNI releasing IP address ContainerID="17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef" Jul 2 00:45:34.908819 env[1740]: 2024-07-02 00:45:34.882 [INFO][4269] ipam_plugin.go 411: Releasing address using handleID ContainerID="17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef" HandleID="k8s-pod-network.17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef" Workload="ip--172--31--16--66-k8s-coredns--5dd5756b68--npzjs-eth0" Jul 2 00:45:34.908819 env[1740]: 2024-07-02 00:45:34.883 [INFO][4269] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 00:45:34.908819 env[1740]: 2024-07-02 00:45:34.883 [INFO][4269] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 00:45:34.908819 env[1740]: 2024-07-02 00:45:34.899 [WARNING][4269] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef" HandleID="k8s-pod-network.17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef" Workload="ip--172--31--16--66-k8s-coredns--5dd5756b68--npzjs-eth0" Jul 2 00:45:34.908819 env[1740]: 2024-07-02 00:45:34.899 [INFO][4269] ipam_plugin.go 439: Releasing address using workloadID ContainerID="17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef" HandleID="k8s-pod-network.17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef" Workload="ip--172--31--16--66-k8s-coredns--5dd5756b68--npzjs-eth0" Jul 2 00:45:34.908819 env[1740]: 2024-07-02 00:45:34.902 [INFO][4269] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 00:45:34.908819 env[1740]: 2024-07-02 00:45:34.905 [INFO][4263] k8s.go 621: Teardown processing complete. ContainerID="17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef" Jul 2 00:45:34.915267 systemd[1]: run-netns-cni\x2d742c2e51\x2da6ff\x2d844b\x2d9fee\x2de1e379332c59.mount: Deactivated successfully. Jul 2 00:45:34.918792 env[1740]: time="2024-07-02T00:45:34.916298249Z" level=info msg="TearDown network for sandbox \"17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef\" successfully" Jul 2 00:45:34.918792 env[1740]: time="2024-07-02T00:45:34.916355789Z" level=info msg="StopPodSandbox for \"17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef\" returns successfully" Jul 2 00:45:34.918792 env[1740]: time="2024-07-02T00:45:34.918200421Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-npzjs,Uid:25185ee7-6762-421c-a038-1a114d80eaae,Namespace:kube-system,Attempt:1,}" Jul 2 00:45:34.986362 systemd-networkd[1450]: calid0419aa3f55: Gained IPv6LL Jul 2 00:45:35.355000 audit[4303]: NETFILTER_CFG table=filter:99 family=2 entries=11 op=nft_register_rule pid=4303 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 00:45:35.355000 audit[4303]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2932 a0=3 a1=fffff923d9f0 a2=0 a3=1 items=0 ppid=3068 pid=4303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:35.355000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 00:45:35.359000 audit[4303]: NETFILTER_CFG table=nat:100 family=2 entries=35 op=nft_register_chain pid=4303 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 00:45:35.359000 audit[4303]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14196 a0=3 a1=fffff923d9f0 a2=0 a3=1 items=0 ppid=3068 pid=4303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:35.359000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 00:45:35.422565 systemd-networkd[1450]: cali04d7f75c260: Link UP Jul 2 00:45:35.429154 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 2 00:45:35.429304 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali04d7f75c260: link becomes ready Jul 2 00:45:35.429532 systemd-networkd[1450]: cali04d7f75c260: Gained carrier Jul 2 00:45:35.467297 env[1740]: 2024-07-02 00:45:35.068 [INFO][4283] utils.go 100: File /var/lib/calico/mtu does not exist Jul 2 00:45:35.467297 env[1740]: 2024-07-02 00:45:35.113 [INFO][4283] plugin.go 326: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--16--66-k8s-coredns--5dd5756b68--npzjs-eth0 coredns-5dd5756b68- kube-system 25185ee7-6762-421c-a038-1a114d80eaae 780 0 2024-07-02 00:44:59 +0000 UTC map[k8s-app:kube-dns pod-template-hash:5dd5756b68 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ip-172-31-16-66 coredns-5dd5756b68-npzjs eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali04d7f75c260 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="de1e361f0ae22b785faaf1c2f830dd2ae9ae9df949b9f47ed092573564182fae" Namespace="kube-system" Pod="coredns-5dd5756b68-npzjs" WorkloadEndpoint="ip--172--31--16--66-k8s-coredns--5dd5756b68--npzjs-" Jul 2 00:45:35.467297 env[1740]: 2024-07-02 00:45:35.114 [INFO][4283] k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="de1e361f0ae22b785faaf1c2f830dd2ae9ae9df949b9f47ed092573564182fae" Namespace="kube-system" Pod="coredns-5dd5756b68-npzjs" WorkloadEndpoint="ip--172--31--16--66-k8s-coredns--5dd5756b68--npzjs-eth0" Jul 2 00:45:35.467297 env[1740]: 2024-07-02 00:45:35.239 [INFO][4294] ipam_plugin.go 224: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="de1e361f0ae22b785faaf1c2f830dd2ae9ae9df949b9f47ed092573564182fae" HandleID="k8s-pod-network.de1e361f0ae22b785faaf1c2f830dd2ae9ae9df949b9f47ed092573564182fae" Workload="ip--172--31--16--66-k8s-coredns--5dd5756b68--npzjs-eth0" Jul 2 00:45:35.467297 env[1740]: 2024-07-02 00:45:35.265 [INFO][4294] ipam_plugin.go 264: Auto assigning IP ContainerID="de1e361f0ae22b785faaf1c2f830dd2ae9ae9df949b9f47ed092573564182fae" HandleID="k8s-pod-network.de1e361f0ae22b785faaf1c2f830dd2ae9ae9df949b9f47ed092573564182fae" Workload="ip--172--31--16--66-k8s-coredns--5dd5756b68--npzjs-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40003ac720), Attrs:map[string]string{"namespace":"kube-system", "node":"ip-172-31-16-66", "pod":"coredns-5dd5756b68-npzjs", "timestamp":"2024-07-02 00:45:35.239744133 +0000 UTC"}, Hostname:"ip-172-31-16-66", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 2 00:45:35.467297 env[1740]: 2024-07-02 00:45:35.267 [INFO][4294] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 00:45:35.467297 env[1740]: 2024-07-02 00:45:35.268 [INFO][4294] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 00:45:35.467297 env[1740]: 2024-07-02 00:45:35.270 [INFO][4294] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-16-66' Jul 2 00:45:35.467297 env[1740]: 2024-07-02 00:45:35.278 [INFO][4294] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.de1e361f0ae22b785faaf1c2f830dd2ae9ae9df949b9f47ed092573564182fae" host="ip-172-31-16-66" Jul 2 00:45:35.467297 env[1740]: 2024-07-02 00:45:35.300 [INFO][4294] ipam.go 372: Looking up existing affinities for host host="ip-172-31-16-66" Jul 2 00:45:35.467297 env[1740]: 2024-07-02 00:45:35.313 [INFO][4294] ipam.go 489: Trying affinity for 192.168.19.128/26 host="ip-172-31-16-66" Jul 2 00:45:35.467297 env[1740]: 2024-07-02 00:45:35.328 [INFO][4294] ipam.go 155: Attempting to load block cidr=192.168.19.128/26 host="ip-172-31-16-66" Jul 2 00:45:35.467297 env[1740]: 2024-07-02 00:45:35.340 [INFO][4294] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.19.128/26 host="ip-172-31-16-66" Jul 2 00:45:35.467297 env[1740]: 2024-07-02 00:45:35.340 [INFO][4294] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.19.128/26 handle="k8s-pod-network.de1e361f0ae22b785faaf1c2f830dd2ae9ae9df949b9f47ed092573564182fae" host="ip-172-31-16-66" Jul 2 00:45:35.467297 env[1740]: 2024-07-02 00:45:35.366 [INFO][4294] ipam.go 1685: Creating new handle: k8s-pod-network.de1e361f0ae22b785faaf1c2f830dd2ae9ae9df949b9f47ed092573564182fae Jul 2 00:45:35.467297 env[1740]: 2024-07-02 00:45:35.383 [INFO][4294] ipam.go 1203: Writing block in order to claim IPs block=192.168.19.128/26 handle="k8s-pod-network.de1e361f0ae22b785faaf1c2f830dd2ae9ae9df949b9f47ed092573564182fae" host="ip-172-31-16-66" Jul 2 00:45:35.467297 env[1740]: 2024-07-02 00:45:35.410 [INFO][4294] ipam.go 1216: Successfully claimed IPs: [192.168.19.130/26] block=192.168.19.128/26 handle="k8s-pod-network.de1e361f0ae22b785faaf1c2f830dd2ae9ae9df949b9f47ed092573564182fae" host="ip-172-31-16-66" Jul 2 00:45:35.467297 env[1740]: 2024-07-02 00:45:35.410 [INFO][4294] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.19.130/26] handle="k8s-pod-network.de1e361f0ae22b785faaf1c2f830dd2ae9ae9df949b9f47ed092573564182fae" host="ip-172-31-16-66" Jul 2 00:45:35.467297 env[1740]: 2024-07-02 00:45:35.410 [INFO][4294] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 00:45:35.467297 env[1740]: 2024-07-02 00:45:35.410 [INFO][4294] ipam_plugin.go 282: Calico CNI IPAM assigned addresses IPv4=[192.168.19.130/26] IPv6=[] ContainerID="de1e361f0ae22b785faaf1c2f830dd2ae9ae9df949b9f47ed092573564182fae" HandleID="k8s-pod-network.de1e361f0ae22b785faaf1c2f830dd2ae9ae9df949b9f47ed092573564182fae" Workload="ip--172--31--16--66-k8s-coredns--5dd5756b68--npzjs-eth0" Jul 2 00:45:35.468802 env[1740]: 2024-07-02 00:45:35.416 [INFO][4283] k8s.go 386: Populated endpoint ContainerID="de1e361f0ae22b785faaf1c2f830dd2ae9ae9df949b9f47ed092573564182fae" Namespace="kube-system" Pod="coredns-5dd5756b68-npzjs" WorkloadEndpoint="ip--172--31--16--66-k8s-coredns--5dd5756b68--npzjs-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--16--66-k8s-coredns--5dd5756b68--npzjs-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"25185ee7-6762-421c-a038-1a114d80eaae", ResourceVersion:"780", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 0, 44, 59, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-16-66", ContainerID:"", Pod:"coredns-5dd5756b68-npzjs", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.19.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali04d7f75c260", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 00:45:35.468802 env[1740]: 2024-07-02 00:45:35.417 [INFO][4283] k8s.go 387: Calico CNI using IPs: [192.168.19.130/32] ContainerID="de1e361f0ae22b785faaf1c2f830dd2ae9ae9df949b9f47ed092573564182fae" Namespace="kube-system" Pod="coredns-5dd5756b68-npzjs" WorkloadEndpoint="ip--172--31--16--66-k8s-coredns--5dd5756b68--npzjs-eth0" Jul 2 00:45:35.468802 env[1740]: 2024-07-02 00:45:35.417 [INFO][4283] dataplane_linux.go 68: Setting the host side veth name to cali04d7f75c260 ContainerID="de1e361f0ae22b785faaf1c2f830dd2ae9ae9df949b9f47ed092573564182fae" Namespace="kube-system" Pod="coredns-5dd5756b68-npzjs" WorkloadEndpoint="ip--172--31--16--66-k8s-coredns--5dd5756b68--npzjs-eth0" Jul 2 00:45:35.468802 env[1740]: 2024-07-02 00:45:35.431 [INFO][4283] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="de1e361f0ae22b785faaf1c2f830dd2ae9ae9df949b9f47ed092573564182fae" Namespace="kube-system" Pod="coredns-5dd5756b68-npzjs" WorkloadEndpoint="ip--172--31--16--66-k8s-coredns--5dd5756b68--npzjs-eth0" Jul 2 00:45:35.468802 env[1740]: 2024-07-02 00:45:35.432 [INFO][4283] k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="de1e361f0ae22b785faaf1c2f830dd2ae9ae9df949b9f47ed092573564182fae" Namespace="kube-system" Pod="coredns-5dd5756b68-npzjs" WorkloadEndpoint="ip--172--31--16--66-k8s-coredns--5dd5756b68--npzjs-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--16--66-k8s-coredns--5dd5756b68--npzjs-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"25185ee7-6762-421c-a038-1a114d80eaae", ResourceVersion:"780", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 0, 44, 59, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-16-66", ContainerID:"de1e361f0ae22b785faaf1c2f830dd2ae9ae9df949b9f47ed092573564182fae", Pod:"coredns-5dd5756b68-npzjs", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.19.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali04d7f75c260", MAC:"2e:06:b2:63:da:fe", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 00:45:35.468802 env[1740]: 2024-07-02 00:45:35.464 [INFO][4283] k8s.go 500: Wrote updated endpoint to datastore ContainerID="de1e361f0ae22b785faaf1c2f830dd2ae9ae9df949b9f47ed092573564182fae" Namespace="kube-system" Pod="coredns-5dd5756b68-npzjs" WorkloadEndpoint="ip--172--31--16--66-k8s-coredns--5dd5756b68--npzjs-eth0" Jul 2 00:45:35.501417 env[1740]: time="2024-07-02T00:45:35.500938647Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 00:45:35.501417 env[1740]: time="2024-07-02T00:45:35.501028756Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 00:45:35.501417 env[1740]: time="2024-07-02T00:45:35.501064696Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 00:45:35.501765 env[1740]: time="2024-07-02T00:45:35.501469351Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/de1e361f0ae22b785faaf1c2f830dd2ae9ae9df949b9f47ed092573564182fae pid=4326 runtime=io.containerd.runc.v2 Jul 2 00:45:35.568687 systemd[1]: Started cri-containerd-de1e361f0ae22b785faaf1c2f830dd2ae9ae9df949b9f47ed092573564182fae.scope. Jul 2 00:45:35.605000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.605000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.606000 audit: BPF prog-id=150 op=LOAD Jul 2 00:45:35.607000 audit[4336]: AVC avc: denied { bpf } for pid=4336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.607000 audit[4336]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4326 pid=4336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:35.607000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465316533363166306165323262373835666161663163326638333064 Jul 2 00:45:35.607000 audit[4336]: AVC avc: denied { perfmon } for pid=4336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.607000 audit[4336]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4326 pid=4336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:35.607000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465316533363166306165323262373835666161663163326638333064 Jul 2 00:45:35.607000 audit[4336]: AVC avc: denied { bpf } for pid=4336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.607000 audit[4336]: AVC avc: denied { bpf } for pid=4336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.607000 audit[4336]: AVC avc: denied { bpf } for pid=4336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.607000 audit[4336]: AVC avc: denied { perfmon } for pid=4336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.607000 audit[4336]: AVC avc: denied { perfmon } for pid=4336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.607000 audit[4336]: AVC avc: denied { perfmon } for pid=4336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.607000 audit[4336]: AVC avc: denied { perfmon } for pid=4336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.607000 audit[4336]: AVC avc: denied { perfmon } for pid=4336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.607000 audit[4336]: AVC avc: denied { bpf } for pid=4336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.607000 audit[4336]: AVC avc: denied { bpf } for pid=4336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.607000 audit: BPF prog-id=151 op=LOAD Jul 2 00:45:35.607000 audit[4336]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4326 pid=4336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:35.607000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465316533363166306165323262373835666161663163326638333064 Jul 2 00:45:35.607000 audit[4336]: AVC avc: denied { bpf } for pid=4336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.607000 audit[4336]: AVC avc: denied { bpf } for pid=4336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.607000 audit[4336]: AVC avc: denied { perfmon } for pid=4336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.607000 audit[4336]: AVC avc: denied { perfmon } for pid=4336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.607000 audit[4336]: AVC avc: denied { perfmon } for pid=4336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.607000 audit[4336]: AVC avc: denied { perfmon } for pid=4336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.607000 audit[4336]: AVC avc: denied { perfmon } for pid=4336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.607000 audit[4336]: AVC avc: denied { bpf } for pid=4336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.607000 audit[4336]: AVC avc: denied { bpf } for pid=4336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.607000 audit: BPF prog-id=152 op=LOAD Jul 2 00:45:35.607000 audit[4336]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4326 pid=4336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:35.607000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465316533363166306165323262373835666161663163326638333064 Jul 2 00:45:35.607000 audit: BPF prog-id=152 op=UNLOAD Jul 2 00:45:35.607000 audit: BPF prog-id=151 op=UNLOAD Jul 2 00:45:35.607000 audit[4336]: AVC avc: denied { bpf } for pid=4336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.607000 audit[4336]: AVC avc: denied { bpf } for pid=4336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.607000 audit[4336]: AVC avc: denied { bpf } for pid=4336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.607000 audit[4336]: AVC avc: denied { perfmon } for pid=4336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.607000 audit[4336]: AVC avc: denied { perfmon } for pid=4336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.607000 audit[4336]: AVC avc: denied { perfmon } for pid=4336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.607000 audit[4336]: AVC avc: denied { perfmon } for pid=4336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.607000 audit[4336]: AVC avc: denied { perfmon } for pid=4336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.607000 audit[4336]: AVC avc: denied { bpf } for pid=4336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.607000 audit[4336]: AVC avc: denied { bpf } for pid=4336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.607000 audit: BPF prog-id=153 op=LOAD Jul 2 00:45:35.607000 audit[4336]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4326 pid=4336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:35.607000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465316533363166306165323262373835666161663163326638333064 Jul 2 00:45:35.681804 env[1740]: time="2024-07-02T00:45:35.681736365Z" level=info msg="StopPodSandbox for \"2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b\"" Jul 2 00:45:35.685566 env[1740]: time="2024-07-02T00:45:35.685480515Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-npzjs,Uid:25185ee7-6762-421c-a038-1a114d80eaae,Namespace:kube-system,Attempt:1,} returns sandbox id \"de1e361f0ae22b785faaf1c2f830dd2ae9ae9df949b9f47ed092573564182fae\"" Jul 2 00:45:35.694974 env[1740]: time="2024-07-02T00:45:35.694914259Z" level=info msg="CreateContainer within sandbox \"de1e361f0ae22b785faaf1c2f830dd2ae9ae9df949b9f47ed092573564182fae\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 2 00:45:35.725998 env[1740]: time="2024-07-02T00:45:35.725930393Z" level=info msg="CreateContainer within sandbox \"de1e361f0ae22b785faaf1c2f830dd2ae9ae9df949b9f47ed092573564182fae\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"9cccf0ab77bf668726481e03938a86b1d3687a493e08a0294146c5a8419d5bad\"" Jul 2 00:45:35.728557 env[1740]: time="2024-07-02T00:45:35.728438713Z" level=info msg="StartContainer for \"9cccf0ab77bf668726481e03938a86b1d3687a493e08a0294146c5a8419d5bad\"" Jul 2 00:45:35.788832 systemd[1]: Started cri-containerd-9cccf0ab77bf668726481e03938a86b1d3687a493e08a0294146c5a8419d5bad.scope. Jul 2 00:45:35.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.848000 audit: BPF prog-id=154 op=LOAD Jul 2 00:45:35.850000 audit[4407]: AVC avc: denied { bpf } for pid=4407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.850000 audit[4407]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4326 pid=4407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:35.850000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963636366306162373762663636383732363438316530333933386138 Jul 2 00:45:35.850000 audit[4407]: AVC avc: denied { perfmon } for pid=4407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.850000 audit[4407]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4326 pid=4407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:35.850000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963636366306162373762663636383732363438316530333933386138 Jul 2 00:45:35.851000 audit[4407]: AVC avc: denied { bpf } for pid=4407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.851000 audit[4407]: AVC avc: denied { bpf } for pid=4407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.851000 audit[4407]: AVC avc: denied { bpf } for pid=4407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.851000 audit[4407]: AVC avc: denied { perfmon } for pid=4407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.851000 audit[4407]: AVC avc: denied { perfmon } for pid=4407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.851000 audit[4407]: AVC avc: denied { perfmon } for pid=4407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.851000 audit[4407]: AVC avc: denied { perfmon } for pid=4407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.851000 audit[4407]: AVC avc: denied { perfmon } for pid=4407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.851000 audit[4407]: AVC avc: denied { bpf } for pid=4407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.851000 audit[4407]: AVC avc: denied { bpf } for pid=4407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.851000 audit: BPF prog-id=155 op=LOAD Jul 2 00:45:35.851000 audit[4407]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4326 pid=4407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:35.851000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963636366306162373762663636383732363438316530333933386138 Jul 2 00:45:35.853000 audit[4407]: AVC avc: denied { bpf } for pid=4407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.853000 audit[4407]: AVC avc: denied { bpf } for pid=4407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.853000 audit[4407]: AVC avc: denied { perfmon } for pid=4407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.853000 audit[4407]: AVC avc: denied { perfmon } for pid=4407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.853000 audit[4407]: AVC avc: denied { perfmon } for pid=4407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.853000 audit[4407]: AVC avc: denied { perfmon } for pid=4407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.853000 audit[4407]: AVC avc: denied { perfmon } for pid=4407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.853000 audit[4407]: AVC avc: denied { bpf } for pid=4407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.853000 audit[4407]: AVC avc: denied { bpf } for pid=4407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.853000 audit: BPF prog-id=156 op=LOAD Jul 2 00:45:35.853000 audit[4407]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4326 pid=4407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:35.853000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963636366306162373762663636383732363438316530333933386138 Jul 2 00:45:35.854000 audit: BPF prog-id=156 op=UNLOAD Jul 2 00:45:35.854000 audit: BPF prog-id=155 op=UNLOAD Jul 2 00:45:35.854000 audit[4407]: AVC avc: denied { bpf } for pid=4407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.854000 audit[4407]: AVC avc: denied { bpf } for pid=4407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.854000 audit[4407]: AVC avc: denied { bpf } for pid=4407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.854000 audit[4407]: AVC avc: denied { perfmon } for pid=4407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.854000 audit[4407]: AVC avc: denied { perfmon } for pid=4407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.854000 audit[4407]: AVC avc: denied { perfmon } for pid=4407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.854000 audit[4407]: AVC avc: denied { perfmon } for pid=4407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.854000 audit[4407]: AVC avc: denied { perfmon } for pid=4407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.854000 audit[4407]: AVC avc: denied { bpf } for pid=4407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.854000 audit[4407]: AVC avc: denied { bpf } for pid=4407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:35.854000 audit: BPF prog-id=157 op=LOAD Jul 2 00:45:35.854000 audit[4407]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4326 pid=4407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:35.854000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963636366306162373762663636383732363438316530333933386138 Jul 2 00:45:35.917055 systemd[1]: run-containerd-runc-k8s.io-de1e361f0ae22b785faaf1c2f830dd2ae9ae9df949b9f47ed092573564182fae-runc.UBwRfN.mount: Deactivated successfully. Jul 2 00:45:35.963441 env[1740]: time="2024-07-02T00:45:35.963376968Z" level=info msg="StartContainer for \"9cccf0ab77bf668726481e03938a86b1d3687a493e08a0294146c5a8419d5bad\" returns successfully" Jul 2 00:45:36.013914 systemd-networkd[1450]: vxlan.calico: Link UP Jul 2 00:45:36.013929 systemd-networkd[1450]: vxlan.calico: Gained carrier Jul 2 00:45:36.073268 env[1740]: 2024-07-02 00:45:35.891 [INFO][4395] k8s.go 608: Cleaning up netns ContainerID="2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b" Jul 2 00:45:36.073268 env[1740]: 2024-07-02 00:45:35.891 [INFO][4395] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b" iface="eth0" netns="/var/run/netns/cni-a6f43afa-3180-5888-d1b5-43a1ff1294cc" Jul 2 00:45:36.073268 env[1740]: 2024-07-02 00:45:35.893 [INFO][4395] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b" iface="eth0" netns="/var/run/netns/cni-a6f43afa-3180-5888-d1b5-43a1ff1294cc" Jul 2 00:45:36.073268 env[1740]: 2024-07-02 00:45:35.895 [INFO][4395] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b" iface="eth0" netns="/var/run/netns/cni-a6f43afa-3180-5888-d1b5-43a1ff1294cc" Jul 2 00:45:36.073268 env[1740]: 2024-07-02 00:45:35.895 [INFO][4395] k8s.go 615: Releasing IP address(es) ContainerID="2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b" Jul 2 00:45:36.073268 env[1740]: 2024-07-02 00:45:35.895 [INFO][4395] utils.go 188: Calico CNI releasing IP address ContainerID="2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b" Jul 2 00:45:36.073268 env[1740]: 2024-07-02 00:45:36.047 [INFO][4432] ipam_plugin.go 411: Releasing address using handleID ContainerID="2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b" HandleID="k8s-pod-network.2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b" Workload="ip--172--31--16--66-k8s-calico--kube--controllers--c8788dcc9--vfkj6-eth0" Jul 2 00:45:36.073268 env[1740]: 2024-07-02 00:45:36.047 [INFO][4432] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 00:45:36.073268 env[1740]: 2024-07-02 00:45:36.047 [INFO][4432] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 00:45:36.073268 env[1740]: 2024-07-02 00:45:36.062 [WARNING][4432] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b" HandleID="k8s-pod-network.2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b" Workload="ip--172--31--16--66-k8s-calico--kube--controllers--c8788dcc9--vfkj6-eth0" Jul 2 00:45:36.073268 env[1740]: 2024-07-02 00:45:36.063 [INFO][4432] ipam_plugin.go 439: Releasing address using workloadID ContainerID="2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b" HandleID="k8s-pod-network.2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b" Workload="ip--172--31--16--66-k8s-calico--kube--controllers--c8788dcc9--vfkj6-eth0" Jul 2 00:45:36.073268 env[1740]: 2024-07-02 00:45:36.068 [INFO][4432] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 00:45:36.073268 env[1740]: 2024-07-02 00:45:36.070 [INFO][4395] k8s.go 621: Teardown processing complete. ContainerID="2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b" Jul 2 00:45:36.080362 env[1740]: time="2024-07-02T00:45:36.080286241Z" level=info msg="TearDown network for sandbox \"2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b\" successfully" Jul 2 00:45:36.080658 env[1740]: time="2024-07-02T00:45:36.080620719Z" level=info msg="StopPodSandbox for \"2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b\" returns successfully" Jul 2 00:45:36.081911 env[1740]: time="2024-07-02T00:45:36.081855073Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-c8788dcc9-vfkj6,Uid:f67ec736-8618-4365-aaa8-a8e6e546dc9c,Namespace:calico-system,Attempt:1,}" Jul 2 00:45:36.083524 systemd[1]: run-netns-cni\x2da6f43afa\x2d3180\x2d5888\x2dd1b5\x2d43a1ff1294cc.mount: Deactivated successfully. Jul 2 00:45:36.138109 (udev-worker)[4097]: Network interface NamePolicy= disabled on kernel command line. Jul 2 00:45:36.143000 audit[4470]: AVC avc: denied { bpf } for pid=4470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.143000 audit[4470]: AVC avc: denied { bpf } for pid=4470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.143000 audit[4470]: AVC avc: denied { perfmon } for pid=4470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.143000 audit[4470]: AVC avc: denied { perfmon } for pid=4470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.143000 audit[4470]: AVC avc: denied { perfmon } for pid=4470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.143000 audit[4470]: AVC avc: denied { perfmon } for pid=4470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.143000 audit[4470]: AVC avc: denied { perfmon } for pid=4470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.143000 audit[4470]: AVC avc: denied { bpf } for pid=4470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.143000 audit[4470]: AVC avc: denied { bpf } for pid=4470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.143000 audit: BPF prog-id=158 op=LOAD Jul 2 00:45:36.143000 audit[4470]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffd6a9e218 a2=70 a3=ffffd6a9e288 items=0 ppid=4274 pid=4470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:36.143000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 00:45:36.144000 audit: BPF prog-id=158 op=UNLOAD Jul 2 00:45:36.144000 audit[4470]: AVC avc: denied { bpf } for pid=4470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.144000 audit[4470]: AVC avc: denied { bpf } for pid=4470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.144000 audit[4470]: AVC avc: denied { perfmon } for pid=4470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.144000 audit[4470]: AVC avc: denied { perfmon } for pid=4470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.144000 audit[4470]: AVC avc: denied { perfmon } for pid=4470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.144000 audit[4470]: AVC avc: denied { perfmon } for pid=4470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.144000 audit[4470]: AVC avc: denied { perfmon } for pid=4470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.144000 audit[4470]: AVC avc: denied { bpf } for pid=4470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.144000 audit[4470]: AVC avc: denied { bpf } for pid=4470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.144000 audit: BPF prog-id=159 op=LOAD Jul 2 00:45:36.144000 audit[4470]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffd6a9e218 a2=70 a3=4b243c items=0 ppid=4274 pid=4470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:36.144000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 00:45:36.146000 audit: BPF prog-id=159 op=UNLOAD Jul 2 00:45:36.146000 audit[4470]: AVC avc: denied { perfmon } for pid=4470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.146000 audit[4470]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffd6a9e1d0 a2=70 a3=ffffd6a9e240 items=0 ppid=4274 pid=4470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:36.146000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 00:45:36.146000 audit[4470]: AVC avc: denied { bpf } for pid=4470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.146000 audit[4470]: AVC avc: denied { bpf } for pid=4470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.146000 audit[4470]: AVC avc: denied { perfmon } for pid=4470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.146000 audit[4470]: AVC avc: denied { perfmon } for pid=4470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.146000 audit[4470]: AVC avc: denied { perfmon } for pid=4470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.146000 audit[4470]: AVC avc: denied { perfmon } for pid=4470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.146000 audit[4470]: AVC avc: denied { perfmon } for pid=4470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.146000 audit[4470]: AVC avc: denied { bpf } for pid=4470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.146000 audit[4470]: AVC avc: denied { bpf } for pid=4470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.146000 audit: BPF prog-id=160 op=LOAD Jul 2 00:45:36.146000 audit[4470]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffd6a9e1b8 a2=70 a3=ffffd6a9e228 items=0 ppid=4274 pid=4470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:36.146000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 00:45:36.146000 audit: BPF prog-id=160 op=UNLOAD Jul 2 00:45:36.146000 audit[4470]: AVC avc: denied { bpf } for pid=4470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.146000 audit[4470]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd6a9e288 a2=70 a3=0 items=0 ppid=4274 pid=4470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:36.146000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 00:45:36.146000 audit[4470]: AVC avc: denied { bpf } for pid=4470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.146000 audit[4470]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd6a9e278 a2=70 a3=0 items=0 ppid=4274 pid=4470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:36.146000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 00:45:36.146000 audit[4470]: AVC avc: denied { bpf } for pid=4470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.146000 audit[4470]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd6a9e1e8 a2=70 a3=0 items=0 ppid=4274 pid=4470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:36.146000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 