ptables-restor" [ 113.245349] kauditd_printk_skb: 179 callbacks suppressed [ 113.245355] audit: type=1400 audit(1747120606.270:933): avc: denied { perfmon } for pid=2659 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 113.252163] audit: type=1300 audit(1747120606.270:933): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014d6b0 a2=3c a3=7f09e4214908 items=0 ppid=2484 pid=2659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 113.259824] audit: type=1327 audit(1747120606.270:933): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366623735356562363533333234313966306165393261363033316461 [ 113.267132] audit: type=1400 audit(1747120606.270:934): avc: denied { bpf } for pid=2659 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 113.272300] audit: type=1400 audit(1747120606.270:934): avc: denied { bpf } for pid=2659 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 113.277319] audit: type=1400 audit(1747120606.270:934): avc: denied { bpf } for pid=2659 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 113.284442] audit: type=1400 audit(1747120606.270:934): avc: denied { perfmon } for pid=2659 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 113.294430] audit: type=1400 audit(1747120606.270:934): avc: denied { perfmon } for pid=2659 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 113.300067] audit: type=1400 audit(1747120606.270:934): avc: denied { perfmon } for pid=2659 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 113.305015] audit: type=1400 audit(1747120606.270:934): avc: denied { perfmon } for pid=2659 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 121.599298] kauditd_printk_skb: 34 callbacks suppressed [ 121.599313] audit: type=1400 audit(1747120614.625:940): avc: denied { perfmon } for pid=2723 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 121.605272] audit: type=1300 audit(1747120614.625:940): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7fd5bc488f88 items=0 ppid=2484 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 121.612477] audit: type=1327 audit(1747120614.625:940): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238613839323062613330363634336232356365376136353830393564 [ 121.618954] audit: type=1400 audit(1747120614.626:941): avc: denied { bpf } for pid=2723 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 121.623614] audit: type=1400 audit(1747120614.626:941): avc: denied { bpf } for pid=2723 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 121.628825] audit: type=1400 audit(1747120614.626:941): avc: denied { bpf } for pid=2723 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 121.635332] audit: type=1400 audit(1747120614.626:941): avc: denied { perfmon } for pid=2723 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 121.640201] audit: type=1400 audit(1747120614.626:941): avc: denied { perfmon } for pid=2723 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 121.646016] audit: type=1400 audit(1747120614.626:941): avc: denied { perfmon } for pid=2723 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 121.650926] audit: type=1400 audit(1747120614.626:941): avc: denied { perfmon } for pid=2723 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 135.361797] kauditd_printk_skb: 40 callbacks suppressed [ 135.361810] audit: type=1400 audit(1747120628.387:949): avc: denied { perfmon } for pid=3108 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 135.367717] audit: type=1300 audit(1747120628.387:949): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001476b0 a2=3c a3=7f503c1eeb18 items=0 ppid=2484 pid=3108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 135.374791] audit: type=1327 audit(1747120628.387:949): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563373733346165386431346632366566653135613339666532336432 [ 135.381091] audit: type=1400 audit(1747120628.389:950): avc: denied { bpf } for pid=3108 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 135.385501] audit: type=1400 audit(1747120628.389:950): avc: denied { bpf } for pid=3108 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 135.389965] audit: type=1400 audit(1747120628.389:950): avc: denied { bpf } for pid=3108 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 135.394637] audit: type=1400 audit(1747120628.389:950): avc: denied { perfmon } for pid=3108 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 135.399373] audit: type=1400 audit(1747120628.389:950): avc: denied { perfmon } for pid=3108 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 135.404114] audit: type=1400 audit(1747120628.389:950): avc: denied { perfmon } for pid=3108 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 135.408733] audit: type=1400 audit(1747120628.389:950): avc: denied { perfmon } for pid=3108 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 135.513271] wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. [ 135.515233] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. [ 136.299796] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 136.301631] IPv6: ADDRCONF(NETDEV_CHANGE): calid7addcda960: link becomes ready [ 137.316073] IPv6: ADDRCONF(NETDEV_CHANGE): calif391510a370: link becomes ready [ 138.407038] IPv6: ADDRCONF(NETDEV_CHANGE): cali9e663d72b8e: link becomes ready [ 138.493583] IPv6: ADDRCONF(NETDEV_CHANGE): calie5af977373d: link becomes ready This is ci-3510-3-7-n-1a4ba3031a.novalocal (Linux x86_64 5.15.181-flatcar) 07:17:11 SSH host key: SHA256:rcbA8RKFxYQwvfjNMgFeHFG4a7IewoVSpx6daXRJUlE (ED25519) SSH host key: SHA256:WYIiR4+zaGVkXoWeCf1gHDVt4RBp/wlPRtUxjFhPNMU (ECDSA) SSH host key: SHA256:XcHymW6Ht5wE6xHjhitduZSI3JYLC5tOUDUzek2hgsA (RSA) eth0: 172.24.4.235 fe80::f816:3eff:fe34:cc79 ci-3510-3-7-n-1a4ba3031a login: This is ci-3510-3-7-n-1a4ba3031a.novalocal (Linux x86_64 5.15.181-flatcar) 07:17:12 SSH host key: SHA256:rcbA8RKFxYQwvfjNMgFeHFG4a7IewoVSpx6daXRJUlE (ED25519) SSH host key: SHA256:WYIiR4+zaGVkXoWeCf1gHDVt4RBp/wlPRtUxjFhPNMU (ECDSA) SSH host key: SHA256:XcHymW6Ht5wE6xHjhitduZSI3JYLC5tOUDUzek2hgsA (RSA) eth0: 172.24.4.235 fe80::f816:3eff:fe34:cc79 ci-3510-3-7-n-1a4ba3031a login: [ 140.351507] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 140.353242] IPv6: ADDRCONF(NETDEV_CHANGE): cali78bb033f1cc: link becomes ready [ 140.407632] kauditd_printk_skb: 900 callbacks suppressed [ 140.407636] audit: type=1325 audit(1747120633.433:1159): table=filter:107 family=2 entries=46 op=nft_register_chain pid=3994 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 140.422155] audit: type=1300 audit(1747120633.433:1159): arch=c000003e syscall=46 success=yes exit=23892 a0=3 a1=7ffe76c3dac0 a2=0 a3=7ffe76c3daac items=0 ppid=3336 pid=3994 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 140.433758] audit: type=1327 audit(1747120633.433:1159): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 [ 140.441026] IPv6: ADDRCONF(NETDEV_CHANGE): cali7d18a1fdf0e: link becomes ready [ 140.476843] audit: type=1400 audit(1747120633.502:1160): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 140.482179] audit: type=1400 audit(1747120633.502:1161): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 140.492554] audit: type=1400 audit(1747120633.502:1162): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 140.499570] audit: type=1400 audit(1747120633.502:1163): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 140.504824] audit: type=1400 