Nov 1 00:12:40.984794 kernel: Booting Linux on physical CPU 0x0000000000 [0x410fd083] Nov 1 00:12:40.984839 kernel: Linux version 5.15.192-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Fri Oct 31 23:12:38 -00 2025 Nov 1 00:12:40.984864 kernel: efi: EFI v2.70 by EDK II Nov 1 00:12:40.984880 kernel: efi: SMBIOS=0x7bed0000 SMBIOS 3.0=0x7beb0000 ACPI=0x786e0000 ACPI 2.0=0x786e0014 MEMATTR=0x7affea98 MEMRESERVE=0x716fcf98 Nov 1 00:12:40.984894 kernel: ACPI: Early table checksum verification disabled Nov 1 00:12:40.984907 kernel: ACPI: RSDP 0x00000000786E0014 000024 (v02 AMAZON) Nov 1 00:12:40.984924 kernel: ACPI: XSDT 0x00000000786D00E8 000064 (v01 AMAZON AMZNFACP 00000001 01000013) Nov 1 00:12:40.984954 kernel: ACPI: FACP 0x00000000786B0000 000114 (v06 AMAZON AMZNFACP 00000001 AMZN 00000001) Nov 1 00:12:40.984969 kernel: ACPI: DSDT 0x0000000078640000 00159D (v02 AMAZON AMZNDSDT 00000001 INTL 20160527) Nov 1 00:12:40.984983 kernel: ACPI: APIC 0x00000000786C0000 000108 (v04 AMAZON AMZNAPIC 00000001 AMZN 00000001) Nov 1 00:12:40.985003 kernel: ACPI: SPCR 0x00000000786A0000 000050 (v02 AMAZON AMZNSPCR 00000001 AMZN 00000001) Nov 1 00:12:40.985017 kernel: ACPI: GTDT 0x0000000078690000 000060 (v02 AMAZON AMZNGTDT 00000001 AMZN 00000001) Nov 1 00:12:40.985031 kernel: ACPI: MCFG 0x0000000078680000 00003C (v02 AMAZON AMZNMCFG 00000001 AMZN 00000001) Nov 1 00:12:40.985045 kernel: ACPI: SLIT 0x0000000078670000 00002D (v01 AMAZON AMZNSLIT 00000001 AMZN 00000001) Nov 1 00:12:40.985062 kernel: ACPI: IORT 0x0000000078660000 000078 (v01 AMAZON AMZNIORT 00000001 AMZN 00000001) Nov 1 00:12:40.985082 kernel: ACPI: PPTT 0x0000000078650000 0000EC (v01 AMAZON AMZNPPTT 00000001 AMZN 00000001) Nov 1 00:12:40.985096 kernel: ACPI: SPCR: console: uart,mmio,0x90a0000,115200 Nov 1 00:12:40.985111 kernel: earlycon: uart0 at MMIO 0x00000000090a0000 (options '115200') Nov 1 00:12:40.985147 kernel: printk: bootconsole [uart0] enabled Nov 1 00:12:40.985163 kernel: NUMA: Failed to initialise from firmware Nov 1 00:12:40.985178 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000004b5ffffff] Nov 1 00:12:40.985193 kernel: NUMA: NODE_DATA [mem 0x4b5843900-0x4b5848fff] Nov 1 00:12:40.985208 kernel: Zone ranges: Nov 1 00:12:40.985223 kernel: DMA [mem 0x0000000040000000-0x00000000ffffffff] Nov 1 00:12:40.985237 kernel: DMA32 empty Nov 1 00:12:40.985252 kernel: Normal [mem 0x0000000100000000-0x00000004b5ffffff] Nov 1 00:12:40.985308 kernel: Movable zone start for each node Nov 1 00:12:40.985326 kernel: Early memory node ranges Nov 1 00:12:40.985341 kernel: node 0: [mem 0x0000000040000000-0x000000007862ffff] Nov 1 00:12:40.985355 kernel: node 0: [mem 0x0000000078630000-0x000000007863ffff] Nov 1 00:12:40.985370 kernel: node 0: [mem 0x0000000078640000-0x00000000786effff] Nov 1 00:12:40.985385 kernel: node 0: [mem 0x00000000786f0000-0x000000007872ffff] Nov 1 00:12:40.985399 kernel: node 0: [mem 0x0000000078730000-0x000000007bbfffff] Nov 1 00:12:40.985413 kernel: node 0: [mem 0x000000007bc00000-0x000000007bfdffff] Nov 1 00:12:40.985428 kernel: node 0: [mem 0x000000007bfe0000-0x000000007fffffff] Nov 1 00:12:40.985442 kernel: node 0: [mem 0x0000000400000000-0x00000004b5ffffff] Nov 1 00:12:40.985457 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000004b5ffffff] Nov 1 00:12:40.985471 kernel: On node 0, zone Normal: 8192 pages in unavailable ranges Nov 1 00:12:40.985491 kernel: psci: probing for conduit method from ACPI. Nov 1 00:12:40.985505 kernel: psci: PSCIv1.0 detected in firmware. Nov 1 00:12:40.985527 kernel: psci: Using standard PSCI v0.2 function IDs Nov 1 00:12:40.985543 kernel: psci: Trusted OS migration not required Nov 1 00:12:40.985558 kernel: psci: SMC Calling Convention v1.1 Nov 1 00:12:40.985577 kernel: smccc: KVM: hypervisor services detected (0x00000000 0x00000000 0x00000000 0x00000001) Nov 1 00:12:40.985592 kernel: ACPI: SRAT not present Nov 1 00:12:40.985608 kernel: percpu: Embedded 30 pages/cpu s83032 r8192 d31656 u122880 Nov 1 00:12:40.985623 kernel: pcpu-alloc: s83032 r8192 d31656 u122880 alloc=30*4096 Nov 1 00:12:40.985639 kernel: pcpu-alloc: [0] 0 [0] 1 Nov 1 00:12:40.985654 kernel: Detected PIPT I-cache on CPU0 Nov 1 00:12:40.985669 kernel: CPU features: detected: GIC system register CPU interface Nov 1 00:12:40.985685 kernel: CPU features: detected: Spectre-v2 Nov 1 00:12:40.985700 kernel: CPU features: detected: Spectre-v3a Nov 1 00:12:40.985715 kernel: CPU features: detected: Spectre-BHB Nov 1 00:12:40.985730 kernel: CPU features: kernel page table isolation forced ON by KASLR Nov 1 00:12:40.985749 kernel: CPU features: detected: Kernel page table isolation (KPTI) Nov 1 00:12:40.985764 kernel: CPU features: detected: ARM erratum 1742098 Nov 1 00:12:40.985780 kernel: CPU features: detected: ARM errata 1165522, 1319367, or 1530923 Nov 1 00:12:40.985795 kernel: Built 1 zonelists, mobility grouping on. Total pages: 991872 Nov 1 00:12:40.985810 kernel: Policy zone: Normal Nov 1 00:12:40.985827 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlycon flatcar.first_boot=detected acpi=force flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=284392058f112e827cd7c521dcce1be27e1367d0030df494642d12e41e342e29 Nov 1 00:12:40.985844 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Nov 1 00:12:40.985859 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Nov 1 00:12:40.985874 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Nov 1 00:12:40.985890 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Nov 1 00:12:40.985909 kernel: software IO TLB: mapped [mem 0x000000007c000000-0x0000000080000000] (64MB) Nov 1 00:12:40.985925 kernel: Memory: 3824460K/4030464K available (9792K kernel code, 2094K rwdata, 7592K rodata, 36416K init, 777K bss, 206004K reserved, 0K cma-reserved) Nov 1 00:12:40.985941 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Nov 1 00:12:40.985956 kernel: trace event string verifier disabled Nov 1 00:12:40.985971 kernel: rcu: Preemptible hierarchical RCU implementation. Nov 1 00:12:40.985987 kernel: rcu: RCU event tracing is enabled. Nov 1 00:12:40.986002 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Nov 1 00:12:40.986018 kernel: Trampoline variant of Tasks RCU enabled. Nov 1 00:12:40.986051 kernel: Tracing variant of Tasks RCU enabled. Nov 1 00:12:40.986069 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Nov 1 00:12:40.986085 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Nov 1 00:12:40.986100 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Nov 1 00:12:40.986142 kernel: GICv3: 96 SPIs implemented Nov 1 00:12:40.986160 kernel: GICv3: 0 Extended SPIs implemented Nov 1 00:12:40.986176 kernel: GICv3: Distributor has no Range Selector support Nov 1 00:12:40.986191 kernel: Root IRQ handler: gic_handle_irq Nov 1 00:12:40.986206 kernel: GICv3: 16 PPIs implemented Nov 1 00:12:40.986221 kernel: GICv3: CPU0: found redistributor 0 region 0:0x0000000010200000 Nov 1 00:12:40.986236 kernel: ACPI: SRAT not present Nov 1 