00:45:36.147000 audit[4470]: AVC avc: denied { bpf } for pid=4470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.147000 audit[4470]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=0 a1=ffffd6a9e2c0 a2=70 a3=384942f items=0 ppid=4274 pid=4470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:36.147000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 00:45:36.148000 audit[4470]: AVC avc: denied { bpf } for pid=4470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.148000 audit[4470]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffd6a9e2c0 a2=70 a3=384942f items=0 ppid=4274 pid=4470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:36.148000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 00:45:36.148000 audit[4470]: AVC avc: denied { bpf } for pid=4470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.148000 audit[4470]: AVC avc: denied { bpf } for pid=4470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.148000 audit[4470]: AVC avc: denied { bpf } for pid=4470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.148000 audit[4470]: AVC avc: denied { perfmon } for pid=4470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.148000 audit[4470]: AVC avc: denied { perfmon } for pid=4470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.148000 audit[4470]: AVC avc: denied { perfmon } for pid=4470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.148000 audit[4470]: AVC avc: denied { perfmon } for pid=4470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.148000 audit[4470]: AVC avc: denied { perfmon } for pid=4470 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.148000 audit[4470]: AVC avc: denied { bpf } for pid=4470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.148000 audit[4470]: AVC avc: denied { bpf } for pid=4470 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.148000 audit: BPF prog-id=161 op=LOAD Jul 2 00:45:36.148000 audit[4470]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffd6a9e1e8 a2=70 a3=3849449 items=0 ppid=4274 pid=4470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:36.148000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 00:45:36.162000 audit[4472]: AVC avc: denied { bpf } for pid=4472 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.162000 audit[4472]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffdb105948 a2=70 a3=ffffdb1059b8 items=0 ppid=4274 pid=4472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:36.162000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 2 00:45:36.165000 audit[4472]: AVC avc: denied { bpf } for pid=4472 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.165000 audit[4472]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffdb105818 a2=70 a3=ffffdb105888 items=0 ppid=4274 pid=4472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:36.165000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 2 00:45:36.202000 audit: BPF prog-id=161 op=UNLOAD Jul 2 00:45:36.275000 audit[4485]: NETFILTER_CFG table=filter:101 family=2 entries=8 op=nft_register_rule pid=4485 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 00:45:36.275000 audit[4485]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2932 a0=3 a1=ffffda0a8700 a2=0 a3=1 items=0 ppid=3068 pid=4485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:36.275000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 00:45:36.284000 audit[4485]: NETFILTER_CFG table=nat:102 family=2 entries=44 op=nft_register_rule pid=4485 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 00:45:36.284000 audit[4485]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14196 a0=3 a1=ffffda0a8700 a2=0 a3=1 items=0 ppid=3068 pid=4485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:36.284000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 00:45:36.429000 audit[4512]: NETFILTER_CFG table=mangle:103 family=2 entries=16 op=nft_register_chain pid=4512 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 00:45:36.444352 systemd-networkd[1450]: calib8a146fcce1: Link UP Jul 2 00:45:36.449486 systemd-networkd[1450]: calib8a146fcce1: Gained carrier Jul 2 00:45:36.451584 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calib8a146fcce1: link becomes ready Jul 2 00:45:36.449000 audit[4510]: NETFILTER_CFG table=raw:104 family=2 entries=19 op=nft_register_chain pid=4510 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 00:45:36.429000 audit[4512]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6868 a0=3 a1=ffffc8a21740 a2=0 a3=ffffb2d20fa8 items=0 ppid=4274 pid=4512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:36.429000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 00:45:36.449000 audit[4510]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6992 a0=3 a1=ffffdf6ce0f0 a2=0 a3=ffff8f3dbfa8 items=0 ppid=4274 pid=4510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:36.449000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 00:45:36.458000 audit[4511]: NETFILTER_CFG table=nat:105 family=2 entries=15 op=nft_register_chain pid=4511 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 00:45:36.458000 audit[4511]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5084 a0=3 a1=ffffd79477f0 a2=0 a3=ffff9e944fa8 items=0 ppid=4274 pid=4511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:36.458000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 00:45:36.483050 kubelet[2892]: I0702 00:45:36.482792 2892 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/coredns-5dd5756b68-npzjs" podStartSLOduration=37.482730763 podCreationTimestamp="2024-07-02 00:44:59 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-07-02 00:45:36.236393012 +0000 UTC m=+51.917663757" watchObservedRunningTime="2024-07-02 00:45:36.482730763 +0000 UTC m=+52.164001520" Jul 2 00:45:36.486415 env[1740]: 2024-07-02 00:45:36.278 [INFO][4453] plugin.go 326: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--16--66-k8s-calico--kube--controllers--c8788dcc9--vfkj6-eth0 calico-kube-controllers-c8788dcc9- calico-system f67ec736-8618-4365-aaa8-a8e6e546dc9c 791 0 2024-07-02 00:45:09 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:c8788dcc9 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s ip-172-31-16-66 calico-kube-controllers-c8788dcc9-vfkj6 eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] calib8a146fcce1 [] []}} ContainerID="187626717daf6c96dcdf3f28464786d88c55148157f28fa106988eb4b547d190" Namespace="calico-system" Pod="calico-kube-controllers-c8788dcc9-vfkj6" WorkloadEndpoint="ip--172--31--16--66-k8s-calico--kube--controllers--c8788dcc9--vfkj6-" Jul 2 00:45:36.486415 env[1740]: 2024-07-02 00:45:36.278 [INFO][4453] k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="187626717daf6c96dcdf3f28464786d88c55148157f28fa106988eb4b547d190" Namespace="calico-system" Pod="calico-kube-controllers-c8788dcc9-vfkj6" WorkloadEndpoint="ip--172--31--16--66-k8s-calico--kube--controllers--c8788dcc9--vfkj6-eth0" Jul 2 00:45:36.486415 env[1740]: 2024-07-02 00:45:36.355 [INFO][4489] ipam_plugin.go 224: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="187626717daf6c96dcdf3f28464786d88c55148157f28fa106988eb4b547d190" HandleID="k8s-pod-network.187626717daf6c96dcdf3f28464786d88c55148157f28fa106988eb4b547d190" Workload="ip--172--31--16--66-k8s-calico--kube--controllers--c8788dcc9--vfkj6-eth0" Jul 2 00:45:36.486415 env[1740]: 2024-07-02 00:45:36.376 [INFO][4489] ipam_plugin.go 264: Auto assigning IP ContainerID="187626717daf6c96dcdf3f28464786d88c55148157f28fa106988eb4b547d190" HandleID="k8s-pod-network.187626717daf6c96dcdf3f28464786d88c55148157f28fa106988eb4b547d190" Workload="ip--172--31--16--66-k8s-calico--kube--controllers--c8788dcc9--vfkj6-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000292e70), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-16-66", "pod":"calico-kube-controllers-c8788dcc9-vfkj6", "timestamp":"2024-07-02 00:45:36.355318726 +0000 UTC"}, Hostname:"ip-172-31-16-66", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 2 00:45:36.486415 env[1740]: 2024-07-02 00:45:36.376 [INFO][4489] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 00:45:36.486415 env[1740]: 2024-07-02 00:45:36.376 [INFO][4489] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 00:45:36.486415 env[1740]: 2024-07-02 00:45:36.376 [INFO][4489] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-16-66' Jul 2 00:45:36.486415 env[1740]: 2024-07-02 00:45:36.381 [INFO][4489] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.187626717daf6c96dcdf3f28464786d88c55148157f28fa106988eb4b547d190" host="ip-172-31-16-66" Jul 2 00:45:36.486415 env[1740]: 2024-07-02 00:45:36.398 [INFO][4489] ipam.go 372: Looking up existing affinities for host host="ip-172-31-16-66" Jul 2 00:45:36.486415 env[1740]: 2024-07-02 00:45:36.407 [INFO][4489] ipam.go 489: Trying affinity for 192.168.19.128/26 host="ip-172-31-16-66" Jul 2 00:45:36.486415 env[1740]: 2024-07-02 00:45:36.411 [INFO][4489] ipam.go 155: Attempting to load block cidr=192.168.19.128/26 host="ip-172-31-16-66" Jul 2 00:45:36.486415 env[1740]: 2024-07-02 00:45:36.415 [INFO][4489] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.19.128/26 host="ip-172-31-16-66" Jul 2 00:45:36.486415 env[1740]: 2024-07-02 00:45:36.415 [INFO][4489] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.19.128/26 handle="k8s-pod-network.187626717daf6c96dcdf3f28464786d88c55148157f28fa106988eb4b547d190" host="ip-172-31-16-66" Jul 2 00:45:36.486415 env[1740]: 2024-07-02 00:45:36.417 [INFO][4489] ipam.go 1685: Creating new handle: k8s-pod-network.187626717daf6c96dcdf3f28464786d88c55148157f28fa106988eb4b547d190 Jul 2 00:45:36.486415 env[1740]: 2024-07-02 00:45:36.424 [INFO][4489] ipam.go 1203: Writing block in order to claim IPs block=192.168.19.128/26 handle="k8s-pod-network.187626717daf6c96dcdf3f28464786d88c55148157f28fa106988eb4b547d190" host="ip-172-31-16-66" Jul 2 00:45:36.486415 env[1740]: 2024-07-02 00:45:36.436 [INFO][4489] ipam.go 1216: Successfully claimed IPs: [192.168.19.131/26] block=192.168.19.128/26 handle="k8s-pod-network.187626717daf6c96dcdf3f28464786d88c55148157f28fa106988eb4b547d190" host="ip-172-31-16-66" Jul 2 00:45:36.486415 env[1740]: 2024-07-02 00:45:36.436 [INFO][4489] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.19.131/26] handle="k8s-pod-network.187626717daf6c96dcdf3f28464786d88c55148157f28fa106988eb4b547d190" host="ip-172-31-16-66" Jul 2 00:45:36.486415 env[1740]: 2024-07-02 00:45:36.436 [INFO][4489] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 00:45:36.486415 env[1740]: 2024-07-02 00:45:36.436 [INFO][4489] ipam_plugin.go 282: Calico CNI IPAM assigned addresses IPv4=[192.168.19.131/26] IPv6=[] ContainerID="187626717daf6c96dcdf3f28464786d88c55148157f28fa106988eb4b547d190" HandleID="k8s-pod-network.187626717daf6c96dcdf3f28464786d88c55148157f28fa106988eb4b547d190" Workload="ip--172--31--16--66-k8s-calico--kube--controllers--c8788dcc9--vfkj6-eth0" Jul 2 00:45:36.488471 env[1740]: 2024-07-02 00:45:36.439 [INFO][4453] k8s.go 386: Populated endpoint ContainerID="187626717daf6c96dcdf3f28464786d88c55148157f28fa106988eb4b547d190" Namespace="calico-system" Pod="calico-kube-controllers-c8788dcc9-vfkj6" WorkloadEndpoint="ip--172--31--16--66-k8s-calico--kube--controllers--c8788dcc9--vfkj6-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--16--66-k8s-calico--kube--controllers--c8788dcc9--vfkj6-eth0", GenerateName:"calico-kube-controllers-c8788dcc9-", Namespace:"calico-system", SelfLink:"", UID:"f67ec736-8618-4365-aaa8-a8e6e546dc9c", ResourceVersion:"791", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 0, 45, 9, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"c8788dcc9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-16-66", ContainerID:"", Pod:"calico-kube-controllers-c8788dcc9-vfkj6", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.19.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calib8a146fcce1", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 00:45:36.488471 env[1740]: 2024-07-02 00:45:36.440 [INFO][4453] k8s.go 387: Calico CNI using IPs: [192.168.19.131/32] ContainerID="187626717daf6c96dcdf3f28464786d88c55148157f28fa106988eb4b547d190" Namespace="calico-system" Pod="calico-kube-controllers-c8788dcc9-vfkj6" WorkloadEndpoint="ip--172--31--16--66-k8s-calico--kube--controllers--c8788dcc9--vfkj6-eth0" Jul 2 00:45:36.488471 env[1740]: 2024-07-02 00:45:36.440 [INFO][4453] dataplane_linux.go 68: Setting the host side veth name to calib8a146fcce1 ContainerID="187626717daf6c96dcdf3f28464786d88c55148157f28fa106988eb4b547d190" Namespace="calico-system" Pod="calico-kube-controllers-c8788dcc9-vfkj6" WorkloadEndpoint="ip--172--31--16--66-k8s-calico--kube--controllers--c8788dcc9--vfkj6-eth0" Jul 2 00:45:36.488471 env[1740]: 2024-07-02 00:45:36.453 [INFO][4453] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="187626717daf6c96dcdf3f28464786d88c55148157f28fa106988eb4b547d190" Namespace="calico-system" Pod="calico-kube-controllers-c8788dcc9-vfkj6" WorkloadEndpoint="ip--172--31--16--66-k8s-calico--kube--controllers--c8788dcc9--vfkj6-eth0" Jul 2 00:45:36.488471 env[1740]: 2024-07-02 00:45:36.454 [INFO][4453] k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="187626717daf6c96dcdf3f28464786d88c55148157f28fa106988eb4b547d190" Namespace="calico-system" Pod="calico-kube-controllers-c8788dcc9-vfkj6" WorkloadEndpoint="ip--172--31--16--66-k8s-calico--kube--controllers--c8788dcc9--vfkj6-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--16--66-k8s-calico--kube--controllers--c8788dcc9--vfkj6-eth0", GenerateName:"calico-kube-controllers-c8788dcc9-", Namespace:"calico-system", SelfLink:"", UID:"f67ec736-8618-4365-aaa8-a8e6e546dc9c", ResourceVersion:"791", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 0, 45, 9, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"c8788dcc9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-16-66", ContainerID:"187626717daf6c96dcdf3f28464786d88c55148157f28fa106988eb4b547d190", Pod:"calico-kube-controllers-c8788dcc9-vfkj6", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.19.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calib8a146fcce1", MAC:"b6:22:10:82:2a:30", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 00:45:36.488471 env[1740]: 2024-07-02 00:45:36.480 [INFO][4453] k8s.go 500: Wrote updated endpoint to datastore ContainerID="187626717daf6c96dcdf3f28464786d88c55148157f28fa106988eb4b547d190" Namespace="calico-system" Pod="calico-kube-controllers-c8788dcc9-vfkj6" WorkloadEndpoint="ip--172--31--16--66-k8s-calico--kube--controllers--c8788dcc9--vfkj6-eth0" Jul 2 00:45:36.501000 audit[4515]: NETFILTER_CFG table=filter:106 family=2 entries=91 op=nft_register_chain pid=4515 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 00:45:36.501000 audit[4515]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=50536 a0=3 a1=ffffeab88a60 a2=0 a3=ffff8b412fa8 items=0 ppid=4274 pid=4515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:36.501000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 00:45:36.515232 env[1740]: time="2024-07-02T00:45:36.514500414Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 00:45:36.515232 env[1740]: time="2024-07-02T00:45:36.514601599Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 00:45:36.515232 env[1740]: time="2024-07-02T00:45:36.514668307Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 00:45:36.518215 env[1740]: time="2024-07-02T00:45:36.517986201Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/187626717daf6c96dcdf3f28464786d88c55148157f28fa106988eb4b547d190 pid=4536 runtime=io.containerd.runc.v2 Jul 2 00:45:36.566180 systemd[1]: Started cri-containerd-187626717daf6c96dcdf3f28464786d88c55148157f28fa106988eb4b547d190.scope. Jul 2 00:45:36.588000 audit[4560]: NETFILTER_CFG table=filter:107 family=2 entries=42 op=nft_register_chain pid=4560 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 00:45:36.588000 audit[4560]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=21524 a0=3 a1=ffffc74fc840 a2=0 a3=ffff96471fa8 items=0 ppid=4274 pid=4560 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:36.588000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 00:45:36.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.610000 audit: BPF prog-id=162 op=LOAD Jul 2 00:45:36.611000 audit[4546]: AVC avc: denied { bpf } for pid=4546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.611000 audit[4546]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4536 pid=4546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:36.611000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138373632363731376461663663393664636466336632383436343738 Jul 2 00:45:36.611000 audit[4546]: AVC avc: denied { perfmon } for pid=4546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.611000 audit[4546]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4536 pid=4546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:36.611000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138373632363731376461663663393664636466336632383436343738 Jul 2 00:45:36.611000 audit[4546]: AVC avc: denied { bpf } for pid=4546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.611000 audit[4546]: AVC avc: denied { bpf } for pid=4546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.611000 audit[4546]: AVC avc: denied { bpf } for pid=4546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.611000 audit[4546]: AVC avc: denied { perfmon } for pid=4546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.611000 audit[4546]: AVC avc: denied { perfmon } for pid=4546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.611000 audit[4546]: AVC avc: denied { perfmon } for pid=4546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.611000 audit[4546]: AVC avc: denied { perfmon } for pid=4546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.611000 audit[4546]: AVC avc: denied { perfmon } for pid=4546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.611000 audit[4546]: AVC avc: denied { bpf } for pid=4546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.611000 audit[4546]: AVC avc: denied { bpf } for pid=4546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.611000 audit: BPF prog-id=163 op=LOAD Jul 2 00:45:36.611000 audit[4546]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4536 pid=4546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:36.611000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138373632363731376461663663393664636466336632383436343738 Jul 2 00:45:36.612000 audit[4546]: AVC avc: denied { bpf } for pid=4546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.612000 audit[4546]: AVC avc: denied { bpf } for pid=4546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.612000 audit[4546]: AVC avc: denied { perfmon } for pid=4546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.612000 audit[4546]: AVC avc: denied { perfmon } for pid=4546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.612000 audit[4546]: AVC avc: denied { perfmon } for pid=4546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.612000 audit[4546]: AVC avc: denied { perfmon } for pid=4546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.612000 audit[4546]: AVC avc: denied { perfmon } for pid=4546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.612000 audit[4546]: AVC avc: denied { bpf } for pid=4546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.612000 audit[4546]: AVC avc: denied { bpf } for pid=4546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.612000 audit: BPF prog-id=164 op=LOAD Jul 2 00:45:36.612000 audit[4546]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4536 pid=4546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:36.612000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138373632363731376461663663393664636466336632383436343738 Jul 2 00:45:36.612000 audit: BPF prog-id=164 op=UNLOAD Jul 2 00:45:36.612000 audit: BPF prog-id=163 op=UNLOAD Jul 2 00:45:36.612000 audit[4546]: AVC avc: denied { bpf } for pid=4546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.612000 audit[4546]: AVC avc: denied { bpf } for pid=4546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.612000 audit[4546]: AVC avc: denied { bpf } for pid=4546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.612000 audit[4546]: AVC avc: denied { perfmon } for pid=4546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.612000 audit[4546]: AVC avc: denied { perfmon } for pid=4546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.612000 audit[4546]: AVC avc: denied { perfmon } for pid=4546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.612000 audit[4546]: AVC avc: denied { perfmon } for pid=4546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.612000 audit[4546]: AVC avc: denied { perfmon } for pid=4546 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.612000 audit[4546]: AVC avc: denied { bpf } for pid=4546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.612000 audit[4546]: AVC avc: denied { bpf } for pid=4546 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:36.612000 audit: BPF prog-id=165 op=LOAD Jul 2 00:45:36.612000 audit[4546]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4536 pid=4546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:36.612000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138373632363731376461663663393664636466336632383436343738 Jul 2 00:45:36.658483 env[1740]: time="2024-07-02T00:45:36.657409481Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-c8788dcc9-vfkj6,Uid:f67ec736-8618-4365-aaa8-a8e6e546dc9c,Namespace:calico-system,Attempt:1,} returns sandbox id \"187626717daf6c96dcdf3f28464786d88c55148157f28fa106988eb4b547d190\"" Jul 2 00:45:36.663808 env[1740]: time="2024-07-02T00:45:36.663754831Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.28.0\"" Jul 2 00:45:36.682842 env[1740]: time="2024-07-02T00:45:36.681083904Z" level=info msg="StopPodSandbox for \"6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3\"" Jul 2 00:45:36.881529 env[1740]: 2024-07-02 00:45:36.798 [INFO][4588] k8s.go 608: Cleaning up netns ContainerID="6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3" Jul 2 00:45:36.881529 env[1740]: 2024-07-02 00:45:36.799 [INFO][4588] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3" iface="eth0" netns="/var/run/netns/cni-e7c2be94-09c3-5a24-1ed9-c79934595ea6" Jul 2 00:45:36.881529 env[1740]: 2024-07-02 00:45:36.799 [INFO][4588] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3" iface="eth0" netns="/var/run/netns/cni-e7c2be94-09c3-5a24-1ed9-c79934595ea6" Jul 2 00:45:36.881529 env[1740]: 2024-07-02 00:45:36.799 [INFO][4588] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3" iface="eth0" netns="/var/run/netns/cni-e7c2be94-09c3-5a24-1ed9-c79934595ea6" Jul 2 00:45:36.881529 env[1740]: 2024-07-02 00:45:36.799 [INFO][4588] k8s.go 615: Releasing IP address(es) ContainerID="6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3" Jul 2 00:45:36.881529 env[1740]: 2024-07-02 00:45:36.799 [INFO][4588] utils.go 188: Calico CNI releasing IP address ContainerID="6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3" Jul 2 00:45:36.881529 env[1740]: 2024-07-02 00:45:36.857 [INFO][4594] ipam_plugin.go 411: Releasing address using handleID ContainerID="6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3" HandleID="k8s-pod-network.6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3" Workload="ip--172--31--16--66-k8s-csi--node--driver--hnrns-eth0" Jul 2 00:45:36.881529 env[1740]: 2024-07-02 00:45:36.858 [INFO][4594] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 00:45:36.881529 env[1740]: 2024-07-02 00:45:36.858 [INFO][4594] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 00:45:36.881529 env[1740]: 2024-07-02 00:45:36.874 [WARNING][4594] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3" HandleID="k8s-pod-network.6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3" Workload="ip--172--31--16--66-k8s-csi--node--driver--hnrns-eth0" Jul 2 00:45:36.881529 env[1740]: 2024-07-02 00:45:36.874 [INFO][4594] ipam_plugin.go 439: Releasing address using workloadID ContainerID="6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3" HandleID="k8s-pod-network.6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3" Workload="ip--172--31--16--66-k8s-csi--node--driver--hnrns-eth0" Jul 2 00:45:36.881529 env[1740]: 2024-07-02 00:45:36.876 [INFO][4594] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 00:45:36.881529 env[1740]: 2024-07-02 00:45:36.879 [INFO][4588] k8s.go 621: Teardown processing complete. ContainerID="6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3" Jul 2 00:45:36.882555 env[1740]: time="2024-07-02T00:45:36.881792495Z" level=info msg="TearDown network for sandbox \"6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3\" successfully" Jul 2 00:45:36.882555 env[1740]: time="2024-07-02T00:45:36.881839871Z" level=info msg="StopPodSandbox for \"6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3\" returns successfully" Jul 2 00:45:36.883274 env[1740]: time="2024-07-02T00:45:36.883157014Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-hnrns,Uid:63f3d045-d881-483e-8a8c-c34301573e52,Namespace:calico-system,Attempt:1,}" Jul 2 00:45:36.917680 systemd[1]: run-netns-cni\x2de7c2be94\x2d09c3\x2d5a24\x2d1ed9\x2dc79934595ea6.mount: Deactivated successfully. Jul 2 00:45:37.117824 systemd-networkd[1450]: cali858cb3de077: Link UP Jul 2 00:45:37.127561 systemd-networkd[1450]: cali858cb3de077: Gained carrier Jul 2 00:45:37.128238 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali858cb3de077: link becomes ready Jul 2 00:45:37.152970 env[1740]: 2024-07-02 00:45:36.982 [INFO][4601] plugin.go 326: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--16--66-k8s-csi--node--driver--hnrns-eth0 csi-node-driver- calico-system 63f3d045-d881-483e-8a8c-c34301573e52 805 0 2024-07-02 00:45:09 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:7d7f6c786c k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:default] map[] [] [] []} {k8s ip-172-31-16-66 csi-node-driver-hnrns eth0 default [] [] [kns.calico-system ksa.calico-system.default] cali858cb3de077 [] []}} ContainerID="b89507e4694bdede7f1ca7475019c6329ba50947d1e31c09c281829c38583b1f" Namespace="calico-system" Pod="csi-node-driver-hnrns" WorkloadEndpoint="ip--172--31--16--66-k8s-csi--node--driver--hnrns-" Jul 2 00:45:37.152970 env[1740]: 2024-07-02 00:45:36.982 [INFO][4601] k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="b89507e4694bdede7f1ca7475019c6329ba50947d1e31c09c281829c38583b1f" Namespace="calico-system" Pod="csi-node-driver-hnrns" WorkloadEndpoint="ip--172--31--16--66-k8s-csi--node--driver--hnrns-eth0" Jul 2 00:45:37.152970 env[1740]: 2024-07-02 00:45:37.043 [INFO][4611] ipam_plugin.go 224: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="b89507e4694bdede7f1ca7475019c6329ba50947d1e31c09c281829c38583b1f" HandleID="k8s-pod-network.b89507e4694bdede7f1ca7475019c6329ba50947d1e31c09c281829c38583b1f" Workload="ip--172--31--16--66-k8s-csi--node--driver--hnrns-eth0" Jul 2 00:45:37.152970 env[1740]: 2024-07-02 00:45:37.065 [INFO][4611] ipam_plugin.go 264: Auto assigning IP ContainerID="b89507e4694bdede7f1ca7475019c6329ba50947d1e31c09c281829c38583b1f" HandleID="k8s-pod-network.b89507e4694bdede7f1ca7475019c6329ba50947d1e31c09c281829c38583b1f" Workload="ip--172--31--16--66-k8s-csi--node--driver--hnrns-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002ea5c0), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-16-66", "pod":"csi-node-driver-hnrns", "timestamp":"2024-07-02 00:45:37.043456767 +0000 UTC"}, Hostname:"ip-172-31-16-66", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 2 00:45:37.152970 env[1740]: 2024-07-02 00:45:37.065 [INFO][4611] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 00:45:37.152970 env[1740]: 2024-07-02 00:45:37.065 [INFO][4611] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 00:45:37.152970 env[1740]: 2024-07-02 00:45:37.065 [INFO][4611] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-16-66' Jul 2 00:45:37.152970 env[1740]: 2024-07-02 00:45:37.068 [INFO][4611] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.b89507e4694bdede7f1ca7475019c6329ba50947d1e31c09c281829c38583b1f" host="ip-172-31-16-66" Jul 2 00:45:37.152970 env[1740]: 2024-07-02 00:45:37.076 [INFO][4611] ipam.go 372: Looking up existing affinities for host host="ip-172-31-16-66" Jul 2 00:45:37.152970 env[1740]: 2024-07-02 00:45:37.084 [INFO][4611] ipam.go 489: Trying affinity for 192.168.19.128/26 host="ip-172-31-16-66" Jul 2 00:45:37.152970 env[1740]: 2024-07-02 00:45:37.087 [INFO][4611] ipam.go 155: Attempting to load block cidr=192.168.19.128/26 host="ip-172-31-16-66" Jul 2 00:45:37.152970 env[1740]: 2024-07-02 00:45:37.092 [INFO][4611] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.19.128/26 host="ip-172-31-16-66" Jul 2 00:45:37.152970 env[1740]: 2024-07-02 00:45:37.092 [INFO][4611] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.19.128/26 handle="k8s-pod-network.b89507e4694bdede7f1ca7475019c6329ba50947d1e31c09c281829c38583b1f" host="ip-172-31-16-66" Jul 2 00:45:37.152970 env[1740]: 2024-07-02 00:45:37.094 [INFO][4611] ipam.go 1685: Creating new handle: k8s-pod-network.b89507e4694bdede7f1ca7475019c6329ba50947d1e31c09c281829c38583b1f Jul 2 00:45:37.152970 env[1740]: 2024-07-02 00:45:37.101 [INFO][4611] ipam.go 1203: Writing block in order to claim IPs block=192.168.19.128/26 handle="k8s-pod-network.b89507e4694bdede7f1ca7475019c6329ba50947d1e31c09c281829c38583b1f" host="ip-172-31-16-66" Jul 2 00:45:37.152970 env[1740]: 2024-07-02 00:45:37.110 [INFO][4611] ipam.go 1216: Successfully claimed IPs: [192.168.19.132/26] block=192.168.19.128/26 handle="k8s-pod-network.b89507e4694bdede7f1ca7475019c6329ba50947d1e31c09c281829c38583b1f" host="ip-172-31-16-66" Jul 2 00:45:37.152970 env[1740]: 2024-07-02 00:45:37.110 [INFO][4611] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.19.132/26] handle="k8s-pod-network.b89507e4694bdede7f1ca7475019c6329ba50947d1e31c09c281829c38583b1f" host="ip-172-31-16-66" Jul 2 00:45:37.152970 env[1740]: 2024-07-02 00:45:37.110 [INFO][4611] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 00:45:37.152970 env[1740]: 2024-07-02 00:45:37.110 [INFO][4611] ipam_plugin.go 282: Calico CNI IPAM assigned addresses IPv4=[192.168.19.132/26] IPv6=[] ContainerID="b89507e4694bdede7f1ca7475019c6329ba50947d1e31c09c281829c38583b1f" HandleID="k8s-pod-network.b89507e4694bdede7f1ca7475019c6329ba50947d1e31c09c281829c38583b1f" Workload="ip--172--31--16--66-k8s-csi--node--driver--hnrns-eth0" Jul 2 00:45:37.155476 env[1740]: 2024-07-02 00:45:37.113 [INFO][4601] k8s.go 386: Populated endpoint ContainerID="b89507e4694bdede7f1ca7475019c6329ba50947d1e31c09c281829c38583b1f" Namespace="calico-system" Pod="csi-node-driver-hnrns" WorkloadEndpoint="ip--172--31--16--66-k8s-csi--node--driver--hnrns-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--16--66-k8s-csi--node--driver--hnrns-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"63f3d045-d881-483e-8a8c-c34301573e52", ResourceVersion:"805", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 0, 45, 9, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"7d7f6c786c", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-16-66", ContainerID:"", Pod:"csi-node-driver-hnrns", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.19.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali858cb3de077", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 00:45:37.155476 env[1740]: 2024-07-02 00:45:37.113 [INFO][4601] k8s.go 387: Calico CNI using IPs: [192.168.19.132/32] ContainerID="b89507e4694bdede7f1ca7475019c6329ba50947d1e31c09c281829c38583b1f" Namespace="calico-system" Pod="csi-node-driver-hnrns" WorkloadEndpoint="ip--172--31--16--66-k8s-csi--node--driver--hnrns-eth0" Jul 2 00:45:37.155476 env[1740]: 2024-07-02 00:45:37.113 [INFO][4601] dataplane_linux.go 68: Setting the host side veth name to cali858cb3de077 ContainerID="b89507e4694bdede7f1ca7475019c6329ba50947d1e31c09c281829c38583b1f" Namespace="calico-system" Pod="csi-node-driver-hnrns" WorkloadEndpoint="ip--172--31--16--66-k8s-csi--node--driver--hnrns-eth0" Jul 2 00:45:37.155476 env[1740]: 2024-07-02 00:45:37.135 [INFO][4601] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="b89507e4694bdede7f1ca7475019c6329ba50947d1e31c09c281829c38583b1f" Namespace="calico-system" Pod="csi-node-driver-hnrns" WorkloadEndpoint="ip--172--31--16--66-k8s-csi--node--driver--hnrns-eth0" Jul 2 00:45:37.155476 env[1740]: 2024-07-02 00:45:37.136 [INFO][4601] k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="b89507e4694bdede7f1ca7475019c6329ba50947d1e31c09c281829c38583b1f" Namespace="calico-system" Pod="csi-node-driver-hnrns" WorkloadEndpoint="ip--172--31--16--66-k8s-csi--node--driver--hnrns-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--16--66-k8s-csi--node--driver--hnrns-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"63f3d045-d881-483e-8a8c-c34301573e52", ResourceVersion:"805", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 0, 45, 9, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"7d7f6c786c", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-16-66", ContainerID:"b89507e4694bdede7f1ca7475019c6329ba50947d1e31c09c281829c38583b1f", Pod:"csi-node-driver-hnrns", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.19.