audit(1747120633.502:1164): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 140.511977] audit: type=1400 audit(1747120633.502:1165): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 140.519579] audit: type=1400 audit(1747120633.502:1166): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 This is ci-3510-3-7-n-1a4ba3031a.novalocal (Linux x86_64 5.15.181-flatcar) 07:17:13 SSH host key: SHA256:rcbA8RKFxYQwvfjNMgFeHFG4a7IewoVSpx6daXRJUlE (ED25519) SSH host key: SHA256:WYIiR4+zaGVkXoWeCf1gHDVt4RBp/wlPRtUxjFhPNMU (ECDSA) SSH host key: SHA256:XcHymW6Ht5wE6xHjhitduZSI3JYLC5tOUDUzek2hgsA (RSA) eth0: 172.24.4.235 fe80::f816:3eff:fe34:cc79 ci-3510-3-7-n-1a4ba3031a login: This is ci-3510-3-7-n-1a4ba3031a.novalocal (Linux x86_64 5.15.181-flatcar) 07:17:14 SSH host key: SHA256:rcbA8RKFxYQwvfjNMgFeHFG4a7IewoVSpx6daXRJUlE (ED25519) SSH host key: SHA256:WYIiR4+zaGVkXoWeCf1gHDVt4RBp/wlPRtUxjFhPNMU (ECDSA) SSH host key: SHA256:XcHymW6Ht5wE6xHjhitduZSI3JYLC5tOUDUzek2hgsA (RSA) eth0: 172.24.4.235 fe80::f816:3eff:fe34:cc79 ci-3510-3-7-n-1a4ba3031a login: This is ci-3510-3-7-n-1a4ba3031a.novalocal (Linux x86_64 5.15.181-flatcar) 07:17:15 SSH host key: SHA256:rcbA8RKFxYQwvfjNMgFeHFG4a7IewoVSpx6daXRJUlE (ED25519) SSH host key: SHA256:WYIiR4+zaGVkXoWeCf1gHDVt4RBp/wlPRtUxjFhPNMU (ECDSA) SSH host key: SHA256:XcHymW6Ht5wE6xHjhitduZSI3JYLC5tOUDUzek2hgsA (RSA) eth0: 172.24.4.235 fe80::f816:3eff:fe34:cc79 ci-3510-3-7-n-1a4ba3031a login: This is ci-3510-3-7-n-1a4ba3031a.novalocal (Linux x86_64 5.15.181-flatcar) 07:17:16 SSH host key: SHA256:rcbA8RKFxYQwvfjNMgFeHFG4a7IewoVSpx6daXRJUlE (ED25519) SSH host key: SHA256:WYIiR4+zaGVkXoWeCf1gHDVt4RBp/wlPRtUxjFhPNMU (ECDSA) SSH host key: SHA256:XcHymW6Ht5wE6xHjhitduZSI3JYLC5tOUDUzek2hgsA (RSA) eth0: 172.24.4.235 fe80::f816:3eff:fe34:cc79 ci-3510-3-7-n-1a4ba3031a login: [ 150.129899] kauditd_printk_skb: 260 callbacks suppressed [ 150.131277] audit: type=1400 audit(1747120643.155:1245): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 150.135734] audit: type=1400 audit(1747120643.155:1246): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 150.140535] audit: type=1400 audit(1747120643.160:1247): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 150.144800] audit: type=1400 audit(1747120643.160:1248): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 150.149376] audit: type=1400 audit(1747120643.160:1249): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 150.154216] audit: type=1400 audit(1747120643.160:1250): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 150.158944] audit: type=1400 audit(1747120643.160:1251): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 150.163665] audit: type=1400 audit(1747120643.160:1252): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 150.168500] audit: type=1400 audit(1747120643.160:1253): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 150.173170] audit: type=1400 audit(1747120643.166:1254): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 [ 155.136675] kauditd_printk_skb: 162 callbacks suppressed [ 155.136695] audit: type=1400 audit(1747120648.162:1292): avc: denied { watch } for pid=4634 comm="apiserver" path="/calico-apiserver-certs/..2025_05_13_07_16_56.3875453543/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c109,c406 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c109,c406 tclass=file permissive=0 [ 155.147947] audit: type=1300 audit(1747120648.162:1292): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0014ad900 a2=fc6 a3=0 items=0 ppid=3989 pid=4634 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c109,c406 key=(null) [ 155.157943] audit: type=1327 audit(1747120648.162:1292): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 [ 155.204231] audit: type=1325 audit(1747120648.230:1293): table=filter:117 family=2 entries=9 op=nft_register_rule pid=4675 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 155.208318] audit: type=1300 audit(1747120648.230:1293): arch=c000003e syscall=46 success=yes exit=2932 a0=3 a1=7ffd7c7d6ce0 a2=0 a3=7ffd7c7d6ccc items=0 ppid=2172 pid=4675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 155.215954] audit: type=1327 audit(1747120648.230:1293): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 155.222793] audit: type=1325 audit(1747120648.248:1294): table=nat:118 family=2 entries=27 op=nft_register_chain pid=4675 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 155.230128] audit: type=1300 audit(1747120648.248:1294): arch=c000003e syscall=46 success=yes exit=9348 a0=3 a1=7ffd7c7d6ce0 a2=0 a3=7ffd7c7d6ccc items=0 ppid=2172 pid=4675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 155.241367] audit: type=1327 audit(1747120648.248:1294): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 156.968429] audit: type=1400 audit(1747120649.994:1295): avc: denied { watch } for pid=1901 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520973 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 177.387552] kauditd_printk_skb: 11 callbacks suppressed [ 177.387624] audit: type=1325 audit(1747120670.413:1299): table=filter:119 family=2 entries=8 op=nft_register_rule pid=4715 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 177.393212] audit: type=1300 audit(1747120670.413:1299): arch=c000003e syscall=46 success=yes exit=2932 a0=3 a1=7fff6712d340 a2=0 a3=7fff6712d32c items=0 ppid=2172 pid=4715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 177.400472] audit: type=1327 audit(1747120670.413:1299): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 177.407600] audit: type=1325 audit(1747120670.433:1300): table=nat:120 family=2 entries=34 op=nft_register_chain pid=4715 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 177.411380] audit: type=1300 audit(1747120670.433:1300): arch=c000003e syscall=46 success=yes exit=11236 a0=3 a1=7fff6712d340 a2=0 a3=7fff6712d32c items=0 ppid=2172 pid=4715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 177.418883] audit: type=1327 audit(1747120670.433:1300): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 201.772523] audit: type=1400 audit(1747120694.798:1302): avc: denied { watch } for pid=1875 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c144,c1018 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 201.780141] audit: type=1400 audit(1747120694.798:1301): avc: denied { watch } for pid=1875 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520975 scontext=system_u:system_r:svirt_lxc_net_t:s0:c144,c1018 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 201.788225] audit: type=1300 audit(1747120694.798:1301): arch=c000003e syscall=254 success=no exit=-13 a0=6f a1=c00ef836e0 a2=fc6 a3=0 items=0 ppid=1739 pid=1875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c144,c1018 key=(null) [ 201.797962] audit: type=1327 audit(1747120694.798:1301): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 [ 201.810116] audit: type=1300 audit(1747120694.798:1302): arch=c000003e syscall=254 success=no exit=-13 a0=70 a1=c0116731d0 a2=fc6 a3=0 items=0 ppid=1739 pid=1875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c144,c1018 key=(null) [ 201.820349] audit: type=1327 audit(1747120694.798:1302): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 [ 201.828548] audit: type=1400 audit(1747120694.813:1303): avc: denied { watch } for pid=1875 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c144,c1018 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 