00:12:40.986251 kernel: ITS [mem 0x10080000-0x1009ffff] Nov 1 00:12:40.986266 kernel: ITS@0x0000000010080000: allocated 8192 Devices @400090000 (indirect, esz 8, psz 64K, shr 1) Nov 1 00:12:40.986282 kernel: ITS@0x0000000010080000: allocated 8192 Interrupt Collections @4000a0000 (flat, esz 8, psz 64K, shr 1) Nov 1 00:12:40.986297 kernel: GICv3: using LPI property table @0x00000004000b0000 Nov 1 00:12:40.986317 kernel: ITS: Using hypervisor restricted LPI range [128] Nov 1 00:12:40.986333 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000004000d0000 Nov 1 00:12:40.986348 kernel: arch_timer: cp15 timer(s) running at 83.33MHz (virt). Nov 1 00:12:40.986364 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x13381ebeec, max_idle_ns: 440795203145 ns Nov 1 00:12:40.986379 kernel: sched_clock: 56 bits at 83MHz, resolution 12ns, wraps every 4398046511100ns Nov 1 00:12:40.986395 kernel: Console: colour dummy device 80x25 Nov 1 00:12:40.986411 kernel: printk: console [tty1] enabled Nov 1 00:12:40.986427 kernel: ACPI: Core revision 20210730 Nov 1 00:12:40.986443 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 166.66 BogoMIPS (lpj=83333) Nov 1 00:12:40.986459 kernel: pid_max: default: 32768 minimum: 301 Nov 1 00:12:40.986480 kernel: LSM: Security Framework initializing Nov 1 00:12:40.986496 kernel: SELinux: Initializing. Nov 1 00:12:40.986512 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Nov 1 00:12:40.986528 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Nov 1 00:12:40.986543 kernel: rcu: Hierarchical SRCU implementation. Nov 1 00:12:40.986559 kernel: Platform MSI: ITS@0x10080000 domain created Nov 1 00:12:40.986574 kernel: PCI/MSI: ITS@0x10080000 domain created Nov 1 00:12:40.986590 kernel: Remapping and enabling EFI services. Nov 1 00:12:40.986605 kernel: smp: Bringing up secondary CPUs ... Nov 1 00:12:40.986621 kernel: Detected PIPT I-cache on CPU1 Nov 1 00:12:40.986641 kernel: GICv3: CPU1: found redistributor 1 region 0:0x0000000010220000 Nov 1 00:12:40.986657 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000004000e0000 Nov 1 00:12:40.986672 kernel: CPU1: Booted secondary processor 0x0000000001 [0x410fd083] Nov 1 00:12:40.986688 kernel: smp: Brought up 1 node, 2 CPUs Nov 1 00:12:40.986703 kernel: SMP: Total of 2 processors activated. Nov 1 00:12:40.986719 kernel: CPU features: detected: 32-bit EL0 Support Nov 1 00:12:40.986734 kernel: CPU features: detected: 32-bit EL1 Support Nov 1 00:12:40.986750 kernel: CPU features: detected: CRC32 instructions Nov 1 00:12:40.986765 kernel: CPU: All CPU(s) started at EL1 Nov 1 00:12:40.986785 kernel: alternatives: patching kernel code Nov 1 00:12:40.986800 kernel: devtmpfs: initialized Nov 1 00:12:40.986826 kernel: KASLR disabled due to lack of seed Nov 1 00:12:40.986846 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Nov 1 00:12:40.986863 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Nov 1 00:12:40.986879 kernel: pinctrl core: initialized pinctrl subsystem Nov 1 00:12:40.986895 kernel: SMBIOS 3.0.0 present. Nov 1 00:12:40.986912 kernel: DMI: Amazon EC2 a1.large/, BIOS 1.0 11/1/2018 Nov 1 00:12:40.986928 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Nov 1 00:12:40.986944 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Nov 1 00:12:40.986961 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Nov 1 00:12:40.986981 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Nov 1 00:12:40.986998 kernel: audit: initializing netlink subsys (disabled) Nov 1 00:12:40.987014 kernel: audit: type=2000 audit(0.293:1): state=initialized audit_enabled=0 res=1 Nov 1 00:12:40.987030 kernel: thermal_sys: Registered thermal governor 'step_wise' Nov 1 00:12:40.987046 kernel: cpuidle: using governor menu Nov 1 00:12:40.987066 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Nov 1 00:12:40.987083 kernel: ASID allocator initialised with 32768 entries Nov 1 00:12:40.987099 kernel: ACPI: bus type PCI registered Nov 1 00:12:40.987115 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Nov 1 00:12:40.987163 kernel: Serial: AMBA PL011 UART driver Nov 1 00:12:40.987179 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Nov 1 00:12:40.987196 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Nov 1 00:12:40.987212 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Nov 1 00:12:40.987229 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Nov 1 00:12:40.987250 kernel: cryptd: max_cpu_qlen set to 1000 Nov 1 00:12:40.987266 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Nov 1 00:12:40.987282 kernel: ACPI: Added _OSI(Module Device) Nov 1 00:12:40.987298 kernel: ACPI: Added _OSI(Processor Device) Nov 1 00:12:40.987315 kernel: ACPI: Added _OSI(Processor Aggregator Device) Nov 1 00:12:40.987331 kernel: ACPI: Added _OSI(Linux-Dell-Video) Nov 1 00:12:40.987347 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Nov 1 00:12:40.987363 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Nov 1 00:12:40.987413 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Nov 1 00:12:40.987440 kernel: ACPI: Interpreter enabled Nov 1 00:12:40.987466 kernel: ACPI: Using GIC for interrupt routing Nov 1 00:12:40.987483 kernel: ACPI: MCFG table detected, 1 entries Nov 1 00:12:40.987499 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-0f]) Nov 1 00:12:40.987808 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Nov 1 00:12:40.988078 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Nov 1 00:12:40.988325 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Nov 1 00:12:40.995863 kernel: acpi PNP0A08:00: ECAM area [mem 0x20000000-0x20ffffff] reserved by PNP0C02:00 Nov 1 00:12:40.996130 kernel: acpi PNP0A08:00: ECAM at [mem 0x20000000-0x20ffffff] for [bus 00-0f] Nov 1 00:12:40.996157 kernel: ACPI: Remapped I/O 0x000000001fff0000 to [io 0x0000-0xffff window] Nov 1 00:12:40.996175 kernel: acpiphp: Slot [1] registered Nov 1 00:12:40.996192 kernel: acpiphp: Slot [2] registered Nov 1 00:12:40.996209 kernel: acpiphp: Slot [3] registered Nov 1 00:12:40.996225 kernel: acpiphp: Slot [4] registered Nov 1 00:12:40.996241 kernel: acpiphp: Slot [5] registered Nov 1 00:12:40.996258 kernel: acpiphp: Slot [6] registered Nov 1 00:12:40.996274 kernel: acpiphp: Slot [7] registered Nov 1 00:12:40.996296 kernel: acpiphp: Slot [8] registered Nov 1 00:12:40.996312 kernel: acpiphp: Slot [9] registered Nov 1 00:12:40.996328 kernel: acpiphp: Slot [10] registered Nov 1 00:12:40.996344 kernel: acpiphp: Slot [11] registered Nov 1 00:12:40.996360 kernel: acpiphp: Slot [12] registered Nov 1 00:12:40.996376 kernel: acpiphp: Slot [13] registered Nov 1 00:12:40.996392 kernel: acpiphp: Slot [14] registered Nov 1 00:12:40.996408 kernel: acpiphp: Slot [15] registered Nov 1 00:12:40.996425 kernel: acpiphp: Slot [16] registered Nov 1 00:12:40.996445 kernel: acpiphp: Slot [17] registered Nov 1 00:12:40.996461 kernel: acpiphp: Slot [18] registered Nov 1 00:12:40.996477 kernel: acpiphp: Slot [19] registered Nov 1 00:12:40.996493 