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali858cb3de077", MAC:"56:b8:18:0b:52:cd", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 00:45:37.155476 env[1740]: 2024-07-02 00:45:37.148 [INFO][4601] k8s.go 500: Wrote updated endpoint to datastore ContainerID="b89507e4694bdede7f1ca7475019c6329ba50947d1e31c09c281829c38583b1f" Namespace="calico-system" Pod="csi-node-driver-hnrns" WorkloadEndpoint="ip--172--31--16--66-k8s-csi--node--driver--hnrns-eth0" Jul 2 00:45:37.183670 env[1740]: time="2024-07-02T00:45:37.182300382Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 00:45:37.183670 env[1740]: time="2024-07-02T00:45:37.182440280Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 00:45:37.183670 env[1740]: time="2024-07-02T00:45:37.182501300Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 00:45:37.183670 env[1740]: time="2024-07-02T00:45:37.183014448Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b89507e4694bdede7f1ca7475019c6329ba50947d1e31c09c281829c38583b1f pid=4640 runtime=io.containerd.runc.v2 Jul 2 00:45:37.245184 systemd[1]: run-containerd-runc-k8s.io-b89507e4694bdede7f1ca7475019c6329ba50947d1e31c09c281829c38583b1f-runc.6udV7T.mount: Deactivated successfully. Jul 2 00:45:37.258851 systemd[1]: Started cri-containerd-b89507e4694bdede7f1ca7475019c6329ba50947d1e31c09c281829c38583b1f.scope. Jul 2 00:45:37.290469 systemd-networkd[1450]: vxlan.calico: Gained IPv6LL Jul 2 00:45:37.290000 audit[4662]: NETFILTER_CFG table=filter:108 family=2 entries=42 op=nft_register_chain pid=4662 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 00:45:37.290000 audit[4662]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=21016 a0=3 a1=ffffd8abdc20 a2=0 a3=ffffbda3dfa8 items=0 ppid=4274 pid=4662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:37.290000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 00:45:37.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:37.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:37.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:37.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:37.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:37.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:37.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:37.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:37.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:37.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:37.313000 audit: BPF prog-id=166 op=LOAD Jul 2 00:45:37.315000 audit[4650]: AVC avc: denied { bpf } for pid=4650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:37.315000 audit[4650]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4640 pid=4650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:37.315000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238393530376534363934626465646537663163613734373530313963 Jul 2 00:45:37.315000 audit[4650]: AVC avc: denied { perfmon } for pid=4650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:37.315000 audit[4650]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4640 pid=4650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:37.315000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238393530376534363934626465646537663163613734373530313963 Jul 2 00:45:37.316000 audit[4650]: AVC avc: denied { bpf } for pid=4650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:37.316000 audit[4650]: AVC avc: denied { bpf } for pid=4650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:37.316000 audit[4650]: AVC avc: denied { bpf } for pid=4650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:37.316000 audit[4650]: AVC avc: denied { perfmon } for pid=4650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:37.316000 audit[4650]: AVC avc: denied { perfmon } for pid=4650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:37.316000 audit[4650]: AVC avc: denied { perfmon } for pid=4650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:37.316000 audit[4650]: AVC avc: denied { perfmon } for pid=4650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:37.316000 audit[4650]: AVC avc: denied { perfmon } for pid=4650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:37.316000 audit[4650]: AVC avc: denied { bpf } for pid=4650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:37.316000 audit[4650]: AVC avc: denied { bpf } for pid=4650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:37.316000 audit: BPF prog-id=167 op=LOAD Jul 2 00:45:37.316000 audit[4650]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4640 pid=4650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:37.316000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238393530376534363934626465646537663163613734373530313963 Jul 2 00:45:37.317000 audit[4650]: AVC avc: denied { bpf } for pid=4650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:37.317000 audit[4650]: AVC avc: denied { bpf } for pid=4650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:37.317000 audit[4650]: AVC avc: denied { perfmon } for pid=4650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:37.317000 audit[4650]: AVC avc: denied { perfmon } for pid=4650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:37.317000 audit[4650]: AVC avc: denied { perfmon } for pid=4650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:37.317000 audit[4650]: AVC avc: denied { perfmon } for pid=4650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:37.317000 audit[4650]: AVC avc: denied { perfmon } for pid=4650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:37.317000 audit[4650]: AVC avc: denied { bpf } for pid=4650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:37.317000 audit[4650]: AVC avc: denied { bpf } for pid=4650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:37.317000 audit: BPF prog-id=168 op=LOAD Jul 2 00:45:37.317000 audit[4650]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4640 pid=4650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:37.317000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238393530376534363934626465646537663163613734373530313963 Jul 2 00:45:37.318000 audit: BPF prog-id=168 op=UNLOAD Jul 2 00:45:37.319000 audit: BPF prog-id=167 op=UNLOAD Jul 2 00:45:37.319000 audit[4650]: AVC avc: denied { bpf } for pid=4650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:37.319000 audit[4650]: AVC avc: denied { bpf } for pid=4650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:37.319000 audit[4650]: AVC avc: denied { bpf } for pid=4650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:37.319000 audit[4650]: AVC avc: denied { perfmon } for pid=4650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:37.319000 audit[4650]: AVC avc: denied { perfmon } for pid=4650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:37.319000 audit[4650]: AVC avc: denied { perfmon } for pid=4650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:37.319000 audit[4650]: AVC avc: denied { perfmon } for pid=4650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:37.319000 audit[4650]: AVC avc: denied { perfmon } for pid=4650 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:37.319000 audit[4650]: AVC avc: denied { bpf } for pid=4650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:37.319000 audit[4650]: AVC avc: denied { bpf } for pid=4650 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:37.319000 audit: BPF prog-id=169 op=LOAD Jul 2 00:45:37.319000 audit[4650]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4640 pid=4650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:37.319000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238393530376534363934626465646537663163613734373530313963 Jul 2 00:45:37.326000 audit[4668]: NETFILTER_CFG table=filter:109 family=2 entries=8 op=nft_register_rule pid=4668 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 00:45:37.326000 audit[4668]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2932 a0=3 a1=ffffe5bc9f70 a2=0 a3=1 items=0 ppid=3068 pid=4668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:37.326000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 00:45:37.349000 audit[4668]: NETFILTER_CFG table=nat:110 family=2 entries=56 op=nft_register_chain pid=4668 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 00:45:37.349000 audit[4668]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=19860 a0=3 a1=ffffe5bc9f70 a2=0 a3=1 items=0 ppid=3068 pid=4668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:37.349000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 00:45:37.353325 env[1740]: time="2024-07-02T00:45:37.353249154Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-hnrns,Uid:63f3d045-d881-483e-8a8c-c34301573e52,Namespace:calico-system,Attempt:1,} returns sandbox id \"b89507e4694bdede7f1ca7475019c6329ba50947d1e31c09c281829c38583b1f\"" Jul 2 00:45:37.356621 systemd-networkd[1450]: cali04d7f75c260: Gained IPv6LL Jul 2 00:45:38.122819 systemd-networkd[1450]: calib8a146fcce1: Gained IPv6LL Jul 2 00:45:38.250526 systemd-networkd[1450]: cali858cb3de077: Gained IPv6LL Jul 2 00:45:39.163000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.16.66:22-139.178.89.65:41996 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:45:39.164761 systemd[1]: Started sshd@8-172.31.16.66:22-139.178.89.65:41996.service. Jul 2 00:45:39.167407 kernel: kauditd_printk_skb: 346 callbacks suppressed Jul 2 00:45:39.167528 kernel: audit: type=1130 audit(1719881139.163:1177): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.16.66:22-139.178.89.65:41996 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:45:39.365000 audit[2578]: AVC avc: denied { watch } for pid=2578 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6343 scontext=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 00:45:39.365000 audit[2578]: AVC avc: denied { watch } for pid=2578 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6358 scontext=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 00:45:39.380771 sshd[4678]: Accepted publickey for core from 139.178.89.65 port 41996 ssh2: RSA SHA256:8y6JErBds/WgSuzw1b/2wKJnltsiajeNUW/adFCuF/s Jul 2 00:45:39.387439 kernel: audit: type=1400 audit(1719881139.365:1179): avc: denied { watch } for pid=2578 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6343 scontext=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 00:45:39.387592 kernel: audit: type=1400 audit(1719881139.365:1178): avc: denied { watch } for pid=2578 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6358 scontext=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 00:45:39.365000 audit[2578]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000676510 a2=fc6 a3=0 items=0 ppid=2451 pid=2578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 key=(null) Jul 2 00:45:39.391505 sshd[4678]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 00:45:39.400073 kernel: audit: type=1300 audit(1719881139.365:1178): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000676510 a2=fc6 a3=0 items=0 ppid=2451 pid=2578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 key=(null) Jul 2 00:45:39.365000 audit[2578]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400232fe80 a2=fc6 a3=0 items=0 ppid=2451 pid=2578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 key=(null) Jul 2 00:45:39.411623 kernel: audit: type=1300 audit(1719881139.365:1179): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400232fe80 a2=fc6 a3=0 items=0 ppid=2451 pid=2578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 key=(null) Jul 2 00:45:39.365000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 00:45:39.421163 kernel: audit: type=1327 audit(1719881139.365:1178): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 00:45:39.365000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 00:45:39.429093 systemd[1]: Started session-9.scope. Jul 2 00:45:39.433135 kernel: audit: type=1327 audit(1719881139.365:1179): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 00:45:39.432101 systemd-logind[1726]: New session 9 of user core. Jul 2 00:45:39.377000 audit[4678]: USER_ACCT pid=4678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:45:39.442202 kernel: audit: type=1101 audit(1719881139.377:1180): pid=4678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:45:39.388000 audit[4678]: CRED_ACQ pid=4678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:45:39.456138 kernel: audit: type=1103 audit(1719881139.388:1181): pid=4678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:45:39.462816 kernel: audit: type=1006 audit(1719881139.388:1182): pid=4678 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Jul 2 00:45:39.388000 audit[4678]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd63eac30 a2=3 a3=1 items=0 ppid=1 pid=4678 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:39.388000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 00:45:39.446000 audit[4678]: USER_START pid=4678 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:45:39.462000 audit[4680]: CRED_ACQ pid=4680 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:45:39.774991 sshd[4678]: pam_unix(sshd:session): session closed for user core Jul 2 00:45:39.775000 audit[4678]: USER_END pid=4678 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:45:39.776000 audit[4678]: CRED_DISP pid=4678 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:45:39.779410 systemd[1]: session-9.scope: Deactivated successfully. Jul 2 00:45:39.780621 systemd[1]: sshd@8-172.31.16.66:22-139.178.89.65:41996.service: Deactivated successfully. Jul 2 00:45:39.779000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.16.66:22-139.178.89.65:41996 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:45:39.784404 systemd-logind[1726]: Session 9 logged out. Waiting for processes to exit. Jul 2 00:45:39.787442 systemd-logind[1726]: Removed session 9. Jul 2 00:45:40.005000 audit[2586]: AVC avc: denied { watch } for pid=2586 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=6345 scontext=system_u:system_r:svirt_lxc_net_t:s0:c247,c463 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 00:45:40.005000 audit[2586]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=69 a1=4011d3f8f0 a2=fc6 a3=0 items=0 ppid=2409 pid=2586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c247,c463 key=(null) Jul 2 00:45:40.005000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3636002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 00:45:40.010000 audit[2586]: AVC avc: denied { watch } for pid=2586 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6343 scontext=system_u:system_r:svirt_lxc_net_t:s0:c247,c463 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 00:45:40.010000 audit[2586]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=69 a1=4011ff83a0 a2=fc6 a3=0 items=0 ppid=2409 pid=2586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c247,c463 key=(null) Jul 2 00:45:40.010000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3636002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 00:45:40.013000 audit[2586]: AVC avc: denied { watch } for pid=2586 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6358 scontext=system_u:system_r:svirt_lxc_net_t:s0:c247,c463 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 00:45:40.013000 audit[2586]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6a a1=4011d3fb90 a2=fc6 a3=0 items=0 ppid=2409 pid=2586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c247,c463 key=(null) Jul 2 00:45:40.013000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3636002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 00:45:40.024000 audit[2586]: AVC avc: denied { watch } for pid=2586 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=6360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c247,c463 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 00:45:40.024000 audit[2586]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=69 a1=4011d3fe30 a2=fc6 a3=0 items=0 ppid=2409 pid=2586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c247,c463 key=(null) Jul 2 00:45:40.024000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3636002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 00:45:40.060000 audit[2586]: AVC avc: denied { watch } for pid=2586 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6358 scontext=system_u:system_r:svirt_lxc_net_t:s0:c247,c463 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 00:45:40.060000 audit[2586]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=69 a1=40111b7e90 a2=fc6 a3=0 items=0 ppid=2409 pid=2586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c247,c463 key=(null) Jul 2 00:45:40.060000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3636002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 00:45:40.061000 audit[2586]: AVC avc: denied { watch } for pid=2586 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6343 scontext=system_u:system_r:svirt_lxc_net_t:s0:c247,c463 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 00:45:40.061000 audit[2586]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=69 a1=4012064260 a2=fc6 a3=0 items=0 ppid=2409 pid=2586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c247,c463 key=(null) Jul 2 00:45:40.061000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3636002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 00:45:40.785082 env[1740]: time="2024-07-02T00:45:40.785020516Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:45:40.789740 env[1740]: time="2024-07-02T00:45:40.789654817Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:89df47edb6965978d3683de1cac38ee5b47d7054332bbea7cc0ef3b3c17da2e1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:45:40.792505 env[1740]: time="2024-07-02T00:45:40.792449794Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:45:40.801571 env[1740]: time="2024-07-02T00:45:40.801512151Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:c35e88abef622483409fff52313bf764a75095197be4c5a7c7830da342654de1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:45:40.804317 env[1740]: time="2024-07-02T00:45:40.802783320Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.28.0\" returns image reference \"sha256:89df47edb6965978d3683de1cac38ee5b47d7054332bbea7cc0ef3b3c17da2e1\"" Jul 2 00:45:40.811377 env[1740]: time="2024-07-02T00:45:40.811270490Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.28.0\"" Jul 2 00:45:40.868909 env[1740]: time="2024-07-02T00:45:40.868838254Z" level=info msg="CreateContainer within sandbox \"187626717daf6c96dcdf3f28464786d88c55148157f28fa106988eb4b547d190\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Jul 2 00:45:40.899899 env[1740]: time="2024-07-02T00:45:40.899800494Z" level=info msg="CreateContainer within sandbox \"187626717daf6c96dcdf3f28464786d88c55148157f28fa106988eb4b547d190\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"9c0311e3f2d0b993a22028e0710151169abd9c59531ba19dec93c0223afea1b1\"" Jul 2 00:45:40.905791 env[1740]: time="2024-07-02T00:45:40.905740093Z" level=info msg="StartContainer for \"9c0311e3f2d0b993a22028e0710151169abd9c59531ba19dec93c0223afea1b1\"" Jul 2 00:45:40.906000 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount76984510.mount: Deactivated successfully. Jul 2 00:45:40.956963 systemd[1]: Started cri-containerd-9c0311e3f2d0b993a22028e0710151169abd9c59531ba19dec93c0223afea1b1.scope. Jul 2 00:45:41.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:41.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:41.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:41.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:41.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:41.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:41.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:41.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:41.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:41.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:41.056000 audit: BPF prog-id=170 op=LOAD Jul 2 00:45:41.060000 audit[4700]: AVC avc: denied { bpf } for pid=4700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:41.060000 audit[4700]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4536 pid=4700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:41.060000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963303331316533663264306239393361323230323865303731303135 Jul 2 00:45:41.060000 audit[4700]: AVC avc: denied { perfmon } for pid=4700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:41.060000 audit[4700]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4536 pid=4700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:41.060000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963303331316533663264306239393361323230323865303731303135 Jul 2 00:45:41.061000 audit[4700]: AVC avc: denied { bpf } for pid=4700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:41.061000 audit[4700]: AVC avc: denied { bpf } for pid=4700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:41.061000 audit[4700]: AVC avc: denied { bpf } for pid=4700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:41.061000 audit[4700]: AVC avc: denied { perfmon } for pid=4700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:41.061000 audit[4700]: AVC avc: denied { perfmon } for pid=4700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:41.061000 audit[4700]: AVC avc: denied { perfmon } for pid=4700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:41.061000 audit[4700]: AVC avc: denied { perfmon } for pid=4700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:41.061000 audit[4700]: AVC avc: denied { perfmon } for pid=4700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:41.061000 audit[4700]: AVC avc: denied { bpf } for pid=4700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:41.061000 audit[4700]: AVC avc: denied { bpf } for pid=4700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:41.061000 audit: BPF prog-id=171 op=LOAD Jul 2 00:45:41.061000 audit[4700]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4536 pid=4700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:41.061000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963303331316533663264306239393361323230323865303731303135 Jul 2 00:45:41.061000 audit[4700]: AVC avc: denied { bpf } for pid=4700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:41.061000 audit[4700]: AVC avc: denied { bpf } for pid=4700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:41.061000 audit[4700]: AVC avc: denied { perfmon } for pid=4700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:41.061000 audit[4700]: AVC avc: denied { perfmon } for pid=4700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:41.061000 audit[4700]: AVC avc: denied { perfmon } for pid=4700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:41.061000 audit[4700]: AVC avc: denied { perfmon } for pid=4700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:41.061000 audit[4700]: AVC avc: denied { perfmon } for pid=4700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:41.061000 audit[4700]: AVC avc: denied { bpf } for pid=4700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:41.061000 audit[4700]: AVC avc: denied { bpf } for pid=4700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:41.061000 audit: BPF prog-id=172 op=LOAD Jul 2 00:45:41.061000 audit[4700]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4536 pid=4700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:41.061000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963303331316533663264306239393361323230323865303731303135 Jul 2 00:45:41.061000 audit: BPF prog-id=172 op=UNLOAD Jul 2 00:45:41.061000 audit: BPF prog-id=171 op=UNLOAD Jul 2 00:45:41.061000 audit[4700]: AVC avc: denied { bpf } for pid=4700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:41.061000 audit[4700]: AVC avc: denied { bpf } for pid=4700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:41.061000 audit[4700]: AVC avc: denied { bpf } for pid=4700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:41.061000 audit[4700]: AVC avc: denied { perfmon } for pid=4700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:41.061000 audit[4700]: AVC avc: denied { perfmon } for pid=4700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:41.061000 audit[4700]: AVC avc: denied { perfmon } for pid=4700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:41.061000 audit[4700]: AVC avc: denied { perfmon } for pid=4700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:41.061000 audit[4700]: AVC avc: denied { perfmon } for pid=4700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:41.061000 audit[4700]: AVC avc: denied { bpf } for pid=4700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:41.061000 audit[4700]: AVC avc: denied { bpf } for pid=4700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:41.061000 audit: BPF prog-id=173 op=LOAD Jul 2 00:45:41.061000 audit[4700]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4536 pid=4700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:41.061000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963303331316533663264306239393361323230323865303731303135 Jul 2 00:45:41.140498 env[1740]: time="2024-07-02T00:45:41.140436067Z" level=info msg="StartContainer for \"9c0311e3f2d0b993a22028e0710151169abd9c59531ba19dec93c0223afea1b1\" returns successfully" Jul 2 00:45:42.263661 systemd[1]: run-containerd-runc-k8s.io-9c0311e3f2d0b993a22028e0710151169abd9c59531ba19dec93c0223afea1b1-runc.DkgCh8.mount: Deactivated successfully. Jul 2 00:45:42.411416 kubelet[2892]: I0702 00:45:42.410511 2892 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-c8788dcc9-vfkj6" podStartSLOduration=29.261447068 podCreationTimestamp="2024-07-02 00:45:09 +0000 UTC" firstStartedPulling="2024-07-02 00:45:36.660333208 +0000 UTC m=+52.341603941" lastFinishedPulling="2024-07-02 00:45:40.80933538 +0000 UTC m=+56.490606161" observedRunningTime="2024-07-02 00:45:41.238951173 +0000 UTC m=+56.920221906" watchObservedRunningTime="2024-07-02 00:45:42.410449288 +0000 UTC m=+58.091720009" Jul 2 00:45:42.641205 env[1740]: time="2024-07-02T00:45:42.640983537Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:45:42.647437 env[1740]: time="2024-07-02T00:45:42.647374529Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:94ad0dc71bacd91f470c20e61073c2dc00648fd583c0fb95657dee38af05e5ed,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:45:42.652302 env[1740]: time="2024-07-02T00:45:42.652248267Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:45:42.657195 env[1740]: time="2024-07-02T00:45:42.657107185Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:ac5f0089ad8eab325e5d16a59536f9292619adf16736b1554a439a66d543a63d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:45:42.660243 env[1740]: time="2024-07-02T00:45:42.658777236Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.28.0\" returns image reference \"sha256:94ad0dc71bacd91f470c20e61073c2dc00648fd583c0fb95657dee38af05e5ed\"" Jul 2 00:45:42.663696 env[1740]: time="2024-07-02T00:45:42.663635962Z" level=info msg="CreateContainer within sandbox \"b89507e4694bdede7f1ca7475019c6329ba50947d1e31c09c281829c38583b1f\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Jul 2 00:45:42.706462 env[1740]: time="2024-07-02T00:45:42.706337118Z" level=info msg="CreateContainer within sandbox \"b89507e4694bdede7f1ca7475019c6329ba50947d1e31c09c281829c38583b1f\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"f72b7ace339683fdf26e01a9a1977912dba730b606fdcc40e02e7d29ddfd66d3\"" Jul 2 00:45:42.707509 env[1740]: time="2024-07-02T00:45:42.707454770Z" level=info msg="StartContainer for \"f72b7ace339683fdf26e01a9a1977912dba730b606fdcc40e02e7d29ddfd66d3\"" Jul 2 00:45:42.759075 systemd[1]: Started cri-containerd-f72b7ace339683fdf26e01a9a1977912dba730b606fdcc40e02e7d29ddfd66d3.scope. Jul 2 00:45:42.811000 audit[4785]: AVC avc: denied { perfmon } for pid=4785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:42.811000 audit[4785]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4640 pid=4785 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:42.811000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637326237616365333339363833666466323665303161396131393737 Jul 2 00:45:42.811000 audit[4785]: AVC avc: denied { bpf } for pid=4785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:42.811000 audit[4785]: AVC avc: denied { bpf } for pid=4785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:42.811000 audit[4785]: AVC avc: denied { bpf } for pid=4785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:42.811000 audit[4785]: AVC avc: denied { perfmon } for pid=4785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:42.811000 audit[4785]: AVC avc: denied { perfmon } for pid=4785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:42.811000 audit[4785]: AVC avc: denied { perfmon } for pid=4785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:42.811000 audit[4785]: AVC avc: denied { perfmon } for pid=4785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:42.811000 audit[4785]: AVC avc: denied { perfmon } for pid=4785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:42.811000 audit[4785]: AVC avc: denied { bpf } for pid=4785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:42.811000 audit[4785]: AVC avc: denied { bpf } for pid=4785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:42.811000 audit: BPF prog-id=174 op=LOAD Jul 2 00:45:42.811000 audit[4785]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4640 pid=4785 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:42.811000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637326237616365333339363833666466323665303161396131393737 Jul 2 00:45:42.811000 audit[4785]: AVC avc: denied { bpf } for pid=4785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:42.811000 audit[4785]: AVC avc: denied { bpf } for pid=4785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:42.811000 audit[4785]: AVC avc: denied { perfmon } for pid=4785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:42.811000 audit[4785]: AVC avc: denied { perfmon } for pid=4785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:42.811000 audit[4785]: AVC avc: denied { perfmon } for pid=4785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:42.811000 audit[4785]: AVC avc: denied { perfmon } for pid=4785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:42.811000 audit[4785]: AVC avc: denied { perfmon } for pid=4785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:42.811000 audit[4785]: AVC avc: denied { bpf } for pid=4785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:42.811000 audit[4785]: AVC avc: denied { bpf } for pid=4785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:42.811000 audit: BPF prog-id=175 op=LOAD Jul 2 00:45:42.811000 audit[4785]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4640 pid=4785 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:42.811000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637326237616365333339363833666466323665303161396131393737 Jul 2 00:45:42.812000 audit: BPF prog-id=175 op=UNLOAD Jul 2 00:45:42.812000 audit: BPF prog-id=174 op=UNLOAD Jul 2 00:45:42.812000 audit[4785]: AVC avc: denied { bpf } for pid=4785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:42.812000 audit[4785]: AVC avc: denied { bpf } for pid=4785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:42.812000 audit[4785]: AVC avc: denied { bpf } for pid=4785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:42.812000 audit[4785]: AVC avc: denied { perfmon } for pid=4785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:42.812000 audit[4785]: AVC avc: denied { perfmon } for pid=4785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:42.812000 audit[4785]: AVC avc: denied { perfmon } for pid=4785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:42.812000 audit[4785]: AVC avc: denied { perfmon } for pid=4785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:42.812000 audit[4785]: AVC avc: denied { perfmon } for pid=4785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:42.812000 audit[4785]: AVC avc: denied { bpf } for pid=4785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:42.812000 audit[4785]: AVC avc: denied { bpf } for pid=4785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:42.812000 audit: BPF prog-id=176 op=LOAD Jul 2 00:45:42.812000 audit[4785]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4640 pid=4785 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:42.812000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637326237616365333339363833666466323665303161396131393737 Jul 2 00:45:42.861204 env[1740]: time="2024-07-02T00:45:42.861099505Z" level=info msg="StartContainer for \"f72b7ace339683fdf26e01a9a1977912dba730b606fdcc40e02e7d29ddfd66d3\" returns successfully" Jul 2 00:45:42.863359 env[1740]: time="2024-07-02T00:45:42.863305564Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.28.0\"" Jul 2 00:45:44.249423 env[1740]: time="2024-07-02T00:45:44.249345516Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:45:44.254478 env[1740]: time="2024-07-02T00:45:44.254409238Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:f708eddd5878891da5bc6148fc8bb3f7277210481a15957910fe5fb551a5ed28,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:45:44.259144 env[1740]: time="2024-07-02T00:45:44.259031477Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:45:44.264261 env[1740]: time="2024-07-02T00:45:44.264188235Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:b3caf3e7b3042b293728a5ab55d893798d60fec55993a9531e82997de0e534cc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:45:44.267778 env[1740]: time="2024-07-02T00:45:44.265971219Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.28.0\" returns image reference \"sha256:f708eddd5878891da5bc6148fc8bb3f7277210481a15957910fe5fb551a5ed28\"" Jul 2 00:45:44.271559 env[1740]: time="2024-07-02T00:45:44.271482916Z" level=info msg="CreateContainer within sandbox \"b89507e4694bdede7f1ca7475019c6329ba50947d1e31c09c281829c38583b1f\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Jul 2 00:45:44.305600 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3445581626.mount: Deactivated successfully. Jul 2 00:45:44.316466 env[1740]: time="2024-07-02T00:45:44.316367319Z" level=info msg="CreateContainer within sandbox \"b89507e4694bdede7f1ca7475019c6329ba50947d1e31c09c281829c38583b1f\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"4b08bba1bcded5c118e1d5e84667d1f29341fbba58feb059b3246cf8b6259ff1\"" Jul 2 00:45:44.317452 