201.836043] audit: type=1300 audit(1747120694.813:1303): arch=c000003e syscall=254 success=no exit=-13 a0=6f a1=c00ef83860 a2=fc6 a3=0 items=0 ppid=1739 pid=1875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c144,c1018 key=(null) [ 201.845786] audit: type=1327 audit(1747120694.813:1303): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 [ 201.853984] audit: type=1400 audit(1747120694.813:1304): avc: denied { watch } for pid=1875 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520973 scontext=system_u:system_r:svirt_lxc_net_t:s0:c144,c1018 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 211.362131] kauditd_printk_skb: 14 callbacks suppressed [ 211.362138] audit: type=1400 audit(1747120704.388:1309): avc: denied { watch } for pid=4527 comm="apiserver" path="/calico-apiserver-certs/..2025_05_13_07_16_56.233508453/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c100,c779 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c100,c779 tclass=file permissive=0 [ 211.382018] audit: type=1300 audit(1747120704.388:1309): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000ac18a0 a2=fc6 a3=0 items=0 ppid=3795 pid=4527 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c100,c779 key=(null) [ 211.400357] audit: type=1327 audit(1747120704.388:1309): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 [ 215.137584] audit: type=1400 audit(1747120708.163:1310): avc: denied { watch } for pid=4634 comm="apiserver" path="/calico-apiserver-certs/..2025_05_13_07_16_56.3875453543/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c109,c406 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c109,c406 tclass=file permissive=0 [ 215.154003] audit: type=1300 audit(1747120708.163:1310): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000c09a20 a2=fc6 a3=0 items=0 ppid=3989 pid=4634 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c109,c406 key=(null) [ 215.172824] audit: type=1327 audit(1747120708.163:1310): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 [ 216.975822] audit: type=1400 audit(1747120710.002:1311): avc: denied { watch } for pid=1901 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520973 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 216.989891] audit: type=1300 audit(1747120710.002:1311): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000d57ee0 a2=fc6 a3=0 items=0 ppid=1759 pid=1901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c831 key=(null) [ 217.008422] audit: type=1327 audit(1747120710.002:1311): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 217.024151] audit: type=1400 audit(1747120710.022:1312): avc: denied { watch } for pid=1901 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520973 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 217.038041] audit: type=1300 audit(1747120710.022:1312): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001057400 a2=fc6 a3=0 items=0 ppid=1759 pid=1901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c831 key=(null) [ 217.052467] audit: type=1327 audit(1747120710.022:1312): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 217.058803] audit: type=1400 audit(1747120710.022:1313): avc: denied { watch } for pid=1901 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520973 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 217.064667] audit: type=1300 audit(1747120710.022:1313): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001057900 a2=fc6 a3=0 items=0 ppid=1759 pid=1901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c831 key=(null) [ 217.072230] audit: type=1327 audit(1747120710.022:1313): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 217.078710] audit: type=1400 audit(1747120710.022:1314): avc: denied { watch } for pid=1901 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520973 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 261.773925] kauditd_printk_skb: 2 callbacks suppressed [ 261.773989] audit: type=1400 audit(1747120754.800:1315): avc: denied { watch } for pid=1875 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c144,c1018 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 261.792079] audit: type=1400 audit(1747120754.800:1316): avc: denied { watch } for pid=1875 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520975 scontext=system_u:system_r:svirt_lxc_net_t:s0:c144,c1018 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 261.806482] audit: type=1300 audit(1747120754.800:1316): arch=c000003e syscall=254 success=no exit=-13 a0=66 a1=c00185f0b0 a2=fc6 a3=0 items=0 ppid=1739 pid=1875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c144,c1018 key=(null) [ 261.824452] audit: type=1327 audit(1747120754.800:1316): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 [ 261.840399] audit: type=1300 audit(1747120754.800:1315): arch=c000003e syscall=254 success=no exit=-13 a0=65 a1=c0025c9e30 a2=fc6 a3=0 items=0 ppid=1739 pid=1875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c144,c1018 key=(null) [ 261.856239] audit: type=1327 audit(1747120754.800:1315): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 [ 261.862745] audit: type=1400 audit(1747120754.814:1317): avc: denied { watch } for pid=1875 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520973 scontext=system_u:system_r:svirt_lxc_net_t:s0:c144,c1018 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 261.868578] audit: type=1300 audit(1747120754.814:1317): arch=c000003e syscall=254 success=no exit=-13 a0=65 a1=c010a397e0 a2=fc6 a3=0 items=0 ppid=1739 pid=1875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c144,c1018 key=(null) [ 261.875990] audit: type=1327 audit(1747120754.814:1317): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 [ 261.882413] audit: type=1400 audit(1747120754.815:1318): avc: denied { watch } for pid=1875 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c144,c1018 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 271.372149] kauditd_printk_skb: 14 callbacks suppressed [ 271.372157] audit: type=1400 audit(1747120764.398:1323): avc: denied { watch } for pid=4527 comm="apiserver" path="/calico-apiserver-certs/..2025_05_13_07_16_56.233508453/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c100,c779 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c100,c779 tclass=file permissive=0 [ 271.400839] audit: type=1300 audit(1747120764.398:1323): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c00256c500 a2=fc6 a3=0 items=0 ppid=3795 pid=4527 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c100,c779 key=(null) [ 271.419269] audit: type=1327 audit(1747120764.398:1323): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 [ 275.139643] audit: type=1400 audit(1747120768.165:1324): avc: denied { watch } for pid=4634 comm="apiserver" path="/calico-apiserver-certs/..2025_05_13_07_16_56.3875453543/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c109,c406 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c109,c406 tclass=file permissive=0 [ 275.156280] audit: type=1300 audit(1747120768.165:1324): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c00157ea80 a2=fc6 a3=0 items=0 ppid=3989 pid=4634 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c109,c406 key=(null) [ 275.174831] audit: type=1327 audit(1747120768.165:1324): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 [ 276.979214] audit: type=1400 audit(1747120770.005:1325): avc: denied { watch } for pid=1901 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520973 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 276.993968] audit: type=1300 audit(1747120770.005:1325): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000e94560 a2=fc6 a3=0 items=0 ppid=1759 pid=1901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c831 key=(null) [ 277.012399] audit: type=1327 audit(1747120770.005:1325): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 277.029871] audit: type=1400 audit(1747120770.023:1326): avc: denied { watch } for pid=1901 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520973 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 277.043823] audit: type=1300 audit(1747120770.023:1326): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000e94580 a2=fc6 a3=0 items=0 ppid=1759 pid=1901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c831 key=(null) [ 277.057190] audit: type=1327 audit(1747120770.023:1326): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 277.064203] audit: type=1400 audit(1747120770.025:1327): avc: denied { watch } for pid=1901 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520973 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 277.070343] audit: type=1300 audit(1747120770.025:1327): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000deb440 a2=fc6 a3=0 items=0 ppid=1759 pid=1901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c831 key=(null) [ 277.078061] audit: type=1327 audit(1747120770.025:1327): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 277.084553] audit: type=1400 audit(1747120770.027:1328): avc: denied { watch } for pid=1901 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520973 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 321.776570] kauditd_printk_skb: 2 callbacks suppressed [ 321.776616] audit: type=1400 audit(1747120814.803:1329): avc: denied { watch } for pid=1875 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520975 scontext=system_u:system_r:svirt_lxc_net_t:s0:c144,c1018 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 321.794223] audit: type=1300 audit(1747120814.803:1329): arch=c000003e syscall=254 success=no exit=-13 a0=65 a1=c011580000 a2=fc6 a3=0 items=0 ppid=1739 pid=1875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c144,c1018 key=(null) [ 321.820413] audit: type=1327 audit(1747120814.803:1329): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 [ 321.835246] audit: type=1400 audit(1747120814.808:1330): avc: denied { watch } for pid=1875 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c144,c1018 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 321.848981] audit: type=1300 audit(1747120814.808:1330): arch=c000003e syscall=254 success=no exit=-13 a0=65 a1=c011580390 a2=fc6 a3=0 items=0 ppid=1739 pid=1875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c144,c1018 key=(null) [ 321.859000] audit: type=1327 audit(1747120814.808:1330): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 [ 321.865585] audit: type=1400 audit(1747120814.815:1331): avc: denied { watch } for pid=1875 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520973 scontext=system_u:system_r:svirt_lxc_net_t:s0:c144,c1018 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 321.871474] audit: type=1300 audit(1747120814.815:1331): arch=c000003e syscall=254 success=no exit=-13 a0=65 a1=c00dfea7e0 a2=fc6 a3=0 items=0 ppid=1739 pid=1875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c144,c1018 key=(null) [ 321.879104] audit: type=1327 audit(1747120814.815:1331): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 [ 321.885419] audit: type=1400 audit(1747120814.816:1332): avc: denied { watch } for pid=1875 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c144,c1018 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 326.862601] kauditd_printk_skb: 22 callbacks suppressed [ 326.862610] audit: type=1106 audit(1747120819.886:1343): pid=5030 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 326.889654] audit: type=1104 audit(1747120819.886:1344): pid=5030 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 326.896168] audit: type=1131 audit(1747120819.912:1345): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.24.4.235:22-172.24.4.1:60560 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 331.375206] audit: type=1400 audit(1747120824.401:1346): avc: denied { watch } for pid=4527 comm="apiserver" path="/calico-apiserver-certs/..2025_05_13_07_16_56.233508453/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c100,c779 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c100,c779 tclass=file permissive=0 [ 331.392229] audit: type=1300 audit(1747120824.401:1346): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c00086e000 a2=fc6 a3=0 items=0 ppid=3795 pid=4527 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c100,c779 key=(null) [ 331.410682] audit: type=1327 audit(1747120824.401:1346): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 [ 331.876114] audit: type=1130 audit(1747120824.902:1347): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.24.4.235:22-172.24.4.1:44990 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 333.172366] audit: type=1101 audit(1747120826.198:1348): pid=5080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 333.188088] audit: type=1103 audit(1747120826.214:1349): pid=5080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 333.211144] audit: type=1006 audit(1747120826.214:1350): pid=5080 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 333.222383] audit: type=1300 audit(1747120826.214:1350): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd51613d90 a2=3 a3=0 items=0 ppid=1 pid=5080 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 333.240746] audit: type=1327 audit(1747120826.214:1350): proctitle=737368643A20636F7265205B707269765D [ 333.266784] audit: type=1105 audit(1747120826.292:1351): pid=5080 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 333.275055] audit: type=1103 audit(1747120826.301:1352): pid=5082 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 333.951894] audit: type=1106 audit(1747120826.977:1353): pid=5080 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 333.978954] audit: type=1104 audit(1747120826.977:1354): pid=5080 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 336.983094] kauditd_printk_skb: 4 callbacks suppressed [ 336.983120] audit: type=1400 audit(1747120830.009:1357): avc: denied { watch } for pid=1901 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520973 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 336.990210] audit: type=1300 audit(1747120830.009:1357): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000428aa0 a2=fc6 a3=0 items=0 ppid=1759 pid=1901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c831 key=(null) [ 336.997872] audit: type=1327 audit(1747120830.009:1357): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 337.004532] audit: type=1400 audit(1747120830.024:1358): avc: denied { watch } for pid=1901 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520973 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 337.010246] audit: type=1300 audit(1747120830.024:1358): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001057840 a2=fc6 a3=0 items=0 ppid=1759 pid=1901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c831 key=(null) [ 337.027359] audit: type=1327 audit(1747120830.024:1358): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 337.043460] audit: type=1400 audit(1747120830.024:1359): avc: denied { watch } for pid=1901 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520973 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 337.058976] audit: type=1300 audit(1747120830.024:1359): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000428ba0 a2=fc6 a3=0 items=0 ppid=1759 pid=1901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c831 key=(null) [ 337.068241] audit: type=1327 audit(1747120830.024:1359): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 337.075032] audit: type=1400 audit(1747120830.024:1360): avc: denied { watch } for pid=1901 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520973 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 345.987120] kauditd_printk_skb: 13 callbacks suppressed [ 345.987126] audit: type=1130 audit(1747120839.013:1370): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.24.4.235:22-172.24.4.1:41508 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 347.405899] audit: type=1101 audit(1747120840.432:1371): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 347.424919] audit: type=1103 audit(1747120840.450:1372): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 347.441430] audit: type=1006 audit(1747120840.451:1373): pid=5144 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 [ 347.450664] audit: type=1300 audit(1747120840.451:1373): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff787c9910 a2=3 a3=0 items=0 ppid=1 pid=5144 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 347.463303] audit: type=1327 audit(1747120840.451:1373): proctitle=737368643A20636F7265205B707269765D [ 347.470201] audit: type=1105 audit(1747120840.496:1374): pid=5144 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 347.477231] audit: type=1103 audit(1747120840.498:1375): pid=5146 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 348.212570] audit: type=1106 audit(1747120841.239:1376): pid=5144 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 348.231432] audit: type=1104 audit(1747120841.239:1377): pid=5144 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 352.327751] kauditd_printk_skb: 13 callbacks suppressed [ 352.327757] audit: type=1101 audit(1747120845.354:1389): pid=5167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 352.349800] audit: type=1103 audit(1747120845.375:1390): pid=5167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 352.365257] audit: type=1006 audit(1747120845.376:1391): pid=5167 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 352.374859] audit: type=1300 audit(1747120845.376:1391): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd4e8688e0 a2=3 a3=0 items=0 ppid=1 pid=5167 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 352.392366] audit: type=1327 audit(1747120845.376:1391): proctitle=737368643A20636F7265205B707269765D [ 352.403663] audit: type=1105 audit(1747120845.429:1392): pid=5167 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 352.424375] audit: type=1103 audit(1747120845.430:1393): pid=5169 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 353.201766] audit: type=1106 audit(1747120846.228:1394): pid=5167 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 353.219680] audit: type=1104 audit(1747120846.228:1395): pid=5167 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 353.234884] audit: type=1131 audit(1747120846.232:1396): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.24.4.235:22-172.24.4.1:57660 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 358.213069] audit: type=1130 audit(1747120851.239:1397): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.24.4.235:22-172.24.4.1:57662 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 359.466529] audit: type=1101 audit(1747120852.492:1398): pid=5184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 359.485587] audit: type=1103 audit(1747120852.511:1399): pid=5184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 359.501767] audit: type=1006 audit(1747120852.512:1400): pid=5184 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 359.512020] audit: type=1300 audit(1747120852.512:1400): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff1bed7db0 a2=3 a3=0 items=0 ppid=1 pid=5184 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 359.528261] audit: type=1327 audit(1747120852.512:1400): proctitle=737368643A20636F7265205B707269765D [ 359.557525] audit: type=1105 audit(1747120852.581:1401): pid=5184 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 359.574465] audit: type=1103 audit(1747120852.586:1402): pid=5186 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 360.264985] audit: type=1106 audit(1747120853.291:1403): pid=5184 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 360.272976] audit: type=1104 audit(1747120853.291:1404): pid=5184 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 365.300292] kauditd_printk_skb: 1 callbacks suppressed [ 365.300311] audit: type=1130 audit(1747120858.326:1406): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.24.4.235:22-172.24.4.1:46710 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 366.448693] audit: type=1101 audit(1747120859.475:1407): pid=5235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 366.468916] audit: type=1103 audit(1747120859.492:1408): pid=5235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 366.483900] audit: type=1006 audit(1747120859.492:1409): pid=5235 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 [ 366.493355] audit: type=1300 audit(1747120859.492:1409): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffd0f8a2f0 a2=3 a3=0 items=0 ppid=1 pid=5235 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 366.508686] audit: type=1327 audit(1747120859.492:1409): proctitle=737368643A20636F7265205B707269765D [ 366.530567] audit: type=1105 audit(1747120859.556:1410): pid=5235 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 366.547495] audit: type=1103 audit(1747120859.563:1411): pid=5237 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 367.324718] audit: type=1106 audit(1747120860.351:1412): pid=5235 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 367.342210] audit: type=1104 audit(1747120860.351:1413): pid=5235 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 372.336487] kauditd_printk_skb: 1 callbacks suppressed [ 372.339971] audit: type=1130 audit(1747120865.362:1415): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.24.4.235:22-172.24.4.1:35954 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 373.637759] audit: type=1101 audit(1747120866.664:1416): pid=5249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 373.653599] audit: type=1103 audit(1747120866.679:1417): pid=5249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 373.667640] audit: type=1006 audit(1747120866.681:1418): pid=5249 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 [ 373.676686] audit: type=1300 audit(1747120866.681:1418): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe4d31dcb0 a2=3 a3=0 items=0 ppid=1 pid=5249 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 373.692508] audit: type=1327 audit(1747120866.681:1418): proctitle=737368643A20636F7265205B707269765D [ 373.715775] audit: type=1105 audit(1747120866.741:1419): pid=5249 