kernel: acpiphp: Slot [20] registered Nov 1 00:12:40.996509 kernel: acpiphp: Slot [21] registered Nov 1 00:12:40.996525 kernel: acpiphp: Slot [22] registered Nov 1 00:12:40.996541 kernel: acpiphp: Slot [23] registered Nov 1 00:12:40.996557 kernel: acpiphp: Slot [24] registered Nov 1 00:12:40.996573 kernel: acpiphp: Slot [25] registered Nov 1 00:12:40.996589 kernel: acpiphp: Slot [26] registered Nov 1 00:12:40.996609 kernel: acpiphp: Slot [27] registered Nov 1 00:12:40.996625 kernel: acpiphp: Slot [28] registered Nov 1 00:12:40.996641 kernel: acpiphp: Slot [29] registered Nov 1 00:12:40.996657 kernel: acpiphp: Slot [30] registered Nov 1 00:12:40.996673 kernel: acpiphp: Slot [31] registered Nov 1 00:12:40.996689 kernel: PCI host bridge to bus 0000:00 Nov 1 00:12:40.996918 kernel: pci_bus 0000:00: root bus resource [mem 0x80000000-0xffffffff window] Nov 1 00:12:40.997142 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Nov 1 00:12:40.997360 kernel: pci_bus 0000:00: root bus resource [mem 0x400000000000-0x407fffffffff window] Nov 1 00:12:40.997565 kernel: pci_bus 0000:00: root bus resource [bus 00-0f] Nov 1 00:12:40.997811 kernel: pci 0000:00:00.0: [1d0f:0200] type 00 class 0x060000 Nov 1 00:12:41.000879 kernel: pci 0000:00:01.0: [1d0f:8250] type 00 class 0x070003 Nov 1 00:12:41.001163 kernel: pci 0000:00:01.0: reg 0x10: [mem 0x80118000-0x80118fff] Nov 1 00:12:41.001389 kernel: pci 0000:00:04.0: [1d0f:8061] type 00 class 0x010802 Nov 1 00:12:41.001597 kernel: pci 0000:00:04.0: reg 0x10: [mem 0x80114000-0x80117fff] Nov 1 00:12:41.001814 kernel: pci 0000:00:04.0: PME# supported from D0 D1 D2 D3hot D3cold Nov 1 00:12:41.002056 kernel: pci 0000:00:05.0: [1d0f:ec20] type 00 class 0x020000 Nov 1 00:12:41.002292 kernel: pci 0000:00:05.0: reg 0x10: [mem 0x80110000-0x80113fff] Nov 1 00:12:41.002491 kernel: pci 0000:00:05.0: reg 0x18: [mem 0x80000000-0x800fffff pref] Nov 1 00:12:41.002692 kernel: pci 0000:00:05.0: reg 0x20: [mem 0x80100000-0x8010ffff] Nov 1 00:12:41.002894 kernel: pci 0000:00:05.0: PME# supported from D0 D1 D2 D3hot D3cold Nov 1 00:12:41.003097 kernel: pci 0000:00:05.0: BAR 2: assigned [mem 0x80000000-0x800fffff pref] Nov 1 00:12:41.003335 kernel: pci 0000:00:05.0: BAR 4: assigned [mem 0x80100000-0x8010ffff] Nov 1 00:12:41.003538 kernel: pci 0000:00:04.0: BAR 0: assigned [mem 0x80110000-0x80113fff] Nov 1 00:12:41.003731 kernel: pci 0000:00:05.0: BAR 0: assigned [mem 0x80114000-0x80117fff] Nov 1 00:12:41.003951 kernel: pci 0000:00:01.0: BAR 0: assigned [mem 0x80118000-0x80118fff] Nov 1 00:12:41.004234 kernel: pci_bus 0000:00: resource 4 [mem 0x80000000-0xffffffff window] Nov 1 00:12:41.004444 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Nov 1 00:12:41.004634 kernel: pci_bus 0000:00: resource 6 [mem 0x400000000000-0x407fffffffff window] Nov 1 00:12:41.004658 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Nov 1 00:12:41.004676 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Nov 1 00:12:41.004693 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Nov 1 00:12:41.004710 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Nov 1 00:12:41.004726 kernel: iommu: Default domain type: Translated Nov 1 00:12:41.004743 kernel: iommu: DMA domain TLB invalidation policy: strict mode Nov 1 00:12:41.004759 kernel: vgaarb: loaded Nov 1 00:12:41.004775 kernel: pps_core: LinuxPPS API ver. 1 registered Nov 1 00:12:41.004796 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Nov 1 00:12:41.004813 kernel: PTP clock