env[1740]: time="2024-07-02T00:45:44.317383809Z" level=info msg="StartContainer for \"4b08bba1bcded5c118e1d5e84667d1f29341fbba58feb059b3246cf8b6259ff1\"" Jul 2 00:45:44.398171 systemd[1]: Started cri-containerd-4b08bba1bcded5c118e1d5e84667d1f29341fbba58feb059b3246cf8b6259ff1.scope. Jul 2 00:45:44.499195 kernel: kauditd_printk_skb: 125 callbacks suppressed Jul 2 00:45:44.499367 kernel: audit: type=1400 audit(1719881144.492:1218): avc: denied { perfmon } for pid=4820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:44.492000 audit[4820]: AVC avc: denied { perfmon } for pid=4820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:44.492000 audit[4820]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4640 pid=4820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:44.515244 kernel: audit: type=1300 audit(1719881144.492:1218): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4640 pid=4820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:44.492000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462303862626131626364656435633131386531643565383436363764 Jul 2 00:45:44.531153 kernel: audit: type=1327 audit(1719881144.492:1218): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462303862626131626364656435633131386531643565383436363764 Jul 2 00:45:44.531314 kernel: audit: type=1400 audit(1719881144.492:1219): avc: denied { bpf } for pid=4820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:44.492000 audit[4820]: AVC avc: denied { bpf } for pid=4820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:44.537287 kernel: audit: type=1400 audit(1719881144.492:1219): avc: denied { bpf } for pid=4820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:44.492000 audit[4820]: AVC avc: denied { bpf } for pid=4820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:44.492000 audit[4820]: AVC avc: denied { bpf } for pid=4820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:44.552031 kernel: audit: type=1400 audit(1719881144.492:1219): avc: denied { bpf } for pid=4820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:44.552180 kernel: audit: type=1400 audit(1719881144.492:1219): avc: denied { perfmon } for pid=4820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:44.492000 audit[4820]: AVC avc: denied { perfmon } for pid=4820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:44.492000 audit[4820]: AVC avc: denied { perfmon } for pid=4820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:44.573046 kernel: audit: type=1400 audit(1719881144.492:1219): avc: denied { perfmon } for pid=4820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:44.577790 kernel: audit: type=1400 audit(1719881144.492:1219): avc: denied { perfmon } for pid=4820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:44.492000 audit[4820]: AVC avc: denied { perfmon } for pid=4820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:44.492000 audit[4820]: AVC avc: denied { perfmon } for pid=4820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:44.592219 kernel: audit: type=1400 audit(1719881144.492:1219): avc: denied { perfmon } for pid=4820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:44.492000 audit[4820]: AVC avc: denied { perfmon } for pid=4820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:44.492000 audit[4820]: AVC avc: denied { bpf } for pid=4820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:44.492000 audit[4820]: AVC avc: denied { bpf } for pid=4820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:44.492000 audit: BPF prog-id=177 op=LOAD Jul 2 00:45:44.492000 audit[4820]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4640 pid=4820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:44.492000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462303862626131626364656435633131386531643565383436363764 Jul 2 00:45:44.492000 audit[4820]: AVC avc: denied { bpf } for pid=4820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:44.492000 audit[4820]: AVC avc: denied { bpf } for pid=4820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:44.492000 audit[4820]: AVC avc: denied { perfmon } for pid=4820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:44.492000 audit[4820]: AVC avc: denied { perfmon } for pid=4820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:44.492000 audit[4820]: AVC avc: denied { perfmon } for pid=4820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:44.492000 audit[4820]: AVC avc: denied { perfmon } for pid=4820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:44.492000 audit[4820]: AVC avc: denied { perfmon } for pid=4820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:44.492000 audit[4820]: AVC avc: denied { bpf } for pid=4820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:44.492000 audit[4820]: AVC avc: denied { bpf } for pid=4820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:44.492000 audit: BPF prog-id=178 op=LOAD Jul 2 00:45:44.492000 audit[4820]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4640 pid=4820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:44.492000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462303862626131626364656435633131386531643565383436363764 Jul 2 00:45:44.492000 audit: BPF prog-id=178 op=UNLOAD Jul 2 00:45:44.492000 audit: BPF prog-id=177 op=UNLOAD Jul 2 00:45:44.492000 audit[4820]: AVC avc: denied { bpf } for pid=4820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:44.492000 audit[4820]: AVC avc: denied { bpf } for pid=4820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:44.492000 audit[4820]: AVC avc: denied { bpf } for pid=4820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:44.492000 audit[4820]: AVC avc: denied { perfmon } for pid=4820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:44.492000 audit[4820]: AVC avc: denied { perfmon } for pid=4820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:44.492000 audit[4820]: AVC avc: denied { perfmon } for pid=4820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:44.492000 audit[4820]: AVC avc: denied { perfmon } for pid=4820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:44.492000 audit[4820]: AVC avc: denied { perfmon } for pid=4820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:44.492000 audit[4820]: AVC avc: denied { bpf } for pid=4820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:44.492000 audit[4820]: AVC avc: denied { bpf } for pid=4820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:45:44.492000 audit: BPF prog-id=179 op=LOAD Jul 2 00:45:44.492000 audit[4820]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4640 pid=4820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:44.492000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462303862626131626364656435633131386531643565383436363764 Jul 2 00:45:44.600454 env[1740]: time="2024-07-02T00:45:44.598774921Z" level=info msg="StartContainer for \"4b08bba1bcded5c118e1d5e84667d1f29341fbba58feb059b3246cf8b6259ff1\" returns successfully" Jul 2 00:45:44.610251 env[1740]: time="2024-07-02T00:45:44.609586861Z" level=info msg="StopPodSandbox for \"17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef\"" Jul 2 00:45:44.805461 systemd[1]: Started sshd@9-172.31.16.66:22-139.178.89.65:42000.service. Jul 2 00:45:44.806000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.16.66:22-139.178.89.65:42000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:45:44.839326 env[1740]: 2024-07-02 00:45:44.707 [WARNING][4859] k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--16--66-k8s-coredns--5dd5756b68--npzjs-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"25185ee7-6762-421c-a038-1a114d80eaae", ResourceVersion:"812", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 0, 44, 59, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-16-66", ContainerID:"de1e361f0ae22b785faaf1c2f830dd2ae9ae9df949b9f47ed092573564182fae", Pod:"coredns-5dd5756b68-npzjs", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.19.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali04d7f75c260", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 00:45:44.839326 env[1740]: 2024-07-02 00:45:44.708 [INFO][4859] k8s.go 608: Cleaning up netns ContainerID="17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef" Jul 2 00:45:44.839326 env[1740]: 2024-07-02 00:45:44.708 [INFO][4859] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef" iface="eth0" netns="" Jul 2 00:45:44.839326 env[1740]: 2024-07-02 00:45:44.708 [INFO][4859] k8s.go 615: Releasing IP address(es) ContainerID="17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef" Jul 2 00:45:44.839326 env[1740]: 2024-07-02 00:45:44.708 [INFO][4859] utils.go 188: Calico CNI releasing IP address ContainerID="17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef" Jul 2 00:45:44.839326 env[1740]: 2024-07-02 00:45:44.777 [INFO][4869] ipam_plugin.go 411: Releasing address using handleID ContainerID="17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef" HandleID="k8s-pod-network.17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef" Workload="ip--172--31--16--66-k8s-coredns--5dd5756b68--npzjs-eth0" Jul 2 00:45:44.839326 env[1740]: 2024-07-02 00:45:44.777 [INFO][4869] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 00:45:44.839326 env[1740]: 2024-07-02 00:45:44.778 [INFO][4869] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 00:45:44.839326 env[1740]: 2024-07-02 00:45:44.794 [WARNING][4869] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef" HandleID="k8s-pod-network.17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef" Workload="ip--172--31--16--66-k8s-coredns--5dd5756b68--npzjs-eth0" Jul 2 00:45:44.839326 env[1740]: 2024-07-02 00:45:44.794 [INFO][4869] ipam_plugin.go 439: Releasing address using workloadID ContainerID="17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef" HandleID="k8s-pod-network.17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef" Workload="ip--172--31--16--66-k8s-coredns--5dd5756b68--npzjs-eth0" Jul 2 00:45:44.839326 env[1740]: 2024-07-02 00:45:44.813 [INFO][4869] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 00:45:44.839326 env[1740]: 2024-07-02 00:45:44.820 [INFO][4859] k8s.go 621: Teardown processing complete. ContainerID="17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef" Jul 2 00:45:44.840368 env[1740]: time="2024-07-02T00:45:44.840293138Z" level=info msg="TearDown network for sandbox \"17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef\" successfully" Jul 2 00:45:44.840368 env[1740]: time="2024-07-02T00:45:44.840359703Z" level=info msg="StopPodSandbox for \"17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef\" returns successfully" Jul 2 00:45:44.841420 env[1740]: time="2024-07-02T00:45:44.841356513Z" level=info msg="RemovePodSandbox for \"17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef\"" Jul 2 00:45:44.842543 env[1740]: time="2024-07-02T00:45:44.842454869Z" level=info msg="Forcibly stopping sandbox \"17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef\"" Jul 2 00:45:45.038000 audit[2578]: AVC avc: denied { watch } for pid=2578 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6343 scontext=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 00:45:45.038000 audit[2578]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001261c20 a2=fc6 a3=0 items=0 ppid=2451 pid=2578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 key=(null) Jul 2 00:45:45.038000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 00:45:45.042000 audit[2578]: AVC avc: denied { watch } for pid=2578 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6343 scontext=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 00:45:45.042000 audit[2578]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40011d9740 a2=fc6 a3=0 items=0 ppid=2451 pid=2578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 key=(null) Jul 2 00:45:45.042000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 00:45:45.046000 audit[2578]: AVC avc: denied { watch } for pid=2578 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6343 scontext=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 00:45:45.046000 audit[2578]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001261dc0 a2=fc6 a3=0 items=0 ppid=2451 pid=2578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 key=(null) Jul 2 00:45:45.046000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 00:45:45.048000 audit[2578]: AVC avc: denied { watch } for pid=2578 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6343 scontext=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 00:45:45.048000 audit[2578]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001261de0 a2=fc6 a3=0 items=0 ppid=2451 pid=2578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 key=(null) Jul 2 00:45:45.048000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 00:45:45.048000 audit[4877]: USER_ACCT pid=4877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:45:45.050240 sshd[4877]: Accepted publickey for core from 139.178.89.65 port 42000 ssh2: RSA SHA256:8y6JErBds/WgSuzw1b/2wKJnltsiajeNUW/adFCuF/s Jul 2 00:45:45.051000 audit[4877]: CRED_ACQ pid=4877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:45:45.051000 audit[4877]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcf251b20 a2=3 a3=1 items=0 ppid=1 pid=4877 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:45.051000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 00:45:45.053944 sshd[4877]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 00:45:45.066449 systemd-logind[1726]: New session 10 of user core. Jul 2 00:45:45.067595 systemd[1]: Started session-10.scope. Jul 2 00:45:45.084000 audit[4877]: USER_START pid=4877 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:45:45.087000 audit[4902]: CRED_ACQ pid=4902 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:45:45.109754 kubelet[2892]: I0702 00:45:45.109702 2892 csi_plugin.go:99] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Jul 2 00:45:45.109754 kubelet[2892]: I0702 00:45:45.109769 2892 csi_plugin.go:112] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Jul 2 00:45:45.142312 env[1740]: 2024-07-02 00:45:44.997 [WARNING][4892] k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--16--66-k8s-coredns--5dd5756b68--npzjs-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"25185ee7-6762-421c-a038-1a114d80eaae", ResourceVersion:"812", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 0, 44, 59, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-16-66", ContainerID:"de1e361f0ae22b785faaf1c2f830dd2ae9ae9df949b9f47ed092573564182fae", Pod:"coredns-5dd5756b68-npzjs", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.19.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali04d7f75c260", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 00:45:45.142312 env[1740]: 2024-07-02 00:45:44.997 [INFO][4892] k8s.go 608: Cleaning up netns ContainerID="17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef" Jul 2 00:45:45.142312 env[1740]: 2024-07-02 00:45:44.997 [INFO][4892] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef" iface="eth0" netns="" Jul 2 00:45:45.142312 env[1740]: 2024-07-02 00:45:44.998 [INFO][4892] k8s.go 615: Releasing IP address(es) ContainerID="17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef" Jul 2 00:45:45.142312 env[1740]: 2024-07-02 00:45:44.998 [INFO][4892] utils.go 188: Calico CNI releasing IP address ContainerID="17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef" Jul 2 00:45:45.142312 env[1740]: 2024-07-02 00:45:45.100 [INFO][4898] ipam_plugin.go 411: Releasing address using handleID ContainerID="17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef" HandleID="k8s-pod-network.17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef" Workload="ip--172--31--16--66-k8s-coredns--5dd5756b68--npzjs-eth0" Jul 2 00:45:45.142312 env[1740]: 2024-07-02 00:45:45.101 [INFO][4898] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 00:45:45.142312 env[1740]: 2024-07-02 00:45:45.101 [INFO][4898] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 00:45:45.142312 env[1740]: 2024-07-02 00:45:45.125 [WARNING][4898] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef" HandleID="k8s-pod-network.17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef" Workload="ip--172--31--16--66-k8s-coredns--5dd5756b68--npzjs-eth0" Jul 2 00:45:45.142312 env[1740]: 2024-07-02 00:45:45.125 [INFO][4898] ipam_plugin.go 439: Releasing address using workloadID ContainerID="17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef" HandleID="k8s-pod-network.17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef" Workload="ip--172--31--16--66-k8s-coredns--5dd5756b68--npzjs-eth0" Jul 2 00:45:45.142312 env[1740]: 2024-07-02 00:45:45.131 [INFO][4898] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 00:45:45.142312 env[1740]: 2024-07-02 00:45:45.134 [INFO][4892] k8s.go 621: Teardown processing complete. ContainerID="17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef" Jul 2 00:45:45.143705 env[1740]: time="2024-07-02T00:45:45.143651205Z" level=info msg="TearDown network for sandbox \"17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef\" successfully" Jul 2 00:45:45.156053 env[1740]: time="2024-07-02T00:45:45.155900141Z" level=info msg="RemovePodSandbox \"17d6d3d190d3337f76127706b1488156731bd96cd65d2f6d1bcf9dfe85b514ef\" returns successfully" Jul 2 00:45:45.157069 env[1740]: time="2024-07-02T00:45:45.157022352Z" level=info msg="StopPodSandbox for \"6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3\"" Jul 2 00:45:45.337676 kubelet[2892]: I0702 00:45:45.336518 2892 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/csi-node-driver-hnrns" podStartSLOduration=29.42687377 podCreationTimestamp="2024-07-02 00:45:09 +0000 UTC" firstStartedPulling="2024-07-02 00:45:37.358608359 +0000 UTC m=+53.039879092" lastFinishedPulling="2024-07-02 00:45:44.268165553 +0000 UTC m=+59.949436262" observedRunningTime="2024-07-02 00:45:45.336212767 +0000 UTC m=+61.017483524" watchObservedRunningTime="2024-07-02 00:45:45.33643094 +0000 UTC m=+61.017701673" Jul 2 00:45:45.545820 sshd[4877]: pam_unix(sshd:session): session closed for user core Jul 2 00:45:45.546000 audit[4877]: USER_END pid=4877 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:45:45.546000 audit[4877]: CRED_DISP pid=4877 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:45:45.551289 systemd-logind[1726]: Session 10 logged out. Waiting for processes to exit. Jul 2 00:45:45.552513 systemd[1]: sshd@9-172.31.16.66:22-139.178.89.65:42000.service: Deactivated successfully. Jul 2 00:45:45.552000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.16.66:22-139.178.89.65:42000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:45:45.555095 systemd[1]: session-10.scope: Deactivated successfully. Jul 2 00:45:45.559501 systemd-logind[1726]: Removed session 10. Jul 2 00:45:45.572141 env[1740]: 2024-07-02 00:45:45.382 [WARNING][4929] k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--16--66-k8s-csi--node--driver--hnrns-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"63f3d045-d881-483e-8a8c-c34301573e52", ResourceVersion:"875", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 0, 45, 9, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"7d7f6c786c", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-16-66", ContainerID:"b89507e4694bdede7f1ca7475019c6329ba50947d1e31c09c281829c38583b1f", Pod:"csi-node-driver-hnrns", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.19.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali858cb3de077", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 00:45:45.572141 env[1740]: 2024-07-02 00:45:45.383 [INFO][4929] k8s.go 608: Cleaning up netns ContainerID="6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3" Jul 2 00:45:45.572141 env[1740]: 2024-07-02 00:45:45.383 [INFO][4929] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3" iface="eth0" netns="" Jul 2 00:45:45.572141 env[1740]: 2024-07-02 00:45:45.383 [INFO][4929] k8s.go 615: Releasing IP address(es) ContainerID="6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3" Jul 2 00:45:45.572141 env[1740]: 2024-07-02 00:45:45.383 [INFO][4929] utils.go 188: Calico CNI releasing IP address ContainerID="6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3" Jul 2 00:45:45.572141 env[1740]: 2024-07-02 00:45:45.526 [INFO][4935] ipam_plugin.go 411: Releasing address using handleID ContainerID="6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3" HandleID="k8s-pod-network.6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3" Workload="ip--172--31--16--66-k8s-csi--node--driver--hnrns-eth0" Jul 2 00:45:45.572141 env[1740]: 2024-07-02 00:45:45.527 [INFO][4935] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 00:45:45.572141 env[1740]: 2024-07-02 00:45:45.527 [INFO][4935] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 00:45:45.572141 env[1740]: 2024-07-02 00:45:45.554 [WARNING][4935] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3" HandleID="k8s-pod-network.6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3" Workload="ip--172--31--16--66-k8s-csi--node--driver--hnrns-eth0" Jul 2 00:45:45.572141 env[1740]: 2024-07-02 00:45:45.557 [INFO][4935] ipam_plugin.go 439: Releasing address using workloadID ContainerID="6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3" HandleID="k8s-pod-network.6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3" Workload="ip--172--31--16--66-k8s-csi--node--driver--hnrns-eth0" Jul 2 00:45:45.572141 env[1740]: 2024-07-02 00:45:45.564 [INFO][4935] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 00:45:45.572141 env[1740]: 2024-07-02 00:45:45.567 [INFO][4929] k8s.go 621: Teardown processing complete. ContainerID="6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3" Jul 2 00:45:45.574056 env[1740]: time="2024-07-02T00:45:45.573998724Z" level=info msg="TearDown network for sandbox \"6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3\" successfully" Jul 2 00:45:45.574378 env[1740]: time="2024-07-02T00:45:45.574293866Z" level=info msg="StopPodSandbox for \"6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3\" returns successfully" Jul 2 00:45:45.578078 env[1740]: time="2024-07-02T00:45:45.578025615Z" level=info msg="RemovePodSandbox for \"6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3\"" Jul 2 00:45:45.578683 env[1740]: time="2024-07-02T00:45:45.578572962Z" level=info msg="Forcibly stopping sandbox \"6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3\"" Jul 2 00:45:45.748233 env[1740]: 2024-07-02 00:45:45.663 [WARNING][4960] k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--16--66-k8s-csi--node--driver--hnrns-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"63f3d045-d881-483e-8a8c-c34301573e52", ResourceVersion:"875", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 0, 45, 9, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"7d7f6c786c", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-16-66", ContainerID:"b89507e4694bdede7f1ca7475019c6329ba50947d1e31c09c281829c38583b1f", Pod:"csi-node-driver-hnrns", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.19.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali858cb3de077", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 00:45:45.748233 env[1740]: 2024-07-02 00:45:45.664 [INFO][4960] k8s.go 608: Cleaning up netns ContainerID="6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3" Jul 2 00:45:45.748233 env[1740]: 2024-07-02 00:45:45.664 [INFO][4960] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3" iface="eth0" netns="" Jul 2 00:45:45.748233 env[1740]: 2024-07-02 00:45:45.664 [INFO][4960] k8s.go 615: Releasing IP address(es) ContainerID="6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3" Jul 2 00:45:45.748233 env[1740]: 2024-07-02 00:45:45.664 [INFO][4960] utils.go 188: Calico CNI releasing IP address ContainerID="6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3" Jul 2 00:45:45.748233 env[1740]: 2024-07-02 00:45:45.719 [INFO][4966] ipam_plugin.go 411: Releasing address using handleID ContainerID="6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3" HandleID="k8s-pod-network.6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3" Workload="ip--172--31--16--66-k8s-csi--node--driver--hnrns-eth0" Jul 2 00:45:45.748233 env[1740]: 2024-07-02 00:45:45.720 [INFO][4966] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 00:45:45.748233 env[1740]: 2024-07-02 00:45:45.720 [INFO][4966] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 00:45:45.748233 env[1740]: 2024-07-02 00:45:45.738 [WARNING][4966] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3" HandleID="k8s-pod-network.6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3" Workload="ip--172--31--16--66-k8s-csi--node--driver--hnrns-eth0" Jul 2 00:45:45.748233 env[1740]: 2024-07-02 00:45:45.738 [INFO][4966] ipam_plugin.go 439: Releasing address using workloadID ContainerID="6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3" HandleID="k8s-pod-network.6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3" Workload="ip--172--31--16--66-k8s-csi--node--driver--hnrns-eth0" Jul 2 00:45:45.748233 env[1740]: 2024-07-02 00:45:45.741 [INFO][4966] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 00:45:45.748233 env[1740]: 2024-07-02 00:45:45.743 [INFO][4960] k8s.go 621: Teardown processing complete. ContainerID="6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3" Jul 2 00:45:45.748233 env[1740]: time="2024-07-02T00:45:45.745703274Z" level=info msg="TearDown network for sandbox \"6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3\" successfully" Jul 2 00:45:45.753225 env[1740]: time="2024-07-02T00:45:45.753134178Z" level=info msg="RemovePodSandbox \"6556d766f16d1c64b0443c7c1e46d5904830b4bec83de158a9237262a8cfd3e3\" returns successfully" Jul 2 00:45:45.753923 env[1740]: time="2024-07-02T00:45:45.753876323Z" level=info msg="StopPodSandbox for \"2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b\"" Jul 2 00:45:45.911292 env[1740]: 2024-07-02 00:45:45.836 [WARNING][4984] k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--16--66-k8s-calico--kube--controllers--c8788dcc9--vfkj6-eth0", GenerateName:"calico-kube-controllers-c8788dcc9-", Namespace:"calico-system", SelfLink:"", UID:"f67ec736-8618-4365-aaa8-a8e6e546dc9c", ResourceVersion:"850", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 0, 45, 9, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"c8788dcc9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-16-66", ContainerID:"187626717daf6c96dcdf3f28464786d88c55148157f28fa106988eb4b547d190", Pod:"calico-kube-controllers-c8788dcc9-vfkj6", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.19.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calib8a146fcce1", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 00:45:45.911292 env[1740]: 2024-07-02 00:45:45.836 [INFO][4984] k8s.go 608: Cleaning up netns ContainerID="2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b" Jul 2 00:45:45.911292 env[1740]: 2024-07-02 00:45:45.837 [INFO][4984] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b" iface="eth0" netns="" Jul 2 00:45:45.911292 env[1740]: 2024-07-02 00:45:45.837 [INFO][4984] k8s.go 615: Releasing IP address(es) ContainerID="2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b" Jul 2 00:45:45.911292 env[1740]: 2024-07-02 00:45:45.837 [INFO][4984] utils.go 188: Calico CNI releasing IP address ContainerID="2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b" Jul 2 00:45:45.911292 env[1740]: 2024-07-02 00:45:45.883 [INFO][4990] ipam_plugin.go 411: Releasing address using handleID ContainerID="2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b" HandleID="k8s-pod-network.2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b" Workload="ip--172--31--16--66-k8s-calico--kube--controllers--c8788dcc9--vfkj6-eth0" Jul 2 00:45:45.911292 env[1740]: 2024-07-02 00:45:45.883 [INFO][4990] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 00:45:45.911292 env[1740]: 2024-07-02 00:45:45.884 [INFO][4990] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 00:45:45.911292 env[1740]: 2024-07-02 00:45:45.903 [WARNING][4990] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b" HandleID="k8s-pod-network.2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b" Workload="ip--172--31--16--66-k8s-calico--kube--controllers--c8788dcc9--vfkj6-eth0" Jul 2 00:45:45.911292 env[1740]: 2024-07-02 00:45:45.903 [INFO][4990] ipam_plugin.go 439: Releasing address using workloadID ContainerID="2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b" HandleID="k8s-pod-network.2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b" Workload="ip--172--31--16--66-k8s-calico--kube--controllers--c8788dcc9--vfkj6-eth0" Jul 2 00:45:45.911292 env[1740]: 2024-07-02 00:45:45.906 [INFO][4990] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 00:45:45.911292 env[1740]: 2024-07-02 00:45:45.908 [INFO][4984] k8s.go 621: Teardown processing complete. ContainerID="2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b" Jul 2 00:45:45.912399 env[1740]: time="2024-07-02T00:45:45.912339494Z" level=info msg="TearDown network for sandbox \"2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b\" successfully" Jul 2 00:45:45.912564 env[1740]: time="2024-07-02T00:45:45.912531016Z" level=info msg="StopPodSandbox for \"2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b\" returns successfully" Jul 2 00:45:45.913456 env[1740]: time="2024-07-02T00:45:45.913405521Z" level=info msg="RemovePodSandbox for \"2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b\"" Jul 2 00:45:45.913969 env[1740]: time="2024-07-02T00:45:45.913897165Z" level=info msg="Forcibly stopping sandbox \"2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b\"" Jul 2 00:45:46.106149 env[1740]: 2024-07-02 00:45:46.017 [WARNING][5010] k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--16--66-k8s-calico--kube--controllers--c8788dcc9--vfkj6-eth0", GenerateName:"calico-kube-controllers-c8788dcc9-", Namespace:"calico-system", SelfLink:"", UID:"f67ec736-8618-4365-aaa8-a8e6e546dc9c", ResourceVersion:"850", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 0, 45, 9, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"c8788dcc9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-16-66", ContainerID:"187626717daf6c96dcdf3f28464786d88c55148157f28fa106988eb4b547d190", Pod:"calico-kube-controllers-c8788dcc9-vfkj6", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.19.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calib8a146fcce1", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 00:45:46.106149 env[1740]: 2024-07-02 00:45:46.018 [INFO][5010] k8s.go 608: Cleaning up netns ContainerID="2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b" Jul 2 00:45:46.106149 env[1740]: 2024-07-02 00:45:46.018 [INFO][5010] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b" iface="eth0" netns="" Jul 2 00:45:46.106149 env[1740]: 2024-07-02 00:45:46.018 [INFO][5010] k8s.go 615: Releasing IP address(es) ContainerID="2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b" Jul 2 00:45:46.106149 env[1740]: 2024-07-02 00:45:46.018 [INFO][5010] utils.go 188: Calico CNI releasing IP address ContainerID="2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b" Jul 2 00:45:46.106149 env[1740]: 2024-07-02 00:45:46.079 [INFO][5016] ipam_plugin.go 411: Releasing address using handleID ContainerID="2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b" HandleID="k8s-pod-network.2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b" Workload="ip--172--31--16--66-k8s-calico--kube--controllers--c8788dcc9--vfkj6-eth0" Jul 2 00:45:46.106149 env[1740]: 2024-07-02 00:45:46.079 [INFO][5016] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 00:45:46.106149 env[1740]: 2024-07-02 00:45:46.080 [INFO][5016] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 00:45:46.106149 env[1740]: 2024-07-02 00:45:46.096 [WARNING][5016] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b" HandleID="k8s-pod-network.2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b" Workload="ip--172--31--16--66-k8s-calico--kube--controllers--c8788dcc9--vfkj6-eth0" Jul 2 00:45:46.106149 env[1740]: 2024-07-02 00:45:46.096 [INFO][5016] ipam_plugin.go 439: Releasing address using workloadID ContainerID="2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b" HandleID="k8s-pod-network.2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b" Workload="ip--172--31--16--66-k8s-calico--kube--controllers--c8788dcc9--vfkj6-eth0" Jul 2 00:45:46.106149 env[1740]: 2024-07-02 00:45:46.099 [INFO][5016] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 00:45:46.106149 env[1740]: 2024-07-02 00:45:46.103 [INFO][5010] k8s.go 621: Teardown processing complete. ContainerID="2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b" Jul 2 00:45:46.107275 env[1740]: time="2024-07-02T00:45:46.107214238Z" level=info msg="TearDown network for sandbox \"2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b\" successfully" Jul 2 00:45:46.113330 env[1740]: time="2024-07-02T00:45:46.113262684Z" level=info msg="RemovePodSandbox \"2b6f7d1e407b90c97a2c78a3c2983fe37c26c90efb23e6757acebd8f35745f1b\" returns successfully" Jul 2 00:45:46.114210 env[1740]: time="2024-07-02T00:45:46.114160554Z" level=info msg="StopPodSandbox for \"da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2\"" Jul 2 00:45:46.296990 env[1740]: 2024-07-02 00:45:46.205 [WARNING][5041] k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--16--66-k8s-coredns--5dd5756b68--lzxkr-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"20d53756-c26c-4ea2-823d-ccf0a1b83f65", ResourceVersion:"767", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 0, 44, 59, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-16-66", ContainerID:"e84a10e870392a1753ce627be56335de725357c9c8d2bae441eeee0dae533d64", Pod:"coredns-5dd5756b68-lzxkr", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.19.