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 373.732192] audit: type=1103 audit(1747120866.742:1420): pid=5251 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 374.633109] audit: type=1106 audit(1747120867.659:1421): pid=5249 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 374.657138] audit: type=1104 audit(1747120867.659:1422): pid=5249 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 378.632588] kauditd_printk_skb: 13 callbacks suppressed [ 378.632595] audit: type=1101 audit(1747120871.659:1434): pid=5269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 378.651291] audit: type=1103 audit(1747120871.677:1435): pid=5269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 378.674848] audit: type=1006 audit(1747120871.677:1436): pid=5269 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 [ 378.684279] audit: type=1300 audit(1747120871.677:1436): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffddce72610 a2=3 a3=0 items=0 ppid=1 pid=5269 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 378.700565] audit: type=1327 audit(1747120871.677:1436): proctitle=737368643A20636F7265205B707269765D [ 378.720915] audit: type=1105 audit(1747120871.747:1437): pid=5269 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 378.737872] audit: type=1103 audit(1747120871.754:1438): pid=5273 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 381.777505] audit: type=1400 audit(1747120874.803:1439): avc: denied { watch } for pid=1875 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520975 scontext=system_u:system_r:svirt_lxc_net_t:s0:c144,c1018 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 381.784688] audit: type=1300 audit(1747120874.803:1439): arch=c000003e syscall=254 success=no exit=-13 a0=74 a1=c00c0b4090 a2=fc6 a3=0 items=0 ppid=1739 pid=1875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c144,c1018 key=(null) [ 381.797034] audit: type=1327 audit(1747120874.803:1439): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 [ 383.892809] kauditd_printk_skb: 37 callbacks suppressed [ 383.892816] audit: type=1101 audit(1747120876.919:1455): pid=5288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 383.913059] audit: type=1103 audit(1747120876.937:1456): pid=5288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 383.927610] audit: type=1006 audit(1747120876.937:1457): pid=5288 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 383.938744] audit: type=1300 audit(1747120876.937:1457): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff64ab63d0 a2=3 a3=0 items=0 ppid=1 pid=5288 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 383.954805] audit: type=1327 audit(1747120876.937:1457): proctitle=737368643A20636F7265205B707269765D [ 383.984286] audit: type=1105 audit(1747120877.010:1458): pid=5288 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 384.001381] audit: type=1103 audit(1747120877.027:1459): pid=5291 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 384.969994] audit: type=1106 audit(1747120877.993:1460): pid=5288 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 384.998766] audit: type=1104 audit(1747120877.994:1461): pid=5288 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 385.014630] audit: type=1131 audit(1747120877.996:1462): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.24.4.235:22-172.24.4.1:38268 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 390.629927] kauditd_printk_skb: 11 callbacks suppressed [ 390.630041] audit: type=1325 audit(1747120883.656:1472): table=filter:125 family=2 entries=20 op=nft_register_rule pid=5312 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 390.644456] audit: type=1300 audit(1747120883.656:1472): arch=c000003e syscall=46 success=yes exit=2932 a0=3 a1=7ffef97f2d80 a2=0 a3=7ffef97f2d6c items=0 ppid=2172 pid=5312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 390.652105] audit: type=1327 audit(1747120883.656:1472): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 390.655839] audit: type=1325 audit(1747120883.672:1473): table=nat:126 family=2 entries=106 op=nft_register_chain pid=5312 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 390.659956] audit: type=1300 audit(1747120883.672:1473): arch=c000003e syscall=46 success=yes exit=49452 a0=3 a1=7ffef97f2d80 a2=0 a3=7ffef97f2d6c items=0 ppid=2172 pid=5312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 390.668114] audit: type=1327 audit(1747120883.672:1473): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 391.378275] audit: type=1400 audit(1747120884.404:1474): avc: denied { watch } for pid=4527 comm="apiserver" path="/calico-apiserver-certs/..2025_05_13_07_16_56.233508453/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c100,c779 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c100,c779 tclass=file permissive=0 [ 391.392452] audit: type=1300 audit(1747120884.404:1474): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c00086f080 a2=fc6 a3=0 items=0 ppid=3795 pid=4527 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c100,c779 key=(null) [ 391.406572] audit: type=1327 audit(1747120884.404:1474): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 [ 392.337596] audit: type=1130 audit(1747120885.364:1475): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.24.4.235:22-172.24.4.1:52720 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 396.992781] kauditd_printk_skb: 13 callbacks suppressed [ 396.992788] audit: type=1400 audit(1747120890.019:1485): avc: denied { watch } for pid=1901 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520973 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 397.010462] audit: type=1300 audit(1747120890.019:1485): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c003127500 a2=fc6 a3=0 items=0 ppid=1759 pid=1901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c831 key=(null) [ 397.028716] audit: type=1327 audit(1747120890.019:1485): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 397.039774] audit: type=1400 audit(1747120890.029:1486): avc: denied { watch } for pid=1901 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520973 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 397.045466] audit: type=1300 audit(1747120890.029:1486): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0031c81c0 a2=fc6 a3=0 items=0 ppid=1759 pid=1901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c831 key=(null) [ 397.053344] audit: type=1327 audit(1747120890.029:1486): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 397.059872] audit: type=1400 audit(1747120890.029:1487): avc: denied { watch } for pid=1901 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520973 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 397.065744] audit: type=1300 audit(1747120890.029:1487): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0031c81e0 a2=fc6 a3=0 items=0 ppid=1759 pid=1901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c831 key=(null) [ 397.073433] audit: type=1327 audit(1747120890.029:1487): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 397.079794] audit: type=1400 audit(1747120890.029:1488): avc: denied { watch } for pid=1901 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520973 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 406.441818] kauditd_printk_skb: 13 callbacks suppressed [ 406.441825] audit: type=1130 audit(1747120899.468:1498): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.24.4.235:22-172.24.4.1:57188 