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calid0419aa3f55", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 00:45:46.296990 env[1740]: 2024-07-02 00:45:46.205 [INFO][5041] k8s.go 608: Cleaning up netns ContainerID="da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2" Jul 2 00:45:46.296990 env[1740]: 2024-07-02 00:45:46.205 [INFO][5041] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2" iface="eth0" netns="" Jul 2 00:45:46.296990 env[1740]: 2024-07-02 00:45:46.205 [INFO][5041] k8s.go 615: Releasing IP address(es) ContainerID="da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2" Jul 2 00:45:46.296990 env[1740]: 2024-07-02 00:45:46.205 [INFO][5041] utils.go 188: Calico CNI releasing IP address ContainerID="da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2" Jul 2 00:45:46.296990 env[1740]: 2024-07-02 00:45:46.259 [INFO][5047] ipam_plugin.go 411: Releasing address using handleID ContainerID="da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2" HandleID="k8s-pod-network.da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2" Workload="ip--172--31--16--66-k8s-coredns--5dd5756b68--lzxkr-eth0" Jul 2 00:45:46.296990 env[1740]: 2024-07-02 00:45:46.259 [INFO][5047] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 00:45:46.296990 env[1740]: 2024-07-02 00:45:46.260 [INFO][5047] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 00:45:46.296990 env[1740]: 2024-07-02 00:45:46.276 [WARNING][5047] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2" HandleID="k8s-pod-network.da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2" Workload="ip--172--31--16--66-k8s-coredns--5dd5756b68--lzxkr-eth0" Jul 2 00:45:46.296990 env[1740]: 2024-07-02 00:45:46.276 [INFO][5047] ipam_plugin.go 439: Releasing address using workloadID ContainerID="da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2" HandleID="k8s-pod-network.da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2" Workload="ip--172--31--16--66-k8s-coredns--5dd5756b68--lzxkr-eth0" Jul 2 00:45:46.296990 env[1740]: 2024-07-02 00:45:46.288 [INFO][5047] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 00:45:46.296990 env[1740]: 2024-07-02 00:45:46.293 [INFO][5041] k8s.go 621: Teardown processing complete. ContainerID="da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2" Jul 2 00:45:46.298366 env[1740]: time="2024-07-02T00:45:46.298308117Z" level=info msg="TearDown network for sandbox \"da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2\" successfully" Jul 2 00:45:46.298574 env[1740]: time="2024-07-02T00:45:46.298529327Z" level=info msg="StopPodSandbox for \"da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2\" returns successfully" Jul 2 00:45:46.299498 env[1740]: time="2024-07-02T00:45:46.299436041Z" level=info msg="RemovePodSandbox for \"da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2\"" Jul 2 00:45:46.299847 env[1740]: time="2024-07-02T00:45:46.299756803Z" level=info msg="Forcibly stopping sandbox \"da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2\"" Jul 2 00:45:46.541410 env[1740]: 2024-07-02 00:45:46.415 [WARNING][5065] k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--16--66-k8s-coredns--5dd5756b68--lzxkr-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"20d53756-c26c-4ea2-823d-ccf0a1b83f65", ResourceVersion:"767", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 0, 44, 59, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-16-66", ContainerID:"e84a10e870392a1753ce627be56335de725357c9c8d2bae441eeee0dae533d64", Pod:"coredns-5dd5756b68-lzxkr", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.19.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calid0419aa3f55", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 00:45:46.541410 env[1740]: 2024-07-02 00:45:46.416 [INFO][5065] k8s.go 608: Cleaning up netns ContainerID="da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2" Jul 2 00:45:46.541410 env[1740]: 2024-07-02 00:45:46.416 [INFO][5065] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2" iface="eth0" netns="" Jul 2 00:45:46.541410 env[1740]: 2024-07-02 00:45:46.416 [INFO][5065] k8s.go 615: Releasing IP address(es) ContainerID="da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2" Jul 2 00:45:46.541410 env[1740]: 2024-07-02 00:45:46.416 [INFO][5065] utils.go 188: Calico CNI releasing IP address ContainerID="da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2" Jul 2 00:45:46.541410 env[1740]: 2024-07-02 00:45:46.499 [INFO][5071] ipam_plugin.go 411: Releasing address using handleID ContainerID="da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2" HandleID="k8s-pod-network.da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2" Workload="ip--172--31--16--66-k8s-coredns--5dd5756b68--lzxkr-eth0" Jul 2 00:45:46.541410 env[1740]: 2024-07-02 00:45:46.505 [INFO][5071] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 00:45:46.541410 env[1740]: 2024-07-02 00:45:46.505 [INFO][5071] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 00:45:46.541410 env[1740]: 2024-07-02 00:45:46.523 [WARNING][5071] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2" HandleID="k8s-pod-network.da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2" Workload="ip--172--31--16--66-k8s-coredns--5dd5756b68--lzxkr-eth0" Jul 2 00:45:46.541410 env[1740]: 2024-07-02 00:45:46.523 [INFO][5071] ipam_plugin.go 439: Releasing address using workloadID ContainerID="da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2" HandleID="k8s-pod-network.da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2" Workload="ip--172--31--16--66-k8s-coredns--5dd5756b68--lzxkr-eth0" Jul 2 00:45:46.541410 env[1740]: 2024-07-02 00:45:46.536 [INFO][5071] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 00:45:46.541410 env[1740]: 2024-07-02 00:45:46.538 [INFO][5065] k8s.go 621: Teardown processing complete. ContainerID="da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2" Jul 2 00:45:46.542388 env[1740]: time="2024-07-02T00:45:46.541455067Z" level=info msg="TearDown network for sandbox \"da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2\" successfully" Jul 2 00:45:46.546906 env[1740]: time="2024-07-02T00:45:46.546814721Z" level=info msg="RemovePodSandbox \"da43ee82943b6d0c8e3cfbffd22753ad54e9889a3b3f55aee9db926520bc83d2\" returns successfully" Jul 2 00:45:48.272559 systemd[1]: run-containerd-runc-k8s.io-56cf5c61a0c377c3c98f96c1cbe98fef4a7120137ff312e36ee615cf90d26d1d-runc.KfqYXN.mount: Deactivated successfully. Jul 2 00:45:50.401942 systemd[1]: run-containerd-runc-k8s.io-9c0311e3f2d0b993a22028e0710151169abd9c59531ba19dec93c0223afea1b1-runc.gKn86w.mount: Deactivated successfully. Jul 2 00:45:50.576595 systemd[1]: Started sshd@10-172.31.16.66:22-139.178.89.65:39368.service. Jul 2 00:45:50.576000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.16.66:22-139.178.89.65:39368 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:45:50.583200 kernel: kauditd_printk_skb: 56 callbacks suppressed Jul 2 00:45:50.583450 kernel: audit: type=1130 audit(1719881150.576:1237): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.16.66:22-139.178.89.65:39368 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:45:50.751000 audit[5130]: USER_ACCT pid=5130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:45:50.754105 sshd[5130]: Accepted publickey for core from 139.178.89.65 port 39368 ssh2: RSA SHA256:8y6JErBds/WgSuzw1b/2wKJnltsiajeNUW/adFCuF/s Jul 2 00:45:50.757468 sshd[5130]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 00:45:50.752000 audit[5130]: CRED_ACQ pid=5130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:45:50.767537 systemd[1]: Started session-11.scope. Jul 2 00:45:50.771084 kernel: audit: type=1101 audit(1719881150.751:1238): pid=5130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:45:50.771240 kernel: audit: type=1103 audit(1719881150.752:1239): pid=5130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:45:50.770690 systemd-logind[1726]: New session 11 of user core. Jul 2 00:45:50.776390 kernel: audit: type=1006 audit(1719881150.752:1240): pid=5130 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Jul 2 00:45:50.752000 audit[5130]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffed45d200 a2=3 a3=1 items=0 ppid=1 pid=5130 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:50.785398 kernel: audit: type=1300 audit(1719881150.752:1240): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffed45d200 a2=3 a3=1 items=0 ppid=1 pid=5130 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:50.752000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 00:45:50.789510 kernel: audit: type=1327 audit(1719881150.752:1240): proctitle=737368643A20636F7265205B707269765D Jul 2 00:45:50.785000 audit[5130]: USER_START pid=5130 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:45:50.800690 kernel: audit: type=1105 audit(1719881150.785:1241): pid=5130 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:45:50.800000 audit[5132]: CRED_ACQ pid=5132 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:45:50.810244 kernel: audit: type=1103 audit(1719881150.800:1242): pid=5132 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:45:51.059726 sshd[5130]: pam_unix(sshd:session): session closed for user core Jul 2 00:45:51.060000 audit[5130]: USER_END pid=5130 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:45:51.065585 systemd-logind[1726]: Session 11 logged out. Waiting for processes to exit. Jul 2 00:45:51.067374 systemd[1]: session-11.scope: Deactivated successfully. Jul 2 00:45:51.068596 systemd[1]: sshd@10-172.31.16.66:22-139.178.89.65:39368.service: Deactivated successfully. Jul 2 00:45:51.060000 audit[5130]: CRED_DISP pid=5130 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:45:51.073980 systemd-logind[1726]: Removed session 11. Jul 2 00:45:51.074237 kernel: audit: type=1106 audit(1719881151.060:1243): pid=5130 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:45:51.066000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.16.66:22-139.178.89.65:39368 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:45:51.083299 kernel: audit: type=1104 audit(1719881151.060:1244): pid=5130 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:45:51.092094 systemd[1]: Started sshd@11-172.31.16.66:22-139.178.89.65:39382.service. Jul 2 00:45:51.091000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.16.66:22-139.178.89.65:39382 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:45:51.272000 audit[5142]: USER_ACCT pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:45:51.273771 sshd[5142]: Accepted publickey for core from 139.178.89.65 port 39382 ssh2: RSA SHA256:8y6JErBds/WgSuzw1b/2wKJnltsiajeNUW/adFCuF/s Jul 2 00:45:51.275000 audit[5142]: CRED_ACQ pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:45:51.275000 audit[5142]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc2e34410 a2=3 a3=1 items=0 ppid=1 pid=5142 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:51.275000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 00:45:51.277607 sshd[5142]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 00:45:51.288199 systemd[1]: Started session-12.scope. Jul 2 00:45:51.289683 systemd-logind[1726]: New session 12 of user core. Jul 2 00:45:51.302000 audit[5142]: USER_START pid=5142 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:45:51.305000 audit[5144]: CRED_ACQ pid=5144 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:45:51.933656 sshd[5142]: pam_unix(sshd:session): session closed for user core Jul 2 00:45:51.934000 audit[5142]: USER_END pid=5142 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:45:51.934000 audit[5142]: CRED_DISP pid=5142 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:45:51.938951 systemd-logind[1726]: Session 12 logged out. Waiting for processes to exit. Jul 2 00:45:51.938000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.16.66:22-139.178.89.65:39382 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:45:51.939560 systemd[1]: sshd@11-172.31.16.66:22-139.178.89.65:39382.service: Deactivated successfully. Jul 2 00:45:51.940989 systemd[1]: session-12.scope: Deactivated successfully. Jul 2 00:45:51.945001 systemd-logind[1726]: Removed session 12. Jul 2 00:45:51.964837 systemd[1]: Started sshd@12-172.31.16.66:22-139.178.89.65:39398.service. Jul 2 00:45:51.964000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.16.66:22-139.178.89.65:39398 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:45:52.168000 audit[5152]: USER_ACCT pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:45:52.170500 sshd[5152]: Accepted publickey for core from 139.178.89.65 port 39398 ssh2: RSA SHA256:8y6JErBds/WgSuzw1b/2wKJnltsiajeNUW/adFCuF/s Jul 2 00:45:52.171000 audit[5152]: CRED_ACQ pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:45:52.171000 audit[5152]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcaebf980 a2=3 a3=1 items=0 ppid=1 pid=5152 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:52.171000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 00:45:52.173111 sshd[5152]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 00:45:52.181253 systemd-logind[1726]: New session 13 of user core. Jul 2 00:45:52.182831 systemd[1]: Started session-13.scope. Jul 2 00:45:52.195000 audit[5152]: USER_START pid=5152 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:45:52.198000 audit[5154]: CRED_ACQ pid=5154 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:45:52.474551 sshd[5152]: pam_unix(sshd:session): session closed for user core Jul 2 00:45:52.476000 audit[5152]: USER_END pid=5152 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:45:52.477000 audit[5152]: CRED_DISP pid=5152 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:45:52.481334 systemd-logind[1726]: Session 13 logged out. Waiting for processes to exit. Jul 2 00:45:52.482497 systemd[1]: session-13.scope: Deactivated successfully. Jul 2 00:45:52.483921 systemd[1]: sshd@12-172.31.16.66:22-139.178.89.65:39398.service: Deactivated successfully. Jul 2 00:45:52.483000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.16.66:22-139.178.89.65:39398 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:45:52.486957 systemd-logind[1726]: Removed session 13. Jul 2 00:45:57.503076 systemd[1]: Started sshd@13-172.31.16.66:22-139.178.89.65:39412.service. Jul 2 00:45:57.515231 kernel: kauditd_printk_skb: 23 callbacks suppressed Jul 2 00:45:57.515384 kernel: audit: type=1130 audit(1719881157.503:1264): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.16.66:22-139.178.89.65:39412 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:45:57.503000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.16.66:22-139.178.89.65:39412 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:45:57.680000 audit[5181]: USER_ACCT pid=5181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:45:57.684713 sshd[5181]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 00:45:57.685668 sshd[5181]: Accepted publickey for core from 139.178.89.65 port 39412 ssh2: RSA SHA256:8y6JErBds/WgSuzw1b/2wKJnltsiajeNUW/adFCuF/s Jul 2 00:45:57.682000 audit[5181]: CRED_ACQ pid=5181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:45:57.699109 kernel: audit: type=1101 audit(1719881157.680:1265): pid=5181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:45:57.699267 kernel: audit: type=1103 audit(1719881157.682:1266): pid=5181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:45:57.705359 kernel: audit: type=1006 audit(1719881157.682:1267): pid=5181 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Jul 2 00:45:57.682000 audit[5181]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffa084300 a2=3 a3=1 items=0 ppid=1 pid=5181 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:57.713797 systemd[1]: Started session-14.scope. Jul 2 00:45:57.716953 kernel: audit: type=1300 audit(1719881157.682:1267): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffa084300 a2=3 a3=1 items=0 ppid=1 pid=5181 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:45:57.717080 kernel: audit: type=1327 audit(1719881157.682:1267): proctitle=737368643A20636F7265205B707269765D Jul 2 00:45:57.682000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 00:45:57.716212 systemd-logind[1726]: New session 14 of user core. Jul 2 00:45:57.727000 audit[5181]: USER_START pid=5181 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:45:57.727000 audit[5183]: CRED_ACQ pid=5183 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:45:57.747856 kernel: audit: type=1105 audit(1719881157.727:1268): pid=5181 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:45:57.748049 kernel: audit: type=1103 audit(1719881157.727:1269): pid=5183 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:45:57.967560 sshd[5181]: pam_unix(sshd:session): session closed for user core Jul 2 00:45:57.968000 audit[5181]: USER_END pid=5181 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:45:57.973454 systemd-logind[1726]: Session 14 logged out. Waiting for processes to exit. Jul 2 00:45:57.975884 systemd[1]: session-14.scope: Deactivated successfully. Jul 2 00:45:57.977808 systemd[1]: sshd@13-172.31.16.66:22-139.178.89.65:39412.service: Deactivated successfully. Jul 2 00:45:57.980462 systemd-logind[1726]: Removed session 14. Jul 2 00:45:57.969000 audit[5181]: CRED_DISP pid=5181 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:45:57.981217 kernel: audit: type=1106 audit(1719881157.968:1270): pid=5181 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:45:57.977000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.16.66:22-139.178.89.65:39412 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:45:57.990177 kernel: audit: type=1104 audit(1719881157.969:1271): pid=5181 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:03.000918 systemd[1]: Started sshd@14-172.31.16.66:22-139.178.89.65:54988.service. Jul 2 00:46:03.011872 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 2 00:46:03.011981 kernel: audit: type=1130 audit(1719881163.000:1273): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.16.66:22-139.178.89.65:54988 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:46:03.000000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.16.66:22-139.178.89.65:54988 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:46:03.174000 audit[5195]: USER_ACCT pid=5195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:03.175609 sshd[5195]: Accepted publickey for core from 139.178.89.65 port 54988 ssh2: RSA SHA256:8y6JErBds/WgSuzw1b/2wKJnltsiajeNUW/adFCuF/s Jul 2 00:46:03.185331 kernel: audit: type=1101 audit(1719881163.174:1274): pid=5195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:03.187040 sshd[5195]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 00:46:03.184000 audit[5195]: CRED_ACQ pid=5195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:03.202285 kernel: audit: type=1103 audit(1719881163.184:1275): pid=5195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:03.202435 kernel: audit: type=1006 audit(1719881163.185:1276): pid=5195 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Jul 2 00:46:03.185000 audit[5195]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe162f880 a2=3 a3=1 items=0 ppid=1 pid=5195 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:46:03.212833 kernel: audit: type=1300 audit(1719881163.185:1276): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe162f880 a2=3 a3=1 items=0 ppid=1 pid=5195 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:46:03.208291 systemd[1]: Started session-15.scope. Jul 2 00:46:03.210244 systemd-logind[1726]: New session 15 of user core. Jul 2 00:46:03.185000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 00:46:03.216978 kernel: audit: type=1327 audit(1719881163.185:1276): proctitle=737368643A20636F7265205B707269765D Jul 2 00:46:03.221000 audit[5195]: USER_START pid=5195 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:03.224000 audit[5197]: CRED_ACQ pid=5197 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:03.240383 kernel: audit: type=1105 audit(1719881163.221:1277): pid=5195 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:03.240532 kernel: audit: type=1103 audit(1719881163.224:1278): pid=5197 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:03.481638 sshd[5195]: pam_unix(sshd:session): session closed for user core Jul 2 00:46:03.483000 audit[5195]: USER_END pid=5195 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:03.487561 systemd[1]: session-15.scope: Deactivated successfully. Jul 2 00:46:03.489620 systemd[1]: sshd@14-172.31.16.66:22-139.178.89.65:54988.service: Deactivated successfully. Jul 2 00:46:03.484000 audit[5195]: CRED_DISP pid=5195 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:03.502576 kernel: audit: type=1106 audit(1719881163.483:1279): pid=5195 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:03.502747 kernel: audit: type=1104 audit(1719881163.484:1280): pid=5195 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:03.502667 systemd-logind[1726]: Session 15 logged out. Waiting for processes to exit. Jul 2 00:46:03.488000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.16.66:22-139.178.89.65:54988 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:46:03.505220 systemd-logind[1726]: Removed session 15. Jul 2 00:46:03.569906 systemd[1]: run-containerd-runc-k8s.io-9c0311e3f2d0b993a22028e0710151169abd9c59531ba19dec93c0223afea1b1-runc.StzYKr.mount: Deactivated successfully. Jul 2 00:46:08.514253 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 2 00:46:08.514433 kernel: audit: type=1130 audit(1719881168.511:1282): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.16.66:22-139.178.89.65:46348 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:46:08.511000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.16.66:22-139.178.89.65:46348 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:46:08.511920 systemd[1]: Started sshd@15-172.31.16.66:22-139.178.89.65:46348.service. Jul 2 00:46:08.694000 audit[5233]: USER_ACCT pid=5233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:08.695715 sshd[5233]: Accepted publickey for core from 139.178.89.65 port 46348 ssh2: RSA SHA256:8y6JErBds/WgSuzw1b/2wKJnltsiajeNUW/adFCuF/s Jul 2 00:46:08.704000 audit[5233]: CRED_ACQ pid=5233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:08.707404 sshd[5233]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 00:46:08.714270 kernel: audit: type=1101 audit(1719881168.694:1283): pid=5233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:08.714402 kernel: audit: type=1103 audit(1719881168.704:1284): pid=5233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:08.721150 kernel: audit: type=1006 audit(1719881168.705:1285): pid=5233 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Jul 2 00:46:08.721285 kernel: audit: type=1300 audit(1719881168.705:1285): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffa9e0a40 a2=3 a3=1 items=0 ppid=1 pid=5233 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:46:08.705000 audit[5233]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffa9e0a40 a2=3 a3=1 items=0 ppid=1 pid=5233 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:46:08.705000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 00:46:08.734784 kernel: audit: type=1327 audit(1719881168.705:1285): proctitle=737368643A20636F7265205B707269765D Jul 2 00:46:08.738808 systemd[1]: Started session-16.scope. Jul 2 00:46:08.740183 systemd-logind[1726]: New session 16 of user core. Jul 2 00:46:08.752000 audit[5233]: USER_START pid=5233 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:08.752000 audit[5235]: CRED_ACQ pid=5235 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:08.771261 kernel: audit: type=1105 audit(1719881168.752:1286): pid=5233 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:08.771484 kernel: audit: type=1103 audit(1719881168.752:1287): pid=5235 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:09.015935 sshd[5233]: pam_unix(sshd:session): session closed for user core Jul 2 00:46:09.017000 audit[5233]: USER_END pid=5233 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:09.022884 systemd[1]: session-16.scope: Deactivated successfully. Jul 2 00:46:09.024289 systemd[1]: sshd@15-172.31.16.66:22-139.178.89.65:46348.service: Deactivated successfully. Jul 2 00:46:09.019000 audit[5233]: CRED_DISP pid=5233 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:09.037530 kernel: audit: type=1106 audit(1719881169.017:1288): pid=5233 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:09.037678 kernel: audit: type=1104 audit(1719881169.019:1289): pid=5233 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:09.037740 systemd-logind[1726]: Session 16 logged out. Waiting for processes to exit. Jul 2 00:46:09.023000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.16.66:22-139.178.89.65:46348 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:46:09.040220 systemd-logind[1726]: Removed session 16. Jul 2 00:46:14.052000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.16.66:22-139.178.89.65:46364 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:46:14.053009 systemd[1]: Started sshd@16-172.31.16.66:22-139.178.89.65:46364.service. Jul 2 00:46:14.055310 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 2 00:46:14.055433 kernel: audit: type=1130 audit(1719881174.052:1291): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.16.66:22-139.178.89.65:46364 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:46:14.237671 sshd[5246]: Accepted publickey for core from 139.178.89.65 port 46364 ssh2: RSA SHA256:8y6JErBds/WgSuzw1b/2wKJnltsiajeNUW/adFCuF/s Jul 2 00:46:14.236000 audit[5246]: USER_ACCT pid=5246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:14.245000 audit[5246]: CRED_ACQ pid=5246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:14.258433 kernel: audit: type=1101 audit(1719881174.236:1292): pid=5246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:14.258589 kernel: audit: type=1103 audit(1719881174.245:1293): pid=5246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:14.258641 kernel: audit: type=1006 audit(1719881174.245:1294): pid=5246 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Jul 2 00:46:14.247829 sshd[5246]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 00:46:14.245000 audit[5246]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdbfb44d0 a2=3 a3=1 items=0 ppid=1 pid=5246 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:46:14.271267 kernel: audit: type=1300 audit(1719881174.245:1294): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdbfb44d0 a2=3 a3=1 items=0 ppid=1 pid=5246 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:46:14.245000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 00:46:14.282880 kernel: audit: type=1327 audit(1719881174.245:1294): proctitle=737368643A20636F7265205B707269765D Jul 2 00:46:14.280940 systemd[1]: Started session-17.scope. Jul 2 00:46:14.284452 systemd-logind[1726]: New session 17 of user core. Jul 2 00:46:14.298000 audit[5246]: USER_START pid=5246 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:14.298000 audit[5248]: CRED_ACQ pid=5248 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:14.324058 kernel: audit: type=1105 audit(1719881174.298:1295): pid=5246 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:14.324203 kernel: audit: type=1103 audit(1719881174.298:1296): pid=5248 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:14.575906 sshd[5246]: pam_unix(sshd:session): session closed for user core Jul 2 00:46:14.577000 audit[5246]: USER_END pid=5246 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:14.582043 systemd-logind[1726]: Session 17 logged out. Waiting for processes to exit. Jul 2 00:46:14.584774 systemd[1]: session-17.scope: Deactivated successfully. Jul 2 00:46:14.587176 systemd[1]: sshd@16-172.31.16.66:22-139.178.89.65:46364.service: Deactivated successfully. Jul 2 00:46:14.578000 audit[5246]: CRED_DISP pid=5246 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:14.590624 systemd-logind[1726]: Removed session 17. Jul 2 00:46:14.596646 kernel: audit: type=1106 audit(1719881174.577:1297): pid=5246 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:14.596763 kernel: audit: type=1104 audit(1719881174.578:1298): pid=5246 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:14.586000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.16.66:22-139.178.89.65:46364 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:46:14.606854 systemd[1]: Started sshd@17-172.31.16.66:22-139.178.89.65:46372.service. Jul 2 00:46:14.606000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.16.66:22-139.178.89.65:46372 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:46:14.796580 sshd[5257]: Accepted publickey for core from 139.178.89.65 port 46372 ssh2: RSA SHA256:8y6JErBds/WgSuzw1b/2wKJnltsiajeNUW/adFCuF/s Jul 2 00:46:14.795000 audit[5257]: USER_ACCT pid=5257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:14.797000 audit[5257]: CRED_ACQ pid=5257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:14.797000 audit[5257]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcbdc1e10 a2=3 a3=1 items=0 ppid=1 pid=5257 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:46:14.797000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 00:46:14.800087 sshd[5257]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 00:46:14.810014 systemd-logind[1726]: New session 18 of user core. Jul 2 00:46:14.812942 systemd[1]: Started session-18.scope. Jul 2 00:46:14.822000 audit[5257]: USER_START pid=5257 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:14.825000 audit[5259]: CRED_ACQ pid=5259 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:15.288564 sshd[5257]: pam_unix(sshd:session): session closed for user core Jul 2 00:46:15.289000 audit[5257]: USER_END pid=5257 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:15.290000 audit[5257]: CRED_DISP pid=5257 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:15.294616 systemd[1]: sshd@17-172.31.16.66:22-139.178.89.65:46372.service: Deactivated successfully. Jul 2 00:46:15.296078 systemd[1]: session-18.scope: Deactivated successfully. Jul 2 00:46:15.293000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.16.66:22-139.178.89.65:46372 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:46:15.299075 systemd-logind[1726]: Session 18 logged out. Waiting for processes to exit. Jul 2 00:46:15.301573 systemd-logind[1726]: Removed session 18. Jul 2 00:46:15.325389 systemd[1]: Started sshd@18-172.31.16.66:22-139.178.89.65:46382.service. Jul 2 00:46:15.324000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.16.66:22-139.178.89.65:46382 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:46:15.495000 audit[5267]: USER_ACCT pid=5267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:15.496683 sshd[5267]: Accepted publickey for core from 139.178.89.65 port 46382 ssh2: RSA SHA256:8y6JErBds/WgSuzw1b/2wKJnltsiajeNUW/adFCuF/s Jul 2 00:46:15.497000 audit[5267]: CRED_ACQ pid=5267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:15.497000 audit[5267]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd9099b30 a2=3 a3=1 items=0 ppid=1 pid=5267 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:46:15.497000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 00:46:15.499640 sshd[5267]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 00:46:15.509401 systemd[1]: Started session-19.scope. Jul 2 00:46:15.509644 systemd-logind[1726]: New session 19 of user core. Jul 2 00:46:15.521000 audit[5267]: USER_START pid=5267 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:15.524000 audit[5269]: CRED_ACQ pid=5269 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:17.372991 sshd[5267]: pam_unix(sshd:session): session closed for user core Jul 2 00:46:17.374000 audit[5267]: USER_END pid=5267 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:17.374000 audit[5267]: CRED_DISP pid=5267 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:17.379271 systemd[1]: sshd@18-172.31.16.66:22-139.178.89.65:46382.service: Deactivated successfully. Jul 2 00:46:17.378000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.16.66:22-139.178.89.65:46382 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:46:17.380844 systemd-logind[1726]: Session 19 logged out. Waiting for processes to exit. Jul 2 00:46:17.382515 systemd[1]: session-19.scope: Deactivated successfully. Jul 2 00:46:17.382883 systemd[1]: session-19.scope: Consumed 1.023s CPU time. Jul 2 00:46:17.385690 systemd-logind[1726]: Removed session 19. Jul 2 00:46:17.405090 systemd[1]: Started sshd@19-172.31.16.66:22-139.178.89.65:46394.service. Jul 2 00:46:17.405000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.16.66:22-139.178.89.65:46394 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:46:17.424000 audit[5290]: NETFILTER_CFG table=filter:111 family=2 entries=20 op=nft_register_rule pid=5290 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 00:46:17.424000 audit[5290]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11860 a0=3 a1=ffffd1d73500 a2=0 a3=1 items=0 ppid=3068 pid=5290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:46:17.424000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 00:46:17.428000 audit[5290]: NETFILTER_CFG table=nat:112 family=2 entries=20 op=nft_register_rule pid=5290 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 00:46:17.428000 audit[5290]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=ffffd1d73500 a2=0 a3=1 items=0 ppid=3068 pid=5290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:46:17.428000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 00:46:17.461000 audit[5293]: NETFILTER_CFG table=filter:113 family=2 entries=32 op=nft_register_rule pid=5293 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 00:46:17.461000 audit[5293]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11860 