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 407.755162] audit: type=1101 audit(1747120900.781:1499): pid=5401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 407.770441] audit: type=1103 audit(1747120900.796:1500): pid=5401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 407.790681] audit: type=1006 audit(1747120900.797:1501): pid=5401 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 [ 407.799864] audit: type=1300 audit(1747120900.797:1501): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffefd8faba0 a2=3 a3=0 items=0 ppid=1 pid=5401 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 407.824676] audit: type=1327 audit(1747120900.797:1501): proctitle=737368643A20636F7265205B707269765D [ 407.856523] audit: type=1105 audit(1747120900.881:1502): pid=5401 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 407.873806] audit: type=1103 audit(1747120900.888:1503): pid=5403 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 408.532174] audit: type=1106 audit(1747120901.558:1504): pid=5401 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 408.549368] audit: type=1104 audit(1747120901.561:1505): pid=5401 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 413.546256] kauditd_printk_skb: 1 callbacks suppressed [ 413.546290] audit: type=1130 audit(1747120906.572:1507): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.24.4.235:22-172.24.4.1:35332 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 414.706025] audit: type=1101 audit(1747120907.732:1508): pid=5413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 414.722239] audit: type=1103 audit(1747120907.747:1509): pid=5413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 414.737952] audit: type=1006 audit(1747120907.747:1510): pid=5413 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 [ 414.747101] audit: type=1300 audit(1747120907.747:1510): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffe33425b0 a2=3 a3=0 items=0 ppid=1 pid=5413 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 414.762700] audit: type=1327 audit(1747120907.747:1510): proctitle=737368643A20636F7265205B707269765D [ 414.788742] audit: type=1105 audit(1747120907.814:1511): pid=5413 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 414.806207] audit: type=1103 audit(1747120907.832:1512): pid=5415 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 415.537100] audit: type=1106 audit(1747120908.563:1513): pid=5413 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 415.557086] audit: type=1104 audit(1747120908.565:1514): pid=5413 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 420.550829] kauditd_printk_skb: 1 callbacks suppressed [ 420.550836] audit: type=1130 audit(1747120913.577:1516): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.24.4.235:22-172.24.4.1:46114 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 421.752424] audit: type=1101 audit(1747120914.776:1517): pid=5425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 421.779257] audit: type=1103 audit(1747120914.779:1518): pid=5425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 421.797174] audit: type=1006 audit(1747120914.779:1519): pid=5425 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 [ 421.814285] audit: type=1300 audit(1747120914.779:1519): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffdbf8a670 a2=3 a3=0 items=0 ppid=1 pid=5425 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) [ 421.827062] audit: type=1327 audit(1747120914.779:1519): proctitle=737368643A20636F7265205B707269765D [ 421.836132] audit: type=1105 audit(1747120914.862:1520): pid=5425 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 421.843858] audit: type=1103 audit(1747120914.870:1521): pid=5453 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 422.534888] audit: type=1106 audit(1747120915.561:1522): pid=5425 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 422.543943] audit: type=1104 audit(1747120915.562:1523): pid=5425 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' [ 441.778165] kauditd_printk_skb: 1 callbacks suppressed [ 441.778173] audit: type=1400 audit(1747120934.804:1525): avc: denied { watch } for pid=1875 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520975 scontext=system_u:system_r:svirt_lxc_net_t:s0:c144,c1018 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 441.799140] audit: type=1300 audit(1747120934.804:1525): arch=c000003e syscall=254 success=no exit=-13 a0=74 a1=c010bb5410 a2=fc6 a3=0 items=0 ppid=1739 pid=1875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c144,c1018 key=(null) [ 441.820718] audit: type=1327 audit(1747120934.804:1525): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 [ 441.839335] audit: type=1400 audit(1747120934.812:1526): avc: denied { watch } for pid=1875 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c144,c1018 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 441.855996] audit: type=1300 audit(1747120934.812:1526): arch=c000003e syscall=254 success=no exit=-13 a0=74 a1=c010bb5440 a2=fc6 a3=0 items=0 ppid=1739 pid=1875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c144,c1018 key=(null) [ 441.865684] audit: type=1327 audit(1747120934.812:1526): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 [ 441.873164] audit: type=1400 audit(1747120934.817:1527): avc: denied { watch } for pid=1875 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520973 scontext=system_u:system_r:svirt_lxc_net_t:s0:c144,c1018 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 441.879330] audit: type=1300 audit(1747120934.817:1527): arch=c000003e syscall=254 success=no exit=-13 a0=74 a1=c006d2ca00 a2=fc6 a3=0 items=0 ppid=1739 pid=1875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c144,c1018 key=(null) [ 441.887002] audit: type=1327 audit(1747120934.817:1527): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 [ 441.896308] audit: type=1400 audit(1747120934.819:1528): avc: denied { watch } for pid=1875 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c144,c1018 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 451.381244] kauditd_printk_skb: 14 callbacks suppressed [ 451.381309] audit: type=1400 audit(1747120944.408:1533): avc: denied { watch } for pid=4527 comm="apiserver" path="/calico-apiserver-certs/..2025_05_13_07_16_56.233508453/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c100,c779 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c100,c779 tclass=file permissive=0 [ 451.401677] audit: type=1300 audit(1747120944.408:1533): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c00256c160 a2=fc6 a3=0 items=0 ppid=3795 pid=4527 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c100,c779 key=(null) [ 451.420253] audit: type=1327 audit(1747120944.408:1533): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 [ 455.147223] audit: type=1400 audit(1747120948.174:1534): avc: denied { watch } for pid=4634 comm="apiserver" path="/calico-apiserver-certs/..2025_05_13_07_16_56.3875453543/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c109,c406 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c109,c406 tclass=file permissive=0 [ 455.164186] audit: type=1300 audit(1747120948.174:1534): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001d3c500 a2=fc6 a3=0 items=0 ppid=3989 pid=4634 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c109,c406 