a0=3 a1=ffffd769c610 a2=0 a3=1 items=0 ppid=3068 pid=5293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:46:17.461000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 00:46:17.464000 audit[5293]: NETFILTER_CFG table=nat:114 family=2 entries=20 op=nft_register_rule pid=5293 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 00:46:17.464000 audit[5293]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=ffffd769c610 a2=0 a3=1 items=0 ppid=3068 pid=5293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:46:17.464000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 00:46:17.596000 audit[5289]: USER_ACCT pid=5289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:17.597691 sshd[5289]: Accepted publickey for core from 139.178.89.65 port 46394 ssh2: RSA SHA256:8y6JErBds/WgSuzw1b/2wKJnltsiajeNUW/adFCuF/s Jul 2 00:46:17.599000 audit[5289]: CRED_ACQ pid=5289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:17.599000 audit[5289]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe3e76dd0 a2=3 a3=1 items=0 ppid=1 pid=5289 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:46:17.599000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 00:46:17.601238 sshd[5289]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 00:46:17.611064 systemd[1]: Started session-20.scope. Jul 2 00:46:17.611950 systemd-logind[1726]: New session 20 of user core. Jul 2 00:46:17.622000 audit[5289]: USER_START pid=5289 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:17.625000 audit[5294]: CRED_ACQ pid=5294 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:18.395342 sshd[5289]: pam_unix(sshd:session): session closed for user core Jul 2 00:46:18.398000 audit[5289]: USER_END pid=5289 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:18.398000 audit[5289]: CRED_DISP pid=5289 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:18.401000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.16.66:22-139.178.89.65:46394 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:46:18.402342 systemd[1]: sshd@19-172.31.16.66:22-139.178.89.65:46394.service: Deactivated successfully. Jul 2 00:46:18.403887 systemd[1]: session-20.scope: Deactivated successfully. Jul 2 00:46:18.407155 systemd-logind[1726]: Session 20 logged out. Waiting for processes to exit. Jul 2 00:46:18.410465 systemd-logind[1726]: Removed session 20. Jul 2 00:46:18.425000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.16.66:22-139.178.89.65:52034 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:46:18.425952 systemd[1]: Started sshd@20-172.31.16.66:22-139.178.89.65:52034.service. Jul 2 00:46:18.603000 audit[5327]: USER_ACCT pid=5327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:18.605310 sshd[5327]: Accepted publickey for core from 139.178.89.65 port 52034 ssh2: RSA SHA256:8y6JErBds/WgSuzw1b/2wKJnltsiajeNUW/adFCuF/s Jul 2 00:46:18.605000 audit[5327]: CRED_ACQ pid=5327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:18.606000 audit[5327]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffff7e9c60 a2=3 a3=1 items=0 ppid=1 pid=5327 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:46:18.606000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 00:46:18.608542 sshd[5327]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 00:46:18.616458 systemd-logind[1726]: New session 21 of user core. Jul 2 00:46:18.617912 systemd[1]: Started session-21.scope. Jul 2 00:46:18.628000 audit[5327]: USER_START pid=5327 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:18.631000 audit[5329]: CRED_ACQ pid=5329 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:18.873629 sshd[5327]: pam_unix(sshd:session): session closed for user core Jul 2 00:46:18.874000 audit[5327]: USER_END pid=5327 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:18.875000 audit[5327]: CRED_DISP pid=5327 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:18.878897 systemd-logind[1726]: Session 21 logged out. Waiting for processes to exit. Jul 2 00:46:18.879545 systemd[1]: sshd@20-172.31.16.66:22-139.178.89.65:52034.service: Deactivated successfully. Jul 2 00:46:18.880922 systemd[1]: session-21.scope: Deactivated successfully. Jul 2 00:46:18.878000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.16.66:22-139.178.89.65:52034 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:46:18.883102 systemd-logind[1726]: Removed session 21. Jul 2 00:46:20.412302 systemd[1]: run-containerd-runc-k8s.io-9c0311e3f2d0b993a22028e0710151169abd9c59531ba19dec93c0223afea1b1-runc.qjNoel.mount: Deactivated successfully. Jul 2 00:46:21.305975 kubelet[2892]: I0702 00:46:21.305899 2892 topology_manager.go:215] "Topology Admit Handler" podUID="e0658c98-db9b-4d1f-b931-0227a2de2e50" podNamespace="calico-apiserver" podName="calico-apiserver-6f7f594bb6-frbkn" Jul 2 00:46:21.318623 systemd[1]: Created slice kubepods-besteffort-pode0658c98_db9b_4d1f_b931_0227a2de2e50.slice. Jul 2 00:46:21.454703 kubelet[2892]: I0702 00:46:21.454630 2892 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-bxz9m\" (UniqueName: \"kubernetes.io/projected/e0658c98-db9b-4d1f-b931-0227a2de2e50-kube-api-access-bxz9m\") pod \"calico-apiserver-6f7f594bb6-frbkn\" (UID: \"e0658c98-db9b-4d1f-b931-0227a2de2e50\") " pod="calico-apiserver/calico-apiserver-6f7f594bb6-frbkn" Jul 2 00:46:21.454908 kubelet[2892]: I0702 00:46:21.454722 2892 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/e0658c98-db9b-4d1f-b931-0227a2de2e50-calico-apiserver-certs\") pod \"calico-apiserver-6f7f594bb6-frbkn\" (UID: \"e0658c98-db9b-4d1f-b931-0227a2de2e50\") " pod="calico-apiserver/calico-apiserver-6f7f594bb6-frbkn" Jul 2 00:46:21.507000 audit[5357]: NETFILTER_CFG table=filter:115 family=2 entries=33 op=nft_register_rule pid=5357 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 00:46:21.510383 kernel: kauditd_printk_skb: 57 callbacks suppressed Jul 2 00:46:21.510490 kernel: audit: type=1325 audit(1719881181.507:1340): table=filter:115 family=2 entries=33 op=nft_register_rule pid=5357 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 00:46:21.507000 audit[5357]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=12604 a0=3 a1=fffff0d9a860 a2=0 a3=1 items=0 ppid=3068 pid=5357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:46:21.525264 kernel: audit: type=1300 audit(1719881181.507:1340): arch=c00000b7 syscall=211 success=yes exit=12604 a0=3 a1=fffff0d9a860 a2=0 a3=1 items=0 ppid=3068 pid=5357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:46:21.525386 kernel: audit: type=1327 audit(1719881181.507:1340): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 00:46:21.507000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 00:46:21.512000 audit[5357]: NETFILTER_CFG table=nat:116 family=2 entries=20 op=nft_register_rule pid=5357 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 00:46:21.512000 audit[5357]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=fffff0d9a860 a2=0 a3=1 items=0 ppid=3068 pid=5357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:46:21.545580 kernel: audit: type=1325 audit(1719881181.512:1341): table=nat:116 family=2 entries=20 op=nft_register_rule pid=5357 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 00:46:21.545786 kernel: audit: type=1300 audit(1719881181.512:1341): arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=fffff0d9a860 a2=0 a3=1 items=0 ppid=3068 pid=5357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:46:21.512000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 00:46:21.550643 kernel: audit: type=1327 audit(1719881181.512:1341): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 00:46:21.552000 audit[5359]: NETFILTER_CFG table=filter:117 family=2 entries=34 op=nft_register_rule pid=5359 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 00:46:21.556478 kubelet[2892]: E0702 00:46:21.556214 2892 secret.go:194] Couldn't get secret calico-apiserver/calico-apiserver-certs: secret "calico-apiserver-certs" not found Jul 2 00:46:21.556903 kubelet[2892]: E0702 00:46:21.556873 2892 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/e0658c98-db9b-4d1f-b931-0227a2de2e50-calico-apiserver-certs podName:e0658c98-db9b-4d1f-b931-0227a2de2e50 nodeName:}" failed. No retries permitted until 2024-07-02 00:46:22.056720533 +0000 UTC m=+97.737991254 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "calico-apiserver-certs" (UniqueName: "kubernetes.io/secret/e0658c98-db9b-4d1f-b931-0227a2de2e50-calico-apiserver-certs") pod "calico-apiserver-6f7f594bb6-frbkn" (UID: "e0658c98-db9b-4d1f-b931-0227a2de2e50") : secret "calico-apiserver-certs" not found Jul 2 00:46:21.552000 audit[5359]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=12604 a0=3 a1=ffffd11ab750 a2=0 a3=1 items=0 ppid=3068 pid=5359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:46:21.569536 kernel: audit: type=1325 audit(1719881181.552:1342): table=filter:117 family=2 entries=34 op=nft_register_rule pid=5359 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 00:46:21.569735 kernel: audit: type=1300 audit(1719881181.552:1342): arch=c00000b7 syscall=211 success=yes exit=12604 a0=3 a1=ffffd11ab750 a2=0 a3=1 items=0 ppid=3068 pid=5359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:46:21.569802 kernel: audit: type=1327 audit(1719881181.552:1342): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 00:46:21.552000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 00:46:21.561000 audit[5359]: NETFILTER_CFG table=nat:118 family=2 entries=20 op=nft_register_rule pid=5359 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 00:46:21.579685 kernel: audit: type=1325 audit(1719881181.561:1343): table=nat:118 family=2 entries=20 op=nft_register_rule pid=5359 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 00:46:21.561000 audit[5359]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=ffffd11ab750 a2=0 a3=1 items=0 ppid=3068 pid=5359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:46:21.561000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 00:46:22.224354 env[1740]: time="2024-07-02T00:46:22.224032292Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6f7f594bb6-frbkn,Uid:e0658c98-db9b-4d1f-b931-0227a2de2e50,Namespace:calico-apiserver,Attempt:0,}" Jul 2 00:46:22.489085 (udev-worker)[5381]: Network interface NamePolicy= disabled on kernel command line. Jul 2 00:46:22.501272 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 2 00:46:22.501408 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali4c1c7dcd612: link becomes ready Jul 2 00:46:22.492546 systemd-networkd[1450]: cali4c1c7dcd612: Link UP Jul 2 00:46:22.500545 systemd-networkd[1450]: cali4c1c7dcd612: Gained carrier Jul 2 00:46:22.537334 env[1740]: 2024-07-02 00:46:22.326 [INFO][5363] plugin.go 326: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--16--66-k8s-calico--apiserver--6f7f594bb6--frbkn-eth0 calico-apiserver-6f7f594bb6- calico-apiserver e0658c98-db9b-4d1f-b931-0227a2de2e50 1100 0 2024-07-02 00:46:21 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:6f7f594bb6 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ip-172-31-16-66 calico-apiserver-6f7f594bb6-frbkn eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali4c1c7dcd612 [] []}} ContainerID="19a2da0ba9e87ad87d51c1cfdf0089e1af51941c58f8ce1a572eb975db3cb5f1" Namespace="calico-apiserver" Pod="calico-apiserver-6f7f594bb6-frbkn" WorkloadEndpoint="ip--172--31--16--66-k8s-calico--apiserver--6f7f594bb6--frbkn-" Jul 2 00:46:22.537334 env[1740]: 2024-07-02 00:46:22.326 [INFO][5363] k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="19a2da0ba9e87ad87d51c1cfdf0089e1af51941c58f8ce1a572eb975db3cb5f1" Namespace="calico-apiserver" Pod="calico-apiserver-6f7f594bb6-frbkn" WorkloadEndpoint="ip--172--31--16--66-k8s-calico--apiserver--6f7f594bb6--frbkn-eth0" Jul 2 00:46:22.537334 env[1740]: 2024-07-02 00:46:22.400 [INFO][5374] ipam_plugin.go 224: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="19a2da0ba9e87ad87d51c1cfdf0089e1af51941c58f8ce1a572eb975db3cb5f1" HandleID="k8s-pod-network.19a2da0ba9e87ad87d51c1cfdf0089e1af51941c58f8ce1a572eb975db3cb5f1" Workload="ip--172--31--16--66-k8s-calico--apiserver--6f7f594bb6--frbkn-eth0" Jul 2 00:46:22.537334 env[1740]: 2024-07-02 00:46:22.423 [INFO][5374] ipam_plugin.go 264: Auto assigning IP ContainerID="19a2da0ba9e87ad87d51c1cfdf0089e1af51941c58f8ce1a572eb975db3cb5f1" HandleID="k8s-pod-network.19a2da0ba9e87ad87d51c1cfdf0089e1af51941c58f8ce1a572eb975db3cb5f1" Workload="ip--172--31--16--66-k8s-calico--apiserver--6f7f594bb6--frbkn-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400026dde0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ip-172-31-16-66", "pod":"calico-apiserver-6f7f594bb6-frbkn", "timestamp":"2024-07-02 00:46:22.400057019 +0000 UTC"}, Hostname:"ip-172-31-16-66", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 2 00:46:22.537334 env[1740]: 2024-07-02 00:46:22.424 [INFO][5374] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 00:46:22.537334 env[1740]: 2024-07-02 00:46:22.424 [INFO][5374] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 00:46:22.537334 env[1740]: 2024-07-02 00:46:22.424 [INFO][5374] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-16-66' Jul 2 00:46:22.537334 env[1740]: 2024-07-02 00:46:22.427 [INFO][5374] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.19a2da0ba9e87ad87d51c1cfdf0089e1af51941c58f8ce1a572eb975db3cb5f1" host="ip-172-31-16-66" Jul 2 00:46:22.537334 env[1740]: 2024-07-02 00:46:22.435 [INFO][5374] ipam.go 372: Looking up existing affinities for host host="ip-172-31-16-66" Jul 2 00:46:22.537334 env[1740]: 2024-07-02 00:46:22.443 [INFO][5374] ipam.go 489: Trying affinity for 192.168.19.128/26 host="ip-172-31-16-66" Jul 2 00:46:22.537334 env[1740]: 2024-07-02 00:46:22.447 [INFO][5374] ipam.go 155: Attempting to load block cidr=192.168.19.128/26 host="ip-172-31-16-66" Jul 2 00:46:22.537334 env[1740]: 2024-07-02 00:46:22.453 [INFO][5374] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.19.128/26 host="ip-172-31-16-66" Jul 2 00:46:22.537334 env[1740]: 2024-07-02 00:46:22.453 [INFO][5374] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.19.128/26 handle="k8s-pod-network.19a2da0ba9e87ad87d51c1cfdf0089e1af51941c58f8ce1a572eb975db3cb5f1" host="ip-172-31-16-66" Jul 2 00:46:22.537334 env[1740]: 2024-07-02 00:46:22.457 [INFO][5374] ipam.go 1685: Creating new handle: k8s-pod-network.19a2da0ba9e87ad87d51c1cfdf0089e1af51941c58f8ce1a572eb975db3cb5f1 Jul 2 00:46:22.537334 env[1740]: 2024-07-02 00:46:22.463 [INFO][5374] ipam.go 1203: Writing block in order to claim IPs block=192.168.19.128/26 handle="k8s-pod-network.19a2da0ba9e87ad87d51c1cfdf0089e1af51941c58f8ce1a572eb975db3cb5f1" host="ip-172-31-16-66" Jul 2 00:46:22.537334 env[1740]: 2024-07-02 00:46:22.477 [INFO][5374] ipam.go 1216: Successfully claimed IPs: [192.168.19.133/26] block=192.168.19.128/26 handle="k8s-pod-network.19a2da0ba9e87ad87d51c1cfdf0089e1af51941c58f8ce1a572eb975db3cb5f1" host="ip-172-31-16-66" Jul 2 00:46:22.537334 env[1740]: 2024-07-02 00:46:22.477 [INFO][5374] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.19.133/26] handle="k8s-pod-network.19a2da0ba9e87ad87d51c1cfdf0089e1af51941c58f8ce1a572eb975db3cb5f1" host="ip-172-31-16-66" Jul 2 00:46:22.537334 env[1740]: 2024-07-02 00:46:22.477 [INFO][5374] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 00:46:22.537334 env[1740]: 2024-07-02 00:46:22.477 [INFO][5374] ipam_plugin.go 282: Calico CNI IPAM assigned addresses IPv4=[192.168.19.133/26] IPv6=[] ContainerID="19a2da0ba9e87ad87d51c1cfdf0089e1af51941c58f8ce1a572eb975db3cb5f1" HandleID="k8s-pod-network.19a2da0ba9e87ad87d51c1cfdf0089e1af51941c58f8ce1a572eb975db3cb5f1" Workload="ip--172--31--16--66-k8s-calico--apiserver--6f7f594bb6--frbkn-eth0" Jul 2 00:46:22.539070 env[1740]: 2024-07-02 00:46:22.480 [INFO][5363] k8s.go 386: Populated endpoint ContainerID="19a2da0ba9e87ad87d51c1cfdf0089e1af51941c58f8ce1a572eb975db3cb5f1" Namespace="calico-apiserver" Pod="calico-apiserver-6f7f594bb6-frbkn" WorkloadEndpoint="ip--172--31--16--66-k8s-calico--apiserver--6f7f594bb6--frbkn-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--16--66-k8s-calico--apiserver--6f7f594bb6--frbkn-eth0", GenerateName:"calico-apiserver-6f7f594bb6-", Namespace:"calico-apiserver", SelfLink:"", UID:"e0658c98-db9b-4d1f-b931-0227a2de2e50", ResourceVersion:"1100", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 0, 46, 21, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6f7f594bb6", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-16-66", ContainerID:"", Pod:"calico-apiserver-6f7f594bb6-frbkn", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.19.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali4c1c7dcd612", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 00:46:22.539070 env[1740]: 2024-07-02 00:46:22.481 [INFO][5363] k8s.go 387: Calico CNI using IPs: [192.168.19.133/32] ContainerID="19a2da0ba9e87ad87d51c1cfdf0089e1af51941c58f8ce1a572eb975db3cb5f1" Namespace="calico-apiserver" Pod="calico-apiserver-6f7f594bb6-frbkn" WorkloadEndpoint="ip--172--31--16--66-k8s-calico--apiserver--6f7f594bb6--frbkn-eth0" Jul 2 00:46:22.539070 env[1740]: 2024-07-02 00:46:22.481 [INFO][5363] dataplane_linux.go 68: Setting the host side veth name to cali4c1c7dcd612 ContainerID="19a2da0ba9e87ad87d51c1cfdf0089e1af51941c58f8ce1a572eb975db3cb5f1" Namespace="calico-apiserver" Pod="calico-apiserver-6f7f594bb6-frbkn" WorkloadEndpoint="ip--172--31--16--66-k8s-calico--apiserver--6f7f594bb6--frbkn-eth0" Jul 2 00:46:22.539070 env[1740]: 2024-07-02 00:46:22.507 [INFO][5363] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="19a2da0ba9e87ad87d51c1cfdf0089e1af51941c58f8ce1a572eb975db3cb5f1" Namespace="calico-apiserver" Pod="calico-apiserver-6f7f594bb6-frbkn" WorkloadEndpoint="ip--172--31--16--66-k8s-calico--apiserver--6f7f594bb6--frbkn-eth0" Jul 2 00:46:22.539070 env[1740]: 2024-07-02 00:46:22.507 [INFO][5363] k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="19a2da0ba9e87ad87d51c1cfdf0089e1af51941c58f8ce1a572eb975db3cb5f1" Namespace="calico-apiserver" Pod="calico-apiserver-6f7f594bb6-frbkn" WorkloadEndpoint="ip--172--31--16--66-k8s-calico--apiserver--6f7f594bb6--frbkn-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--16--66-k8s-calico--apiserver--6f7f594bb6--frbkn-eth0", GenerateName:"calico-apiserver-6f7f594bb6-", Namespace:"calico-apiserver", SelfLink:"", UID:"e0658c98-db9b-4d1f-b931-0227a2de2e50", ResourceVersion:"1100", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 0, 46, 21, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6f7f594bb6", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-16-66", ContainerID:"19a2da0ba9e87ad87d51c1cfdf0089e1af51941c58f8ce1a572eb975db3cb5f1", Pod:"calico-apiserver-6f7f594bb6-frbkn", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.19.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali4c1c7dcd612", MAC:"5a:32:c6:7f:a7:65", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 00:46:22.539070 env[1740]: 2024-07-02 00:46:22.529 [INFO][5363] k8s.go 500: Wrote updated endpoint to datastore ContainerID="19a2da0ba9e87ad87d51c1cfdf0089e1af51941c58f8ce1a572eb975db3cb5f1" Namespace="calico-apiserver" Pod="calico-apiserver-6f7f594bb6-frbkn" WorkloadEndpoint="ip--172--31--16--66-k8s-calico--apiserver--6f7f594bb6--frbkn-eth0" Jul 2 00:46:22.578342 env[1740]: time="2024-07-02T00:46:22.577894989Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 00:46:22.578342 env[1740]: time="2024-07-02T00:46:22.577965765Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 00:46:22.578342 env[1740]: time="2024-07-02T00:46:22.578001573Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 00:46:22.579075 env[1740]: time="2024-07-02T00:46:22.578439239Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/19a2da0ba9e87ad87d51c1cfdf0089e1af51941c58f8ce1a572eb975db3cb5f1 pid=5400 runtime=io.containerd.runc.v2 Jul 2 00:46:22.632029 systemd[1]: Started cri-containerd-19a2da0ba9e87ad87d51c1cfdf0089e1af51941c58f8ce1a572eb975db3cb5f1.scope. Jul 2 00:46:22.668329 systemd[1]: run-containerd-runc-k8s.io-19a2da0ba9e87ad87d51c1cfdf0089e1af51941c58f8ce1a572eb975db3cb5f1-runc.DwJg4k.mount: Deactivated successfully. Jul 2 00:46:22.711000 audit[5420]: NETFILTER_CFG table=filter:119 family=2 entries=55 op=nft_register_chain pid=5420 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 00:46:22.711000 audit[5420]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=27464 a0=3 a1=ffffe0801bf0 a2=0 a3=ffff8a088fa8 items=0 ppid=4274 pid=5420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:46:22.711000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 00:46:22.722000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:22.722000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:22.722000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:22.722000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:22.722000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:22.722000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:22.722000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:22.722000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:22.722000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:22.722000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:22.722000 audit: BPF prog-id=180 op=LOAD Jul 2 00:46:22.723000 audit[5411]: AVC avc: denied { bpf } for pid=5411 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:22.723000 audit[5411]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=5400 pid=5411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:46:22.723000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139613264613062613965383761643837643531633163666466303038 Jul 2 00:46:22.724000 audit[5411]: AVC avc: denied { perfmon } for pid=5411 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:22.724000 audit[5411]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=5400 pid=5411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:46:22.724000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139613264613062613965383761643837643531633163666466303038 Jul 2 00:46:22.724000 audit[5411]: AVC avc: denied { bpf } for pid=5411 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:22.724000 audit[5411]: AVC avc: denied { bpf } for pid=5411 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:22.724000 audit[5411]: AVC avc: denied { bpf } for pid=5411 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:22.724000 audit[5411]: AVC avc: denied { perfmon } for pid=5411 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:22.724000 audit[5411]: AVC avc: denied { perfmon } for pid=5411 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:22.724000 audit[5411]: AVC avc: denied { perfmon } for pid=5411 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:22.724000 audit[5411]: AVC avc: denied { perfmon } for pid=5411 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:22.724000 audit[5411]: AVC avc: denied { perfmon } for pid=5411 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:22.724000 audit[5411]: AVC avc: denied { bpf } for pid=5411 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:22.724000 audit[5411]: AVC avc: denied { bpf } for pid=5411 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:22.724000 audit: BPF prog-id=181 op=LOAD Jul 2 00:46:22.724000 audit[5411]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=5400 pid=5411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:46:22.724000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139613264613062613965383761643837643531633163666466303038 Jul 2 00:46:22.724000 audit[5411]: AVC avc: denied { bpf } for pid=5411 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:22.724000 audit[5411]: AVC avc: denied { bpf } for pid=5411 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:22.724000 audit[5411]: AVC avc: denied { perfmon } for pid=5411 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:22.724000 audit[5411]: AVC avc: denied { perfmon } for pid=5411 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:22.724000 audit[5411]: AVC avc: denied { perfmon } for pid=5411 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:22.724000 audit[5411]: AVC avc: denied { perfmon } for pid=5411 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:22.724000 audit[5411]: AVC avc: denied { perfmon } for pid=5411 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:22.724000 audit[5411]: AVC avc: denied { bpf } for pid=5411 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:22.724000 audit[5411]: AVC avc: denied { bpf } for pid=5411 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:22.724000 audit: BPF prog-id=182 op=LOAD Jul 2 00:46:22.724000 audit[5411]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=5400 pid=5411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:46:22.724000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139613264613062613965383761643837643531633163666466303038 Jul 2 00:46:22.724000 audit: BPF prog-id=182 op=UNLOAD Jul 2 00:46:22.724000 audit: BPF prog-id=181 op=UNLOAD Jul 2 00:46:22.724000 audit[5411]: AVC avc: denied { bpf } for pid=5411 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:22.724000 audit[5411]: AVC avc: denied { bpf } for pid=5411 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:22.724000 audit[5411]: AVC avc: denied { bpf } for pid=5411 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:22.724000 audit[5411]: AVC avc: denied { perfmon } for pid=5411 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:22.724000 audit[5411]: AVC avc: denied { perfmon } for pid=5411 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:22.724000 audit[5411]: AVC avc: denied { perfmon } for pid=5411 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:22.724000 audit[5411]: AVC avc: denied { perfmon } for pid=5411 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:22.724000 audit[5411]: AVC avc: denied { perfmon } for pid=5411 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:22.724000 audit[5411]: AVC avc: denied { bpf } for pid=5411 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:22.724000 audit[5411]: AVC avc: denied { bpf } for pid=5411 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:22.724000 audit: BPF prog-id=183 op=LOAD Jul 2 00:46:22.724000 audit[5411]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=5400 pid=5411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:46:22.724000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139613264613062613965383761643837643531633163666466303038 Jul 2 00:46:22.785362 env[1740]: time="2024-07-02T00:46:22.785290352Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6f7f594bb6-frbkn,Uid:e0658c98-db9b-4d1f-b931-0227a2de2e50,Namespace:calico-apiserver,Attempt:0,} returns sandbox id \"19a2da0ba9e87ad87d51c1cfdf0089e1af51941c58f8ce1a572eb975db3cb5f1\"" Jul 2 00:46:22.789247 env[1740]: time="2024-07-02T00:46:22.789189682Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.28.0\"" Jul 2 00:46:23.882378 systemd-networkd[1450]: cali4c1c7dcd612: Gained IPv6LL Jul 2 00:46:23.905000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.16.66:22-139.178.89.65:52038 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:46:23.906024 systemd[1]: Started sshd@21-172.31.16.66:22-139.178.89.65:52038.service. Jul 2 00:46:24.094000 audit[5435]: USER_ACCT pid=5435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:24.096595 sshd[5435]: Accepted publickey for core from 139.178.89.65 port 52038 ssh2: RSA SHA256:8y6JErBds/WgSuzw1b/2wKJnltsiajeNUW/adFCuF/s Jul 2 00:46:24.098000 audit[5435]: CRED_ACQ pid=5435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:24.098000 audit[5435]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeffe3ed0 a2=3 a3=1 items=0 ppid=1 pid=5435 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:46:24.098000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 00:46:24.100764 sshd[5435]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 00:46:24.109163 systemd-logind[1726]: New session 22 of user core. Jul 2 00:46:24.110997 systemd[1]: Started session-22.scope. Jul 2 00:46:24.120000 audit[5435]: USER_START pid=5435 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:24.123000 audit[5437]: CRED_ACQ pid=5437 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:24.405779 sshd[5435]: pam_unix(sshd:session): session closed for user core Jul 2 00:46:24.406000 audit[5435]: USER_END pid=5435 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:24.407000 audit[5435]: CRED_DISP pid=5435 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:24.411848 systemd-logind[1726]: Session 22 logged out. Waiting for processes to exit. Jul 2 00:46:24.412442 systemd[1]: session-22.scope: Deactivated successfully. Jul 2 00:46:24.415000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.16.66:22-139.178.89.65:52038 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:46:24.416300 systemd[1]: sshd@21-172.31.16.66:22-139.178.89.65:52038.service: Deactivated successfully. Jul 2 00:46:24.419053 systemd-logind[1726]: Removed session 22. Jul 2 00:46:25.479412 env[1740]: time="2024-07-02T00:46:25.478431462Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:46:25.485816 env[1740]: time="2024-07-02T00:46:25.483741385Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:cfbcd2d846bffa8495396cef27ce876ed8ebd8e36f660b8dd9326c1ff4d770ac,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:46:25.487920 env[1740]: time="2024-07-02T00:46:25.487848712Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:46:25.492567 env[1740]: time="2024-07-02T00:46:25.492489320Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:e8f124312a4c41451e51bfc00b6e98929e9eb0510905f3301542719a3e8d2fec,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 00:46:25.494487 env[1740]: time="2024-07-02T00:46:25.494403819Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.28.0\" returns image reference \"sha256:cfbcd2d846bffa8495396cef27ce876ed8ebd8e36f660b8dd9326c1ff4d770ac\"" Jul 2 00:46:25.503583 env[1740]: time="2024-07-02T00:46:25.503522640Z" level=info msg="CreateContainer within sandbox \"19a2da0ba9e87ad87d51c1cfdf0089e1af51941c58f8ce1a572eb975db3cb5f1\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 2 00:46:25.531194 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2113906579.mount: Deactivated successfully. Jul 2 00:46:25.536728 env[1740]: time="2024-07-02T00:46:25.536565442Z" level=info msg="CreateContainer within sandbox \"19a2da0ba9e87ad87d51c1cfdf0089e1af51941c58f8ce1a572eb975db3cb5f1\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"8f7f5491ffe446f780a38ac474a0d315d9d42da2175ee27ca54ccbc98f47f3a0\"" Jul 2 00:46:25.540553 env[1740]: time="2024-07-02T00:46:25.540441072Z" level=info msg="StartContainer for \"8f7f5491ffe446f780a38ac474a0d315d9d42da2175ee27ca54ccbc98f47f3a0\"" Jul 2 00:46:25.596942 systemd[1]: Started cri-containerd-8f7f5491ffe446f780a38ac474a0d315d9d42da2175ee27ca54ccbc98f47f3a0.scope. Jul 2 00:46:25.617757 systemd[1]: run-containerd-runc-k8s.io-8f7f5491ffe446f780a38ac474a0d315d9d42da2175ee27ca54ccbc98f47f3a0-runc.A0deu2.mount: Deactivated successfully. Jul 2 00:46:25.659000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:25.660000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:25.660000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:25.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:25.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:25.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:25.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:25.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:25.660000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:25.661000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:25.661000 audit: BPF prog-id=184 op=LOAD Jul 2 00:46:25.663000 audit[5456]: AVC avc: denied { bpf } for pid=5456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:25.663000 audit[5456]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400014fb38 a2=10 a3=0 items=0 ppid=5400 pid=5456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:46:25.663000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866376635343931666665343436663738306133386163343734613064 Jul 2 00:46:25.664000 audit[5456]: AVC avc: denied { perfmon } for pid=5456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:25.664000 audit[5456]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400014f5a0 a2=3c a3=0 items=0 ppid=5400 pid=5456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:46:25.664000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866376635343931666665343436663738306133386163343734613064 Jul 2 00:46:25.665000 audit[5456]: AVC avc: denied { bpf } for pid=5456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:25.665000 audit[5456]: AVC avc: denied { bpf } for pid=5456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:25.665000 audit[5456]: AVC avc: denied { bpf } for pid=5456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:25.665000 audit[5456]: AVC avc: denied { perfmon } for pid=5456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:25.665000 audit[5456]: AVC avc: denied { perfmon } for pid=5456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:25.665000 audit[5456]: AVC avc: denied { perfmon } for pid=5456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:25.665000 audit[5456]: AVC avc: denied { perfmon } for pid=5456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:25.665000 audit[5456]: AVC avc: denied { perfmon } for pid=5456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:25.665000 audit[5456]: AVC avc: denied { bpf } for pid=5456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:25.665000 audit[5456]: AVC avc: denied { bpf } for pid=5456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:25.665000 audit: BPF prog-id=185 op=LOAD Jul 2 00:46:25.665000 audit[5456]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014f8e0 a2=78 a3=0 items=0 ppid=5400 pid=5456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:46:25.665000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866376635343931666665343436663738306133386163343734613064 Jul 2 00:46:25.667000 audit[5456]: AVC avc: denied { bpf } for pid=5456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:25.667000 audit[5456]: AVC avc: denied { bpf } for pid=5456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:25.667000 audit[5456]: AVC avc: denied { perfmon } for pid=5456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:25.667000 audit[5456]: AVC avc: denied { perfmon } for pid=5456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:25.667000 audit[5456]: AVC avc: denied { perfmon } for pid=5456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:25.667000 audit[5456]: AVC avc: denied { perfmon } for pid=5456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:25.667000 audit[5456]: AVC avc: denied { perfmon } for pid=5456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:25.667000 audit[5456]: AVC avc: denied { bpf } for pid=5456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:25.667000 audit[5456]: AVC avc: denied { bpf } for pid=5456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:25.667000 audit: BPF prog-id=186 op=LOAD Jul 2 00:46:25.667000 audit[5456]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400014f670 a2=78 a3=0 items=0 ppid=5400 pid=5456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:46:25.667000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866376635343931666665343436663738306133386163343734613064 Jul 2 00:46:25.680000 audit: BPF prog-id=186 op=UNLOAD Jul 2 00:46:25.681000 audit: BPF prog-id=185 op=UNLOAD Jul 2 00:46:25.681000 audit[5456]: AVC avc: denied { bpf } for pid=5456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:25.681000 audit[5456]: AVC avc: denied { bpf } for pid=5456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:25.681000 audit[5456]: AVC avc: denied { bpf } for pid=5456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:25.681000 audit[5456]: AVC avc: denied { perfmon } for pid=5456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:25.681000 audit[5456]: AVC avc: denied { perfmon } for pid=5456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:25.681000 audit[5456]: AVC avc: denied { perfmon } for pid=5456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:25.681000 audit[5456]: AVC avc: denied { perfmon } for pid=5456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:25.681000 audit[5456]: AVC avc: denied { perfmon } for pid=5456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:25.681000 audit[5456]: AVC avc: denied { bpf } for pid=5456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:25.681000 audit[5456]: AVC avc: denied { bpf } for pid=5456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:46:25.681000 audit: BPF prog-id=187 op=LOAD Jul 2 00:46:25.681000 audit[5456]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014fb40 a2=78 a3=0 items=0 ppid=5400 pid=5456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:46:25.681000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866376635343931666665343436663738306133386163343734613064 Jul 2 00:46:25.741919 env[1740]: time="2024-07-02T00:46:25.741764750Z" level=info msg="StartContainer for \"8f7f5491ffe446f780a38ac474a0d315d9d42da2175ee27ca54ccbc98f47f3a0\" returns successfully" Jul 2 00:46:26.176000 audit[5487]: NETFILTER_CFG table=filter:120 family=2 entries=22 op=nft_register_rule pid=5487 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 00:46:26.176000 audit[5487]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3676 a0=3 a1=ffffee52b500 a2=0 a3=1 items=0 ppid=3068 pid=5487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:46:26.176000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 00:46:26.182000 audit[5487]: NETFILTER_CFG table=nat:121 family=2 entries=104 op=nft_register_chain pid=5487 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 00:46:26.182000 audit[5487]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=48684 a0=3 a1=ffffee52b500 a2=0 a3=1 items=0 ppid=3068 pid=5487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:46:26.182000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 00:46:26.478000 audit[5490]: NETFILTER_CFG table=filter:122 family=2 entries=10 op=nft_register_rule pid=5490 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 00:46:26.478000 audit[5490]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3676 a0=3 a1=ffffc1f08e40 a2=0 a3=1 items=0 ppid=3068 pid=5490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:46:26.478000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 00:46:26.483000 audit[5490]: NETFILTER_CFG table=nat:123 family=2 entries=44 op=nft_register_rule pid=5490 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 00:46:26.483000 audit[5490]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14988 a0=3 a1=ffffc1f08e40 a2=0 a3=1 items=0 ppid=3068 pid=5490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:46:26.483000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 00:46:27.109549 kernel: kauditd_printk_skb: 142 callbacks suppressed Jul 2 00:46:27.109740 kernel: audit: type=1400 audit(1719881187.097:1394): avc: denied { watch } for pid=5467 comm="apiserver" path="/calico-apiserver-certs/..2024_07_02_00_46_22.346527740/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c487 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c47,c487 tclass=file permissive=0 Jul 2 00:46:27.097000 audit[5467]: AVC avc: denied { watch } for pid=5467 comm="apiserver" path="/calico-apiserver-certs/..2024_07_02_00_46_22.346527740/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c487 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c47,c487 tclass=file permissive=0 Jul 2 00:46:27.097000 audit[5467]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40000ebc60 a2=fc6 a3=0 items=0 ppid=5400 pid=5467 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c487 key=(null) Jul 2 00:46:27.097000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 2 00:46:27.134653 kernel: audit: type=1300 audit(1719881187.097:1394): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40000ebc60 a2=fc6 a3=0 items=0 ppid=5400 pid=5467 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c487 key=(null) Jul 2 00:46:27.134822 kernel: audit: type=1327 audit(1719881187.097:1394): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 2 00:46:27.163946 kubelet[2892]: I0702 00:46:27.163891 2892 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-6f7f594bb6-frbkn" podStartSLOduration=3.456624542 podCreationTimestamp="2024-07-02 00:46:21 +0000 UTC" firstStartedPulling="2024-07-02 00:46:22.787890101 +0000 UTC m=+98.469160822" lastFinishedPulling="2024-07-02 00:46:25.495091326 +0000 UTC m=+101.176362059" observedRunningTime="2024-07-02 00:46:26.444434164 +0000 UTC m=+102.125704921" watchObservedRunningTime="2024-07-02 00:46:27.163825779 +0000 UTC m=+102.845096500" Jul 2 00:46:27.214000 audit[5493]: NETFILTER_CFG table=filter:124 family=2 entries=9 op=nft_register_rule pid=5493 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 00:46:27.222192 kernel: audit: type=1325 audit(1719881187.214:1395): table=filter:124 family=2 entries=9 op=nft_register_rule pid=5493 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 00:46:27.214000 audit[5493]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2932 a0=3 a1=ffffc86f5f80 a2=0 a3=1 items=0 ppid=3068 pid=5493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:46:27.214000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 00:46:27.238157 kernel: audit: type=1300 audit(1719881187.214:1395): arch=c00000b7 syscall=211 success=yes exit=2932 a0=3 a1=ffffc86f5f80 a2=0 a3=1 items=0 ppid=3068 pid=5493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:46:27.238319 kernel: audit: type=1327 audit(1719881187.214:1395): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 00:46:27.231000 audit[5493]: NETFILTER_CFG table=nat:125 family=2 entries=51 op=nft_register_chain pid=5493 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 00:46:27.231000 audit[5493]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=18564 a0=3 a1=ffffc86f5f80 a2=0 a3=1 items=0 ppid=3068 pid=5493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:46:27.256962 kernel: audit: type=1325 audit(1719881187.231:1396): table=nat:125 family=2 entries=51 op=nft_register_chain pid=5493 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 00:46:27.257114 kernel: audit: type=1300 audit(1719881187.231:1396): arch=c00000b7 syscall=211 success=yes exit=18564 a0=3 a1=ffffc86f5f80 a2=0 a3=1 items=0 ppid=3068 pid=5493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:46:27.231000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 00:46:27.262252 kernel: audit: type=1327 audit(1719881187.231:1396): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 00:46:29.163000 audit[5502]: NETFILTER_CFG table=filter:126 family=2 entries=8 op=nft_register_rule pid=5502 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 00:46:29.163000 audit[5502]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2932 a0=3 a1=ffffde13e420 a2=0 a3=1 items=0 ppid=3068 pid=5502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:46:29.163000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 00:46:29.171206 kernel: audit: type=1325 audit(1719881189.163:1397): table=filter:126 family=2 entries=8 op=nft_register_rule pid=5502 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 00:46:29.164000 audit[5502]: NETFILTER_CFG table=nat:127 family=2 entries=54 op=nft_register_rule pid=5502 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 00:46:29.164000 audit[5502]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=18564 a0=3 a1=ffffde13e420 a2=0 a3=1 items=0 ppid=3068 pid=5502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:46:29.164000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 00:46:29.438000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.16.66:22-139.178.89.65:60998 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:46:29.439352 systemd[1]: Started sshd@22-172.31.16.66:22-139.178.89.65:60998.service. Jul 2 00:46:29.623676 sshd[5504]: Accepted publickey for core from 139.178.89.65 port 60998 ssh2: RSA SHA256:8y6JErBds/WgSuzw1b/2wKJnltsiajeNUW/adFCuF/s Jul 2 00:46:29.622000 audit[5504]: USER_ACCT pid=5504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:29.625000 audit[5504]: CRED_ACQ pid=5504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:29.625000 audit[5504]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe8c693a0 a2=3 a3=1 items=0 ppid=1 pid=5504 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:46:29.625000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 00:46:29.627596 sshd[5504]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 00:46:29.638000 systemd-logind[1726]: New session 23 of user core. Jul 2 00:46:29.638149 systemd[1]: Started session-23.scope. Jul 2 00:46:29.653000 audit[5504]: USER_START pid=5504 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:29.656000 audit[5506]: CRED_ACQ pid=5506 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:29.992761 sshd[5504]: pam_unix(sshd:session): session closed for user core Jul 2 00:46:29.994000 audit[5504]: USER_END pid=5504 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:29.995000 audit[5504]: CRED_DISP pid=5504 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:29.998341 systemd[1]: session-23.scope: Deactivated successfully. Jul 2 00:46:30.000323 systemd-logind[1726]: Session 23 logged out. Waiting for processes to exit. Jul 2 00:46:30.000959 systemd[1]: sshd@22-172.31.16.66:22-139.178.89.65:60998.service: Deactivated successfully. Jul 2 00:46:30.000000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.16.66:22-139.178.89.65:60998 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:46:30.004993 systemd-logind[1726]: Removed session 23. Jul 2 00:46:35.025839 systemd[1]: Started sshd@23-172.31.16.66:22-139.178.89.65:32780.service. Jul 2 00:46:35.036261 kernel: kauditd_printk_skb: 16 callbacks suppressed Jul 2 00:46:35.036373 kernel: audit: type=1130 audit(1719881195.025:1408): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.16.66:22-139.178.89.65:32780 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:46:35.025000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.16.66:22-139.178.89.65:32780 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:46:35.210000 audit[5520]: USER_ACCT pid=5520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:35.211840 sshd[5520]: Accepted publickey for core from 139.178.89.65 port 32780 ssh2: RSA SHA256:8y6JErBds/WgSuzw1b/2wKJnltsiajeNUW/adFCuF/s Jul 2 00:46:35.221269 kernel: audit: type=1101 audit(1719881195.210:1409): pid=5520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:35.228000 audit[5520]: CRED_ACQ pid=5520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:35.231283 sshd[5520]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 00:46:35.242414 kernel: audit: type=1103 audit(1719881195.228:1410): pid=5520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:35.242850 kernel: audit: type=1006 audit(1719881195.229:1411): pid=5520 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Jul 2 00:46:35.242928 kernel: audit: type=1300 audit(1719881195.229:1411): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd20abd20 a2=3 a3=1 items=0 ppid=1 pid=5520 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:46:35.229000 audit[5520]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd20abd20 a2=3 a3=1 items=0 ppid=1 pid=5520 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:46:35.229000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 00:46:35.254746 kernel: audit: type=1327 audit(1719881195.229:1411): proctitle=737368643A20636F7265205B707269765D Jul 2 00:46:35.258989 systemd-logind[1726]: New session 24 of user core. Jul 2 00:46:35.260046 systemd[1]: Started session-24.scope. Jul 2 00:46:35.269000 audit[5520]: USER_START pid=5520 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:35.272000 audit[5522]: CRED_ACQ pid=5522 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:35.288130 kernel: audit: type=1105 audit(1719881195.269:1412): pid=5520 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:35.288254 kernel: audit: type=1103 audit(1719881195.272:1413): pid=5522 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:35.512519 sshd[5520]: pam_unix(sshd:session): session closed for user core Jul 2 00:46:35.513000 audit[5520]: USER_END pid=5520 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:35.515000 audit[5520]: CRED_DISP pid=5520 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:35.532950 kernel: audit: type=1106 audit(1719881195.513:1414): pid=5520 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:35.533160 kernel: audit: type=1104 audit(1719881195.515:1415): pid=5520 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:35.525221 systemd[1]: sshd@23-172.31.16.66:22-139.178.89.65:32780.service: Deactivated successfully. Jul 2 00:46:35.526570 systemd[1]: session-24.scope: Deactivated successfully. Jul 2 00:46:35.523000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.16.66:22-139.178.89.65:32780 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:46:35.534429 systemd-logind[1726]: Session 24 logged out. Waiting for processes to exit. Jul 2 00:46:35.536940 systemd-logind[1726]: Removed session 24. Jul 2 00:46:39.366000 audit[2578]: AVC avc: denied { watch } for pid=2578 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6358 scontext=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 00:46:39.366000 audit[2578]: AVC avc: denied { watch } for pid=2578 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6343 scontext=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 00:46:39.366000 audit[2578]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400169a150 a2=fc6 a3=0 items=0 ppid=2451 pid=2578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 key=(null) Jul 2 00:46:39.366000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 00:46:39.366000 audit[2578]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001260740 a2=fc6 a3=0 items=0 ppid=2451 pid=2578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 key=(null) Jul 2 00:46:39.366000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 00:46:40.009000 audit[2586]: AVC avc: denied { watch } for pid=2586 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=6345 scontext=system_u:system_r:svirt_lxc_net_t:s0:c247,c463 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 00:46:40.009000 audit[2586]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=72 a1=40140b00c0 a2=fc6 a3=0 items=0 ppid=2409 pid=2586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c247,c463 key=(null) Jul 2 00:46:40.009000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3636002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 00:46:40.013000 audit[2586]: AVC avc: denied { watch } for pid=2586 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6343 scontext=system_u:system_r:svirt_lxc_net_t:s0:c247,c463 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 00:46:40.013000 audit[2586]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=72 a1=40122edd20 a2=fc6 a3=0 items=0 ppid=2409 pid=2586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c247,c463 key=(null) Jul 2 00:46:40.013000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3636002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 00:46:40.015000 audit[2586]: AVC avc: denied { watch } for pid=2586 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6358 scontext=system_u:system_r:svirt_lxc_net_t:s0:c247,c463 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 00:46:40.015000 audit[2586]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=72 a1=40129b6db0 a2=fc6 a3=0 items=0 ppid=2409 pid=2586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c247,c463 key=(null) Jul 2 00:46:40.015000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3636002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 00:46:40.027000 audit[2586]: AVC avc: denied { watch } for pid=2586 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=6360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c247,c463 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 00:46:40.030243 kernel: kauditd_printk_skb: 16 callbacks suppressed Jul 2 00:46:40.030378 kernel: audit: type=1400 audit(1719881200.027:1422): avc: denied { watch } for pid=2586 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=6360 scontext=system_u:system_r:svirt_lxc_net_t:s0:c247,c463 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 00:46:40.027000 audit[2586]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=72 a1=40129b6e40 a2=fc6 a3=0 items=0 ppid=2409 pid=2586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c247,c463 key=(null) Jul 2 00:46:40.049103 kernel: audit: type=1300 audit(1719881200.027:1422): arch=c00000b7 syscall=27 success=no exit=-13 a0=72 a1=40129b6e40 a2=fc6 a3=0 items=0 ppid=2409 pid=2586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c247,c463 key=(null) Jul 2 00:46:40.049255 kernel: audit: type=1327 audit(1719881200.027:1422): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3636002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 00:46:40.027000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3636002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 00:46:40.061000 audit[2586]: AVC avc: denied { watch } for pid=2586 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6358 scontext=system_u:system_r:svirt_lxc_net_t:s0:c247,c463 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 00:46:40.061000 audit[2586]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=72 a1=40140b01e0 a2=fc6 a3=0 items=0 ppid=2409 pid=2586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c247,c463 key=(null) Jul 2 00:46:40.082354 kernel: audit: type=1400 audit(1719881200.061:1423): avc: denied { watch } for pid=2586 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6358 scontext=system_u:system_r:svirt_lxc_net_t:s0:c247,c463 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 00:46:40.082518 kernel: audit: type=1300 audit(1719881200.061:1423): arch=c00000b7 syscall=27 success=no exit=-13 a0=72 a1=40140b01e0 a2=fc6 a3=0 items=0 ppid=2409 pid=2586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c247,c463 key=(null) Jul 2 00:46:40.061000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3636002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 00:46:40.091575 kernel: audit: type=1327 audit(1719881200.061:1423): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3636002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 00:46:40.062000 audit[2586]: AVC avc: denied { watch } for pid=2586 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6343 scontext=system_u:system_r:svirt_lxc_net_t:s0:c247,c463 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 00:46:40.101304 kernel: audit: type=1400 audit(1719881200.062:1424): avc: denied { watch } for pid=2586 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6343 scontext=system_u:system_r:svirt_lxc_net_t:s0:c247,c463 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 00:46:40.101456 kernel: audit: type=1300 audit(1719881200.062:1424): arch=c00000b7 syscall=27 success=no exit=-13 a0=72 a1=4012580780 a2=fc6 a3=0 items=0 ppid=2409 pid=2586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c247,c463 key=(null) Jul 2 00:46:40.062000 audit[2586]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=72 a1=4012580780 a2=fc6 a3=0 items=0 ppid=2409 pid=2586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c247,c463 key=(null) Jul 2 00:46:40.062000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3636002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 00:46:40.120958 kernel: audit: type=1327 audit(1719881200.062:1424): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3636002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 00:46:40.544676 systemd[1]: Started sshd@24-172.31.16.66:22-139.178.89.65:43624.service. Jul 2 00:46:40.544000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.16.66:22-139.178.89.65:43624 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:46:40.562189 kernel: audit: type=1130 audit(1719881200.544:1425): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.16.66:22-139.178.89.65:43624 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:46:40.748691 sshd[5539]: Accepted publickey for core from 139.178.89.65 port 43624 ssh2: RSA SHA256:8y6JErBds/WgSuzw1b/2wKJnltsiajeNUW/adFCuF/s Jul 2 00:46:40.747000 audit[5539]: USER_ACCT pid=5539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:40.752326 sshd[5539]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 00:46:40.750000 audit[5539]: CRED_ACQ pid=5539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:40.750000 audit[5539]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffebc15d50 a2=3 a3=1 items=0 ppid=1 pid=5539 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:46:40.750000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 00:46:40.761025 systemd-logind[1726]: New session 25 of user core. Jul 2 00:46:40.763321 systemd[1]: Started session-25.scope. Jul 2 00:46:40.774000 audit[5539]: USER_START pid=5539 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:40.777000 audit[5541]: CRED_ACQ pid=5541 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:41.069068 sshd[5539]: pam_unix(sshd:session): session closed for user core Jul 2 00:46:41.070000 audit[5539]: USER_END pid=5539 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:41.070000 audit[5539]: CRED_DISP pid=5539 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:41.073757 systemd[1]: session-25.scope: Deactivated successfully. Jul 2 00:46:41.075553 systemd[1]: sshd@24-172.31.16.66:22-139.178.89.65:43624.service: Deactivated successfully. Jul 2 00:46:41.076039 systemd-logind[1726]: Session 25 logged out. Waiting for processes to exit. Jul 2 00:46:41.075000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.16.66:22-139.178.89.65:43624 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:46:41.079873 systemd-logind[1726]: Removed session 25. Jul 2 00:46:45.043188 kernel: kauditd_printk_skb: 10 callbacks suppressed Jul 2 00:46:45.043383 kernel: audit: type=1400 audit(1719881205.039:1434): avc: denied { watch } for pid=2578 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6343 scontext=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 00:46:45.039000 audit[2578]: AVC avc: denied { watch } for pid=2578 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6343 scontext=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 00:46:45.039000 audit[2578]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000debe00 a2=fc6 a3=0 items=0 ppid=2451 pid=2578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 key=(null) Jul 2 00:46:45.060972 kernel: audit: type=1300 audit(1719881205.039:1434): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000debe00 a2=fc6 a3=0 items=0 ppid=2451 pid=2578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 key=(null) Jul 2 00:46:45.061170 kernel: audit: type=1327 audit(1719881205.039:1434): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 00:46:45.039000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 00:46:45.041000 audit[2578]: AVC avc: denied { watch } for pid=2578 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6343 scontext=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 00:46:45.078322 kernel: audit: type=1400 audit(1719881205.041:1435): avc: denied { watch } for pid=2578 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6343 scontext=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 00:46:45.078512 kernel: audit: type=1300 audit(1719881205.041:1435): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001260e00 a2=fc6 a3=0 items=0 ppid=2451 pid=2578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 key=(null) Jul 2 00:46:45.041000 audit[2578]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001260e00 a2=fc6 a3=0 items=0 ppid=2451 pid=2578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 key=(null) Jul 2 00:46:45.041000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 00:46:45.098840 kernel: audit: type=1327 audit(1719881205.041:1435): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 00:46:45.049000 audit[2578]: AVC avc: denied { watch } for pid=2578 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6343 scontext=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 00:46:45.107763 kernel: audit: type=1400 audit(1719881205.049:1436): avc: denied { watch } for pid=2578 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6343 scontext=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 00:46:45.049000 audit[2578]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000e08020 a2=fc6 a3=0 items=0 ppid=2451 pid=2578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 key=(null) Jul 2 00:46:45.120096 kernel: audit: type=1300 audit(1719881205.049:1436): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000e08020 a2=fc6 a3=0 items=0 ppid=2451 pid=2578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 key=(null) Jul 2 00:46:45.049000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 00:46:45.129743 kernel: audit: type=1327 audit(1719881205.049:1436): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 00:46:45.049000 audit[2578]: AVC avc: denied { watch } for pid=2578 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6343 scontext=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 00:46:45.138609 kernel: audit: type=1400 audit(1719881205.049:1437): avc: denied { watch } for pid=2578 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6343 scontext=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 00:46:45.049000 audit[2578]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000e08280 a2=fc6 a3=0 items=0 ppid=2451 pid=2578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 key=(null) Jul 2 00:46:45.049000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 00:46:46.099700 systemd[1]: Started sshd@25-172.31.16.66:22-139.178.89.65:43632.service. Jul 2 00:46:46.102000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.16.66:22-139.178.89.65:43632 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:46:46.278000 audit[5555]: USER_ACCT pid=5555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:46.280073 sshd[5555]: Accepted publickey for core from 139.178.89.65 port 43632 ssh2: RSA SHA256:8y6JErBds/WgSuzw1b/2wKJnltsiajeNUW/adFCuF/s Jul 2 00:46:46.281000 audit[5555]: CRED_ACQ pid=5555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:46.282000 audit[5555]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffaff0770 a2=3 a3=1 items=0 ppid=1 pid=5555 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:46:46.282000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 00:46:46.284483 sshd[5555]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 00:46:46.292533 systemd-logind[1726]: New session 26 of user core. Jul 2 00:46:46.294540 systemd[1]: Started session-26.scope. Jul 2 00:46:46.306000 audit[5555]: USER_START pid=5555 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:46.309000 audit[5557]: CRED_ACQ pid=5557 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:46.601871 sshd[5555]: pam_unix(sshd:session): session closed for user core Jul 2 00:46:46.603000 audit[5555]: USER_END pid=5555 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:46.603000 audit[5555]: CRED_DISP pid=5555 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:46.606964 systemd[1]: session-26.scope: Deactivated successfully. Jul 2 00:46:46.608807 systemd[1]: sshd@25-172.31.16.66:22-139.178.89.65:43632.service: Deactivated successfully. Jul 2 00:46:46.608000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.16.66:22-139.178.89.65:43632 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:46:46.610863 systemd-logind[1726]: Session 26 logged out. Waiting for processes to exit. Jul 2 00:46:46.613376 systemd-logind[1726]: Removed session 26. Jul 2 00:46:48.269609 systemd[1]: run-containerd-runc-k8s.io-56cf5c61a0c377c3c98f96c1cbe98fef4a7120137ff312e36ee615cf90d26d1d-runc.C4NNMz.mount: Deactivated successfully. Jul 2 00:46:50.417004 systemd[1]: run-containerd-runc-k8s.io-9c0311e3f2d0b993a22028e0710151169abd9c59531ba19dec93c0223afea1b1-runc.w7Mi6O.mount: Deactivated successfully. Jul 2 00:46:51.631000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.16.66:22-139.178.89.65:59498 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:46:51.632633 systemd[1]: Started sshd@26-172.31.16.66:22-139.178.89.65:59498.service. Jul 2 00:46:51.635161 kernel: kauditd_printk_skb: 13 callbacks suppressed Jul 2 00:46:51.635282 kernel: audit: type=1130 audit(1719881211.631:1447): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.16.66:22-139.178.89.65:59498 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:46:51.822000 audit[5615]: USER_ACCT pid=5615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:51.824365 sshd[5615]: Accepted publickey for core from 139.178.89.65 port 59498 ssh2: RSA SHA256:8y6JErBds/WgSuzw1b/2wKJnltsiajeNUW/adFCuF/s Jul 2 00:46:51.833000 audit[5615]: CRED_ACQ pid=5615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:51.836371 sshd[5615]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 00:46:51.843245 kernel: audit: type=1101 audit(1719881211.822:1448): pid=5615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:51.843386 kernel: audit: type=1103 audit(1719881211.833:1449): pid=5615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:51.849509 kernel: audit: type=1006 audit(1719881211.834:1450): pid=5615 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Jul 2 00:46:51.834000 audit[5615]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc732c0b0 a2=3 a3=1 items=0 ppid=1 pid=5615 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:46:51.859887 kernel: audit: type=1300 audit(1719881211.834:1450): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc732c0b0 a2=3 a3=1 items=0 ppid=1 pid=5615 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:46:51.834000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 00:46:51.865182 kernel: audit: type=1327 audit(1719881211.834:1450): proctitle=737368643A20636F7265205B707269765D Jul 2 00:46:51.865671 systemd-logind[1726]: New session 27 of user core. Jul 2 00:46:51.868354 systemd[1]: Started session-27.scope. Jul 2 00:46:51.885000 audit[5615]: USER_START pid=5615 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:51.896000 audit[5617]: CRED_ACQ pid=5617 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:51.909238 kernel: audit: type=1105 audit(1719881211.885:1451): pid=5615 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:51.909443 kernel: audit: type=1103 audit(1719881211.896:1452): pid=5617 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:52.211486 sshd[5615]: pam_unix(sshd:session): session closed for user core Jul 2 00:46:52.215000 audit[5615]: USER_END pid=5615 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:52.219069 systemd[1]: session-27.scope: Deactivated successfully. Jul 2 00:46:52.220276 systemd[1]: sshd@26-172.31.16.66:22-139.178.89.65:59498.service: Deactivated successfully. Jul 2 00:46:52.228050 systemd-logind[1726]: Session 27 logged out. Waiting for processes to exit. Jul 2 00:46:52.215000 audit[5615]: CRED_DISP pid=5615 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:52.234968 systemd-logind[1726]: Removed session 27. Jul 2 00:46:52.242774 kernel: audit: type=1106 audit(1719881212.215:1453): pid=5615 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:52.242934 kernel: audit: type=1104 audit(1719881212.215:1454): pid=5615 