key=(null) [ 455.184622] audit: type=1327 audit(1747120948.174:1534): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 [ 456.996972] audit: type=1400 audit(1747120950.024:1535): avc: denied { watch } for pid=1901 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520973 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 457.022993] audit: type=1300 audit(1747120950.024:1535): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002aad9e0 a2=fc6 a3=0 items=0 ppid=1759 pid=1901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c831 key=(null) [ 457.041879] audit: type=1327 audit(1747120950.024:1535): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 457.057644] audit: type=1400 audit(1747120950.030:1536): avc: denied { watch } for pid=1901 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520973 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 457.071210] audit: type=1300 audit(1747120950.030:1536): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00345b040 a2=fc6 a3=0 items=0 ppid=1759 pid=1901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c831 key=(null) [ 457.080200] audit: type=1327 audit(1747120950.030:1536): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 457.086873] audit: type=1400 audit(1747120950.030:1537): avc: denied { watch } for pid=1901 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520973 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 457.092787] audit: type=1300 audit(1747120950.030:1537): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00345b060 a2=fc6 a3=0 items=0 ppid=1759 pid=1901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c831 key=(null) [ 457.100642] audit: type=1327 audit(1747120950.030:1537): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 457.107171] audit: type=1400 audit(1747120950.030:1538): avc: denied { watch } for pid=1901 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520973 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 501.781336] kauditd_printk_skb: 2 callbacks suppressed [ 501.781408] audit: type=1400 audit(1747120994.808:1539): avc: denied { watch } for pid=1875 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520975 scontext=system_u:system_r:svirt_lxc_net_t:s0:c144,c1018 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 501.798913] audit: type=1300 audit(1747120994.808:1539): arch=c000003e syscall=254 success=no exit=-13 a0=69 a1=c007cd3bf0 a2=fc6 a3=0 items=0 ppid=1739 pid=1875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c144,c1018 key=(null) [ 501.816831] audit: type=1327 audit(1747120994.808:1539): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 [ 501.832658] audit: type=1400 audit(1747120994.812:1540): avc: denied { watch } for pid=1875 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c144,c1018 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 501.847055] audit: type=1300 audit(1747120994.812:1540): arch=c000003e syscall=254 success=no exit=-13 a0=69 a1=c008315530 a2=fc6 a3=0 items=0 ppid=1739 pid=1875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c144,c1018 key=(null) [ 501.862287] audit: type=1327 audit(1747120994.812:1540): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 [ 501.868581] audit: type=1400 audit(1747120994.818:1541): avc: denied { watch } for pid=1875 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520973 scontext=system_u:system_r:svirt_lxc_net_t:s0:c144,c1018 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 501.874092] audit: type=1300 audit(1747120994.818:1541): arch=c000003e syscall=254 success=no exit=-13 a0=69 a1=c011f7c640 a2=fc6 a3=0 items=0 ppid=1739 pid=1875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c144,c1018 key=(null) [ 501.881619] audit: type=1327 audit(1747120994.818:1541): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323335002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 [ 501.887897] audit: type=1400 audit(1747120994.823:1542): avc: denied { watch } for pid=1875 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c144,c1018 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 511.385023] kauditd_printk_skb: 14 callbacks suppressed [ 511.385093] audit: type=1400 audit(1747121004.412:1547): avc: denied { watch } for pid=4527 comm="apiserver" path="/calico-apiserver-certs/..2025_05_13_07_16_56.233508453/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c100,c779 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c100,c779 tclass=file permissive=0 [ 511.405882] audit: type=1300 audit(1747121004.412:1547): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c00256cf20 a2=fc6 a3=0 items=0 ppid=3795 pid=4527 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c100,c779 key=(null) [ 511.425314] audit: type=1327 audit(1747121004.412:1547): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 [ 515.148942] audit: type=1400 audit(1747121008.176:1548): avc: denied { watch } for pid=4634 comm="apiserver" path="/calico-apiserver-certs/..2025_05_13_07_16_56.3875453543/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c109,c406 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c109,c406 tclass=file permissive=0 [ 515.165425] audit: type=1300 audit(1747121008.176:1548): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001d3dfc0 a2=fc6 a3=0 items=0 ppid=3989 pid=4634 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c109,c406 key=(null) [ 515.185420] audit: type=1327 audit(1747121008.176:1548): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 [ 517.001450] audit: type=1400 audit(1747121010.029:1549): avc: denied { watch } for pid=1901 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520973 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 517.034274] audit: type=1300 audit(1747121010.029:1549): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000af5780 a2=fc6 a3=0 items=0 ppid=1759 pid=1901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c831 key=(null) [ 517.045384] audit: type=1327 audit(1747121010.029:1549): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 517.056962] audit: type=1400 audit(1747121010.029:1550): avc: denied { watch } for pid=1901 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520973 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 517.072819] audit: type=1300 audit(1747121010.029:1550): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000af57e0 a2=fc6 a3=0 items=0 ppid=1759 pid=1901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c831 key=(null) [ 517.087529] audit: type=1327 audit(1747121010.029:1550): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 517.094965] audit: type=1400 audit(1747121010.029:1551): avc: denied { watch } for pid=1901 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520973 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 [ 517.101667] audit: type=1300 audit(1747121010.029:1551): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000af5980 a2=fc6 a3=0 items=0 ppid=1759 pid=1901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c384,c831 key=(null) [ 517.110394] audit: type=1327 audit(1747121010.029:1551): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 [ 517.117925] audit: type=1400 audit(1747121010.051:1552): avc: denied { watch } for pid=1901 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520973 scontext=system_u:system_r:svirt_lxc_net_t:s0:c384,c831 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0