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:52.219000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.16.66:22-139.178.89.65:59498 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:46:57.237000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.16.66:22-139.178.89.65:59502 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:46:57.238349 systemd[1]: Started sshd@27-172.31.16.66:22-139.178.89.65:59502.service. Jul 2 00:46:57.242183 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 2 00:46:57.242361 kernel: audit: type=1130 audit(1719881217.237:1456): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.16.66:22-139.178.89.65:59502 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:46:57.419000 audit[5634]: USER_ACCT pid=5634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:57.423217 sshd[5634]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 00:46:57.424726 sshd[5634]: Accepted publickey for core from 139.178.89.65 port 59502 ssh2: RSA SHA256:8y6JErBds/WgSuzw1b/2wKJnltsiajeNUW/adFCuF/s Jul 2 00:46:57.421000 audit[5634]: CRED_ACQ pid=5634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:57.437599 kernel: audit: type=1101 audit(1719881217.419:1457): pid=5634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:57.437729 kernel: audit: type=1103 audit(1719881217.421:1458): pid=5634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:57.443490 kernel: audit: type=1006 audit(1719881217.421:1459): pid=5634 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Jul 2 00:46:57.421000 audit[5634]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd81e1520 a2=3 a3=1 items=0 ppid=1 pid=5634 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:46:57.421000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 00:46:57.454475 kernel: audit: type=1300 audit(1719881217.421:1459): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd81e1520 a2=3 a3=1 items=0 ppid=1 pid=5634 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:46:57.454589 kernel: audit: type=1327 audit(1719881217.421:1459): proctitle=737368643A20636F7265205B707269765D Jul 2 00:46:57.461574 systemd-logind[1726]: New session 28 of user core. Jul 2 00:46:57.465273 systemd[1]: Started session-28.scope. Jul 2 00:46:57.475000 audit[5634]: USER_START pid=5634 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:57.478000 audit[5638]: CRED_ACQ pid=5638 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:57.494558 kernel: audit: type=1105 audit(1719881217.475:1460): pid=5634 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:57.494656 kernel: audit: type=1103 audit(1719881217.478:1461): pid=5638 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:57.711317 sshd[5634]: pam_unix(sshd:session): session closed for user core Jul 2 00:46:57.712000 audit[5634]: USER_END pid=5634 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:57.717358 systemd[1]: session-28.scope: Deactivated successfully. Jul 2 00:46:57.718736 systemd[1]: sshd@27-172.31.16.66:22-139.178.89.65:59502.service: Deactivated successfully. Jul 2 00:46:57.725180 kernel: audit: type=1106 audit(1719881217.712:1462): pid=5634 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:57.713000 audit[5634]: CRED_DISP pid=5634 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:57.718000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.16.66:22-139.178.89.65:59502 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 00:46:57.734956 kernel: audit: type=1104 audit(1719881217.713:1463): pid=5634 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 00:46:57.734080 systemd-logind[1726]: Session 28 logged out. Waiting for processes to exit. Jul 2 00:46:57.737035 systemd-logind[1726]: Removed session 28. Jul 2 00:47:11.303049 systemd[1]: cri-containerd-8b362363a344fbefb5a16241d5c174d971674d94d18101ecf9b67aadde691fc3.scope: Deactivated successfully. Jul 2 00:47:11.303680 systemd[1]: cri-containerd-8b362363a344fbefb5a16241d5c174d971674d94d18101ecf9b67aadde691fc3.scope: Consumed 5.176s CPU time. Jul 2 00:47:11.321301 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 2 00:47:11.321444 kernel: audit: type=1334 audit(1719881231.313:1465): prog-id=80 op=UNLOAD Jul 2 00:47:11.321503 kernel: audit: type=1334 audit(1719881231.313:1466): prog-id=93 op=UNLOAD Jul 2 00:47:11.313000 audit: BPF prog-id=80 op=UNLOAD Jul 2 00:47:11.313000 audit: BPF prog-id=93 op=UNLOAD Jul 2 00:47:11.356356 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-8b362363a344fbefb5a16241d5c174d971674d94d18101ecf9b67aadde691fc3-rootfs.mount: Deactivated successfully. Jul 2 00:47:11.360394 env[1740]: time="2024-07-02T00:47:11.360324167Z" level=info msg="shim disconnected" id=8b362363a344fbefb5a16241d5c174d971674d94d18101ecf9b67aadde691fc3 Jul 2 00:47:11.360970 env[1740]: time="2024-07-02T00:47:11.360395640Z" level=warning msg="cleaning up after shim disconnected" id=8b362363a344fbefb5a16241d5c174d971674d94d18101ecf9b67aadde691fc3 namespace=k8s.io Jul 2 00:47:11.360970 env[1740]: time="2024-07-02T00:47:11.360425533Z" level=info msg="cleaning up dead shim" Jul 2 00:47:11.376360 env[1740]: time="2024-07-02T00:47:11.376274858Z" level=warning msg="cleanup warnings time=\"2024-07-02T00:47:11Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5701 runtime=io.containerd.runc.v2\n" Jul 2 00:47:11.416002 systemd[1]: cri-containerd-e5d538d0ece0bd42f2a238b3dc25737c19cb2716eecad1bc1a538c48a10a53b8.scope: Deactivated successfully. Jul 2 00:47:11.416626 systemd[1]: cri-containerd-e5d538d0ece0bd42f2a238b3dc25737c19cb2716eecad1bc1a538c48a10a53b8.scope: Consumed 12.444s CPU time. Jul 2 00:47:11.415000 audit: BPF prog-id=117 op=UNLOAD Jul 2 00:47:11.419000 audit: BPF prog-id=120 op=UNLOAD Jul 2 00:47:11.423712 kernel: audit: type=1334 audit(1719881231.415:1467): prog-id=117 op=UNLOAD Jul 2 00:47:11.423851 kernel: audit: type=1334 audit(1719881231.419:1468): prog-id=120 op=UNLOAD Jul 2 00:47:11.458381 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-e5d538d0ece0bd42f2a238b3dc25737c19cb2716eecad1bc1a538c48a10a53b8-rootfs.mount: Deactivated successfully. Jul 2 00:47:11.461593 env[1740]: time="2024-07-02T00:47:11.461494416Z" level=info msg="shim disconnected" id=e5d538d0ece0bd42f2a238b3dc25737c19cb2716eecad1bc1a538c48a10a53b8 Jul 2 00:47:11.461593 env[1740]: time="2024-07-02T00:47:11.461566070Z" level=warning msg="cleaning up after shim disconnected" id=e5d538d0ece0bd42f2a238b3dc25737c19cb2716eecad1bc1a538c48a10a53b8 namespace=k8s.io Jul 2 00:47:11.461859 env[1740]: time="2024-07-02T00:47:11.461604315Z" level=info msg="cleaning up dead shim" Jul 2 00:47:11.476359 env[1740]: time="2024-07-02T00:47:11.476288944Z" level=warning msg="cleanup warnings time=\"2024-07-02T00:47:11Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5727 runtime=io.containerd.runc.v2\n" Jul 2 00:47:11.571300 kubelet[2892]: I0702 00:47:11.571110 2892 scope.go:117] "RemoveContainer" containerID="e5d538d0ece0bd42f2a238b3dc25737c19cb2716eecad1bc1a538c48a10a53b8" Jul 2 00:47:11.576186 env[1740]: time="2024-07-02T00:47:11.576071606Z" level=info msg="CreateContainer within sandbox \"cb957b259f73b5bc828d4de625ee3182bc747598cc1633a0ddfaf6b02213697f\" for container &ContainerMetadata{Name:tigera-operator,Attempt:1,}" Jul 2 00:47:11.576972 kubelet[2892]: I0702 00:47:11.576921 2892 scope.go:117] "RemoveContainer" containerID="8b362363a344fbefb5a16241d5c174d971674d94d18101ecf9b67aadde691fc3" Jul 2 00:47:11.583492 env[1740]: time="2024-07-02T00:47:11.583416776Z" level=info msg="CreateContainer within sandbox \"283ba9d2d1a809f23b09dc04d4b0ba14d51e1c9755401458cf42c317e947e704\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Jul 2 00:47:11.606935 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount866888519.mount: Deactivated successfully. Jul 2 00:47:11.632411 env[1740]: time="2024-07-02T00:47:11.632348213Z" level=info msg="CreateContainer within sandbox \"283ba9d2d1a809f23b09dc04d4b0ba14d51e1c9755401458cf42c317e947e704\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"bb10ff9740ca63d523a65a619fceebdeef18cf12389f0305dbdaea2efb24b305\"" Jul 2 00:47:11.633550 env[1740]: time="2024-07-02T00:47:11.633490505Z" level=info msg="StartContainer for \"bb10ff9740ca63d523a65a619fceebdeef18cf12389f0305dbdaea2efb24b305\"" Jul 2 00:47:11.639347 env[1740]: time="2024-07-02T00:47:11.639280564Z" level=info msg="CreateContainer within sandbox \"cb957b259f73b5bc828d4de625ee3182bc747598cc1633a0ddfaf6b02213697f\" for &ContainerMetadata{Name:tigera-operator,Attempt:1,} returns container id \"1deb1edf83e0894cd74af767b283469f47fdc1d6511769bb1671b7216fdd52e2\"" Jul 2 00:47:11.640538 env[1740]: time="2024-07-02T00:47:11.640489001Z" level=info msg="StartContainer for \"1deb1edf83e0894cd74af767b283469f47fdc1d6511769bb1671b7216fdd52e2\"" Jul 2 00:47:11.674073 systemd[1]: Started cri-containerd-bb10ff9740ca63d523a65a619fceebdeef18cf12389f0305dbdaea2efb24b305.scope. Jul 2 00:47:11.707248 systemd[1]: Started cri-containerd-1deb1edf83e0894cd74af767b283469f47fdc1d6511769bb1671b7216fdd52e2.scope. Jul 2 00:47:11.734000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.752406 kernel: audit: type=1400 audit(1719881231.734:1469): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.752588 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Jul 2 00:47:11.752651 kernel: audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 Jul 2 00:47:11.741000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.759197 kernel: audit: type=1400 audit(1719881231.741:1470): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.760775 kernel: audit: backlog limit exceeded Jul 2 00:47:11.760889 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Jul 2 00:47:11.741000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.741000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.741000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.741000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.741000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.741000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.741000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.741000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.741000 audit: BPF prog-id=188 op=LOAD Jul 2 00:47:11.742000 audit[5757]: AVC avc: denied { bpf } for pid=5757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.742000 audit[5757]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000147b38 a2=10 a3=0 items=0 ppid=2451 pid=5757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:47:11.742000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262313066663937343063613633643532336136356136313966636565 Jul 2 00:47:11.742000 audit[5757]: AVC avc: denied { perfmon } for pid=5757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.742000 audit[5757]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=2451 pid=5757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:47:11.742000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262313066663937343063613633643532336136356136313966636565 Jul 2 00:47:11.742000 audit[5757]: AVC avc: denied { bpf } for pid=5757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.742000 audit[5757]: AVC avc: denied { bpf } for pid=5757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.742000 audit[5757]: AVC avc: denied { bpf } for pid=5757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.742000 audit[5757]: AVC avc: denied { perfmon } for pid=5757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.742000 audit[5757]: AVC avc: denied { perfmon } for pid=5757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.742000 audit[5757]: AVC avc: denied { perfmon } for pid=5757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.742000 audit[5757]: AVC avc: denied { perfmon } for pid=5757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.742000 audit[5757]: AVC avc: denied { perfmon } for pid=5757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.742000 audit[5757]: AVC avc: denied { bpf } for pid=5757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.742000 audit[5757]: AVC avc: denied { bpf } for pid=5757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.742000 audit: BPF prog-id=189 op=LOAD Jul 2 00:47:11.742000 audit[5757]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=2451 pid=5757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:47:11.742000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262313066663937343063613633643532336136356136313966636565 Jul 2 00:47:11.743000 audit[5757]: AVC avc: denied { bpf } for pid=5757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.743000 audit[5757]: AVC avc: denied { bpf } for pid=5757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.743000 audit[5757]: AVC avc: denied { perfmon } for pid=5757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.743000 audit[5757]: AVC avc: denied { perfmon } for pid=5757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.743000 audit[5757]: AVC avc: denied { perfmon } for pid=5757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.743000 audit[5757]: AVC avc: denied { perfmon } for pid=5757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.743000 audit[5757]: AVC avc: denied { perfmon } for pid=5757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.743000 audit[5757]: AVC avc: denied { bpf } for pid=5757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.743000 audit[5757]: AVC avc: denied { bpf } for pid=5757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.743000 audit: BPF prog-id=190 op=LOAD Jul 2 00:47:11.743000 audit[5757]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=2451 pid=5757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:47:11.743000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262313066663937343063613633643532336136356136313966636565 Jul 2 00:47:11.743000 audit: BPF prog-id=190 op=UNLOAD Jul 2 00:47:11.743000 audit: BPF prog-id=189 op=UNLOAD Jul 2 00:47:11.743000 audit[5757]: AVC avc: denied { bpf } for pid=5757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.743000 audit[5757]: AVC avc: denied { bpf } for pid=5757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.743000 audit[5757]: AVC avc: denied { bpf } for pid=5757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.743000 audit[5757]: AVC avc: denied { perfmon } for pid=5757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.743000 audit[5757]: AVC avc: denied { perfmon } for pid=5757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.743000 audit[5757]: AVC avc: denied { perfmon } for pid=5757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.743000 audit[5757]: AVC avc: denied { perfmon } for pid=5757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.743000 audit[5757]: AVC avc: denied { perfmon } for pid=5757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.743000 audit[5757]: AVC avc: denied { bpf } for pid=5757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.743000 audit[5757]: AVC avc: denied { bpf } for pid=5757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.743000 audit: BPF prog-id=191 op=LOAD Jul 2 00:47:11.743000 audit[5757]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=2451 pid=5757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:47:11.743000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262313066663937343063613633643532336136356136313966636565 Jul 2 00:47:11.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.759000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.761000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.761000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.762000 audit: BPF prog-id=192 op=LOAD Jul 2 00:47:11.762000 audit[5760]: AVC avc: denied { bpf } for pid=5760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.762000 audit[5760]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2973 pid=5760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:47:11.762000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164656231656466383365303839346364373461663736376232383334 Jul 2 00:47:11.762000 audit[5760]: AVC avc: denied { perfmon } for pid=5760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.762000 audit[5760]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2973 pid=5760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:47:11.762000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164656231656466383365303839346364373461663736376232383334 Jul 2 00:47:11.764000 audit[5760]: AVC avc: denied { bpf } for pid=5760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.764000 audit[5760]: AVC avc: denied { bpf } for pid=5760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.764000 audit[5760]: AVC avc: denied { bpf } for pid=5760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.764000 audit[5760]: AVC avc: denied { perfmon } for pid=5760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.764000 audit[5760]: AVC avc: denied { perfmon } for pid=5760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.764000 audit[5760]: AVC avc: denied { perfmon } for pid=5760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.764000 audit[5760]: AVC avc: denied { perfmon } for pid=5760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.764000 audit[5760]: AVC avc: denied { perfmon } for pid=5760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.764000 audit[5760]: AVC avc: denied { bpf } for pid=5760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.764000 audit[5760]: AVC avc: denied { bpf } for pid=5760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.764000 audit: BPF prog-id=193 op=LOAD Jul 2 00:47:11.764000 audit[5760]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2973 pid=5760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:47:11.764000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164656231656466383365303839346364373461663736376232383334 Jul 2 00:47:11.764000 audit[5760]: AVC avc: denied { bpf } for pid=5760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.764000 audit[5760]: AVC avc: denied { bpf } for pid=5760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.764000 audit[5760]: AVC avc: denied { perfmon } for pid=5760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.764000 audit[5760]: AVC avc: denied { perfmon } for pid=5760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.764000 audit[5760]: AVC avc: denied { perfmon } for pid=5760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.764000 audit[5760]: AVC avc: denied { perfmon } for pid=5760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.764000 audit[5760]: AVC avc: denied { perfmon } for pid=5760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.764000 audit[5760]: AVC avc: denied { bpf } for pid=5760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.764000 audit[5760]: AVC avc: denied { bpf } for pid=5760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.764000 audit: BPF prog-id=194 op=LOAD Jul 2 00:47:11.764000 audit[5760]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2973 pid=5760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:47:11.764000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164656231656466383365303839346364373461663736376232383334 Jul 2 00:47:11.764000 audit: BPF prog-id=194 op=UNLOAD Jul 2 00:47:11.764000 audit: BPF prog-id=193 op=UNLOAD Jul 2 00:47:11.764000 audit[5760]: AVC avc: denied { bpf } for pid=5760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.764000 audit[5760]: AVC avc: denied { bpf } for pid=5760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.764000 audit[5760]: AVC avc: denied { bpf } for pid=5760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.764000 audit[5760]: AVC avc: denied { perfmon } for pid=5760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.764000 audit[5760]: AVC avc: denied { perfmon } for pid=5760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.764000 audit[5760]: AVC avc: denied { perfmon } for pid=5760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.764000 audit[5760]: AVC avc: denied { perfmon } for pid=5760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.764000 audit[5760]: AVC avc: denied { perfmon } for pid=5760 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.764000 audit[5760]: AVC avc: denied { bpf } for pid=5760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.764000 audit[5760]: AVC avc: denied { bpf } for pid=5760 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:11.764000 audit: BPF prog-id=195 op=LOAD Jul 2 00:47:11.764000 audit[5760]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2973 pid=5760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:47:11.764000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164656231656466383365303839346364373461663736376232383334 Jul 2 00:47:11.806545 env[1740]: time="2024-07-02T00:47:11.806444285Z" level=info msg="StartContainer for \"1deb1edf83e0894cd74af767b283469f47fdc1d6511769bb1671b7216fdd52e2\" returns successfully" Jul 2 00:47:11.829806 env[1740]: time="2024-07-02T00:47:11.829667378Z" level=info msg="StartContainer for \"bb10ff9740ca63d523a65a619fceebdeef18cf12389f0305dbdaea2efb24b305\" returns successfully" Jul 2 00:47:12.359547 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2503703593.mount: Deactivated successfully. Jul 2 00:47:14.468000 audit[5778]: AVC avc: denied { watch } for pid=5778 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6358 scontext=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 00:47:14.468000 audit[5778]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=400062bb00 a2=fc6 a3=0 items=0 ppid=2451 pid=5778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 key=(null) Jul 2 00:47:14.468000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 00:47:14.469000 audit[5778]: AVC avc: denied { watch } for pid=5778 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6343 scontext=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 00:47:14.469000 audit[5778]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000780ee0 a2=fc6 a3=0 items=0 ppid=2451 pid=5778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c351,c790 key=(null) Jul 2 00:47:14.469000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 00:47:16.222719 systemd[1]: cri-containerd-4c7bd3d304d07dfe3aaaa1c7ecd00934c14c6710376b26708fd15fe6cdf957ae.scope: Deactivated successfully. Jul 2 00:47:16.223321 systemd[1]: cri-containerd-4c7bd3d304d07dfe3aaaa1c7ecd00934c14c6710376b26708fd15fe6cdf957ae.scope: Consumed 2.578s CPU time. Jul 2 00:47:16.229000 audit: BPF prog-id=76 op=UNLOAD Jul 2 00:47:16.229000 audit: BPF prog-id=88 op=UNLOAD Jul 2 00:47:16.289204 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-4c7bd3d304d07dfe3aaaa1c7ecd00934c14c6710376b26708fd15fe6cdf957ae-rootfs.mount: Deactivated successfully. Jul 2 00:47:16.293904 env[1740]: time="2024-07-02T00:47:16.293538090Z" level=info msg="shim disconnected" id=4c7bd3d304d07dfe3aaaa1c7ecd00934c14c6710376b26708fd15fe6cdf957ae Jul 2 00:47:16.293904 env[1740]: time="2024-07-02T00:47:16.293628068Z" level=warning msg="cleaning up after shim disconnected" id=4c7bd3d304d07dfe3aaaa1c7ecd00934c14c6710376b26708fd15fe6cdf957ae namespace=k8s.io Jul 2 00:47:16.293904 env[1740]: time="2024-07-02T00:47:16.293651757Z" level=info msg="cleaning up dead shim" Jul 2 00:47:16.312947 env[1740]: time="2024-07-02T00:47:16.312888513Z" level=warning msg="cleanup warnings time=\"2024-07-02T00:47:16Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5830 runtime=io.containerd.runc.v2\n" Jul 2 00:47:16.603841 kubelet[2892]: I0702 00:47:16.603781 2892 scope.go:117] "RemoveContainer" containerID="4c7bd3d304d07dfe3aaaa1c7ecd00934c14c6710376b26708fd15fe6cdf957ae" Jul 2 00:47:16.608026 env[1740]: time="2024-07-02T00:47:16.607950062Z" level=info msg="CreateContainer within sandbox \"79146da4b8d2d86eabc5178d6f1a824139565649074d0544ff678cdc4e915ef9\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" Jul 2 00:47:16.636231 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount850188426.mount: Deactivated successfully. Jul 2 00:47:16.646602 env[1740]: time="2024-07-02T00:47:16.646542184Z" level=info msg="CreateContainer within sandbox \"79146da4b8d2d86eabc5178d6f1a824139565649074d0544ff678cdc4e915ef9\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"a68c78edfefc955406ba01b9f4e77e5a63db71fef3283b1a89a07adeb059cec0\"" Jul 2 00:47:16.647831 env[1740]: time="2024-07-02T00:47:16.647770048Z" level=info msg="StartContainer for \"a68c78edfefc955406ba01b9f4e77e5a63db71fef3283b1a89a07adeb059cec0\"" Jul 2 00:47:16.688734 systemd[1]: Started cri-containerd-a68c78edfefc955406ba01b9f4e77e5a63db71fef3283b1a89a07adeb059cec0.scope. Jul 2 00:47:16.745008 kernel: kauditd_printk_skb: 120 callbacks suppressed Jul 2 00:47:16.745224 kernel: audit: type=1400 audit(1719881236.735:1507): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:16.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:16.751854 kernel: audit: type=1400 audit(1719881236.740:1508): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:16.740000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:16.740000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:16.758842 kernel: audit: type=1400 audit(1719881236.740:1509): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:16.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:16.765930 kernel: audit: type=1400 audit(1719881236.740:1510): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:16.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:16.773030 kernel: audit: type=1400 audit(1719881236.740:1511): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:16.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:16.780386 kernel: audit: type=1400 audit(1719881236.740:1512): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:16.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:16.787412 kernel: audit: type=1400 audit(1719881236.740:1513): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:16.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:16.794166 kernel: audit: type=1400 audit(1719881236.740:1514): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:16.740000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:16.801038 kernel: audit: type=1400 audit(1719881236.740:1515): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:16.801250 kernel: audit: type=1400 audit(1719881236.743:1516): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:16.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:16.743000 audit: BPF prog-id=196 op=LOAD Jul 2 00:47:16.744000 audit[5851]: AVC avc: denied { bpf } for pid=5851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:16.744000 audit[5851]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2402 pid=5851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:47:16.744000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136386337386564666566633935353430366261303162396634653737 Jul 2 00:47:16.744000 audit[5851]: AVC avc: denied { perfmon } for pid=5851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:16.744000 audit[5851]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2402 pid=5851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:47:16.744000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136386337386564666566633935353430366261303162396634653737 Jul 2 00:47:16.744000 audit[5851]: AVC avc: denied { bpf } for pid=5851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:16.744000 audit[5851]: AVC avc: denied { bpf } for pid=5851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:16.744000 audit[5851]: AVC avc: denied { bpf } for pid=5851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:16.744000 audit[5851]: AVC avc: denied { perfmon } for pid=5851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:16.744000 audit[5851]: AVC avc: denied { perfmon } for pid=5851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:16.744000 audit[5851]: AVC avc: denied { perfmon } for pid=5851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:16.744000 audit[5851]: AVC avc: denied { perfmon } for pid=5851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:16.744000 audit[5851]: AVC avc: denied { perfmon } for pid=5851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:16.744000 audit[5851]: AVC avc: denied { bpf } for pid=5851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:16.744000 audit[5851]: AVC avc: denied { bpf } for pid=5851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:16.744000 audit: BPF prog-id=197 op=LOAD Jul 2 00:47:16.744000 audit[5851]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2402 pid=5851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:47:16.744000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136386337386564666566633935353430366261303162396634653737 Jul 2 00:47:16.751000 audit[5851]: AVC avc: denied { bpf } for pid=5851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:16.751000 audit[5851]: AVC avc: denied { bpf } for pid=5851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:16.751000 audit[5851]: AVC avc: denied { perfmon } for pid=5851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:16.751000 audit[5851]: AVC avc: denied { perfmon } for pid=5851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:16.751000 audit[5851]: AVC avc: denied { perfmon } for pid=5851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:16.751000 audit[5851]: AVC avc: denied { perfmon } for pid=5851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:16.751000 audit[5851]: AVC avc: denied { perfmon } for pid=5851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:16.751000 audit[5851]: AVC avc: denied { bpf } for pid=5851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:16.751000 audit[5851]: AVC avc: denied { bpf } for pid=5851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:16.751000 audit: BPF prog-id=198 op=LOAD Jul 2 00:47:16.751000 audit[5851]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2402 pid=5851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:47:16.751000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136386337386564666566633935353430366261303162396634653737 Jul 2 00:47:16.751000 audit: BPF prog-id=198 op=UNLOAD Jul 2 00:47:16.751000 audit: BPF prog-id=197 op=UNLOAD Jul 2 00:47:16.751000 audit[5851]: AVC avc: denied { bpf } for pid=5851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:16.751000 audit[5851]: AVC avc: denied { bpf } for pid=5851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:16.751000 audit[5851]: AVC avc: denied { bpf } for pid=5851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:16.751000 audit[5851]: AVC avc: denied { perfmon } for pid=5851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:16.751000 audit[5851]: AVC avc: denied { perfmon } for pid=5851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:16.751000 audit[5851]: AVC avc: denied { perfmon } for pid=5851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:16.751000 audit[5851]: AVC avc: denied { perfmon } for pid=5851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:16.751000 audit[5851]: AVC avc: denied { perfmon } for pid=5851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:16.751000 audit[5851]: AVC avc: denied { bpf } for pid=5851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:16.751000 audit[5851]: AVC avc: denied { bpf } for pid=5851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 00:47:16.751000 audit: BPF prog-id=199 op=LOAD Jul 2 00:47:16.751000 audit[5851]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2402 pid=5851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 00:47:16.751000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136386337386564666566633935353430366261303162396634653737 Jul 2 00:47:16.836344 env[1740]: time="2024-07-02T00:47:16.836269716Z" level=info msg="StartContainer for \"a68c78edfefc955406ba01b9f4e77e5a63db71fef3283b1a89a07adeb059cec0\" returns successfully" Jul 2 00:47:17.881494 kubelet[2892]: E0702 00:47:17.881411 2892 controller.go:193] "Failed to update lease" err="Put \"https://172.31.16.66:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-16-66?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Jul 2 00:47:18.275114 systemd[1]: run-containerd-runc-k8s.io-56cf5c61a0c377c3c98f96c1cbe98fef4a7120137ff312e36ee615cf90d26d1d-runc.Yy3rqd.mount: Deactivated successfully. Jul 2 00:47:27.110000 audit[5467]: AVC avc: denied { watch } for pid=5467 comm="apiserver" path="/calico-apiserver-certs/..2024_07_02_00_46_22.346527740/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c487 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c47,c487 tclass=file permissive=0 Jul 2 00:47:27.112739 kernel: kauditd_printk_skb: 47 callbacks suppressed Jul 2 00:47:27.112867 kernel: audit: type=1400 audit(1719881247.110:1525): avc: denied { watch } for pid=5467 comm="apiserver" path="/calico-apiserver-certs/..2024_07_02_00_46_22.346527740/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c487 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c47,c487 tclass=file permissive=0 Jul 2 00:47:27.110000 audit[5467]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=400167b800 a2=fc6 a3=0 items=0 ppid=5400 pid=5467 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c487 key=(null) Jul 2 00:47:27.132492 kernel: audit: type=1300 audit(1719881247.110:1525): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=400167b800 a2=fc6 a3=0 items=0 ppid=5400 pid=5467 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c47,c487 key=(null) Jul 2 00:47:27.132673 kernel: audit: type=1327 audit(1719881247.110:1525): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 2 00:47:27.110000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 2 00:47:27.882160 kubelet[2892]: E0702 00:47:27.882072 2892 controller.go:193] "Failed to update lease" err="Put \"https://172.31.16.66:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-16-66?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)"