support registered Nov 1 00:12:41.004829 kernel: Registered efivars operations Nov 1 00:12:41.004845 kernel: clocksource: Switched to clocksource arch_sys_counter Nov 1 00:12:41.004862 kernel: VFS: Disk quotas dquot_6.6.0 Nov 1 00:12:41.004878 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Nov 1 00:12:41.004894 kernel: pnp: PnP ACPI init Nov 1 00:12:41.005091 kernel: system 00:00: [mem 0x20000000-0x2fffffff] could not be reserved Nov 1 00:12:41.005200 kernel: pnp: PnP ACPI: found 1 devices Nov 1 00:12:41.005224 kernel: NET: Registered PF_INET protocol family Nov 1 00:12:41.005241 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Nov 1 00:12:41.005258 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Nov 1 00:12:41.005275 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Nov 1 00:12:41.005292 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Nov 1 00:12:41.010157 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Nov 1 00:12:41.010177 kernel: TCP: Hash tables configured (established 32768 bind 32768) Nov 1 00:12:41.010193 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Nov 1 00:12:41.010218 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Nov 1 00:12:41.010235 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Nov 1 00:12:41.010251 kernel: PCI: CLS 0 bytes, default 64 Nov 1 00:12:41.010268 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 3 counters available Nov 1 00:12:41.010284 kernel: kvm [1]: HYP mode not available Nov 1 00:12:41.010300 kernel: Initialise system trusted keyrings Nov 1 00:12:41.010317 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Nov 1 00:12:41.010334 kernel: Key type asymmetric registered Nov 1 00:12:41.010350 kernel: Asymmetric key parser 'x509' registered Nov 1 00:12:41.010371 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Nov 1 00:12:41.010388 kernel: io scheduler mq-deadline registered Nov 1 00:12:41.010405 kernel: io scheduler kyber registered Nov 1 00:12:41.010421 kernel: io scheduler bfq registered Nov 1 00:12:41.010657 kernel: pl061_gpio ARMH0061:00: PL061 GPIO chip registered Nov 1 00:12:41.010684 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Nov 1 00:12:41.010700 kernel: ACPI: button: Power Button [PWRB] Nov 1 00:12:41.010717 kernel: input: Sleep Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0E:00/input/input1 Nov 1 00:12:41.010734 kernel: ACPI: button: Sleep Button [SLPB] Nov 1 00:12:41.010756 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Nov 1 00:12:41.010773 kernel: ACPI: \_SB_.PCI0.GSI2: Enabled at IRQ 37 Nov 1 00:12:41.010975 kernel: serial 0000:00:01.0: enabling device (0010 -> 0012) Nov 1 00:12:41.010999 kernel: printk: console [ttyS0] disabled Nov 1 00:12:41.011016 kernel: 0000:00:01.0: ttyS0 at MMIO 0x80118000 (irq = 14, base_baud = 115200) is a 16550A Nov 1 00:12:41.011033 kernel: printk: console [ttyS0] enabled Nov 1 00:12:41.011050 kernel: printk: bootconsole [uart0] disabled Nov 1 00:12:41.011066 kernel: thunder_xcv, ver 1.0 Nov 1 00:12:41.011082 kernel: thunder_bgx, ver 1.0 Nov 1 00:12:41.011104 kernel: nicpf, ver 1.0 Nov 1 00:12:41.011143 kernel: nicvf, ver 1.0 Nov 1 00:12:41.011359 kernel: rtc-efi rtc-efi.0: registered as rtc0 Nov 1 00:12:41.011552 kernel: rtc-efi rtc-efi.0: setting system clock to 2025-11-01T00:12:40 UTC (1761955960) Nov 1 00:12:41.011578 kernel: hid: raw HID events driver (C) Jiri Kosina Nov 1 00:12:41.011596 kernel: NET: Registered PF_INET6 protocol family Nov 1 00:12:41.011613 kernel: Segment Routing with IPv6 Nov 1 00:12:41.011629 kernel: In-situ OAM (IOAM) with IPv6 Nov 1 00:12:41.011653 kernel: NET: Registered PF_PACKET protocol family Nov 1 00:12:41.011670 kernel: Key type dns_resolver registered Nov 1 00:12:41.011686 kernel: registered taskstats version 1 Nov 1 00:12:41.011703 kernel: Loading compiled-in X.509 certificates Nov 1 00:12:41.011720 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.192-flatcar: 4aa5071b9a6f96878595e36d4bd5862a671c915d' Nov 1 00:12:41.011736 kernel: Key type .fscrypt registered Nov 1 00:12:41.011752 kernel: Key type fscrypt-provisioning registered Nov 1 00:12:41.011768 kernel: ima: No TPM chip found, activating TPM-bypass! Nov 1 00:12:41.011784 kernel: ima: Allocated hash algorithm: sha1 Nov 1 00:12:41.011805 kernel: ima: No architecture policies found Nov 1 00:12:41.011821 kernel: clk: Disabling unused clocks Nov 1 00:12:41.011837 kernel: Freeing unused kernel memory: 36416K Nov 1 00:12:41.011854 kernel: Run /init as init process Nov 1 00:12:41.011870 kernel: with arguments: Nov 1 00:12:41.011886 kernel: /init Nov 1 00:12:41.011902 kernel: with environment: Nov 1 00:12:41.011918 kernel: HOME=/ Nov 1 00:12:41.011934 kernel: TERM=linux Nov 1 00:12:41.011954 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Nov 1 00:12:41.011976 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Nov 1 00:12:41.011996 systemd[1]: Detected virtualization amazon. Nov 1 00:12:41.012014 systemd[1]: Detected architecture arm64. Nov 1 00:12:41.012031 systemd[1]: Running in initrd. Nov 1 00:12:41.012049 systemd[1]: No hostname configured, using default hostname. Nov 1 00:12:41.012065 systemd[1]: Hostname set to . Nov 1 00:12:41.012088 systemd[1]: Initializing machine ID from VM UUID. Nov 1 00:12:41.012106 systemd[1]: Queued start job for default target initrd.target. Nov 1 00:12:41.012147 systemd[1]: Started systemd-ask-password-console.path. Nov 1 00:12:41.012168 systemd[1]: Reached target cryptsetup.target. Nov 1 00:12:41.012185 systemd[1]: Reached target paths.target. Nov 1 00:12:41.012202 systemd[1]: Reached target slices.target. Nov 1 00:12:41.012220 systemd[1]: Reached target swap.target. Nov 1 00:12:41.012237 systemd[1]: Reached target timers.target. Nov 1 00:12:41.012261 systemd[1]: Listening on iscsid.socket. Nov 1 00:12:41.012279 systemd[1]: Listening on iscsiuio.socket. Nov 1 00:12:41.012296 systemd[1]: Listening on systemd-journald-audit.socket. Nov 1 00:12:41.012314 systemd[1]: Listening on systemd-journald-dev-log.socket. Nov 1 00:12:41.012331 systemd[1]: Listening on systemd-journald.socket. Nov 1 00:12:41.012349 systemd[1]: Listening on systemd-networkd.socket. Nov 1 00:12:41.012366 systemd[1]: Listening on systemd-udevd-control.socket. Nov 1 00:12:41.012384 systemd[1]: Listening on systemd-udevd-kernel.socket. Nov 1 00:12:41.012405 systemd[1]: Reached target sockets.target. Nov 1 00:12:41.012423 systemd[1]: Starting kmod-static-nodes.service... Nov 1 00:12:41.012441 systemd[1]: Finished network-cleanup.service. Nov 1 00:12:41.012458 systemd[1]: Starting systemd-fsck-usr.service... Nov 1 00:12:41.012475 systemd[1]: Starting systemd-journald.service... Nov 1 00:12:41.012493 systemd[1]: Starting systemd-modules-load.service... Nov 1 00:12:41.012511 systemd[1]: Starting systemd-resolved.service... Nov 1 00:12:41.012528 systemd[1]: Starting systemd-vconsole-setup.service... Nov 1 00:12:41.012546 systemd[1]: Finished kmod-static-nodes.service. Nov 1 00:12:41.012568 kernel: audit: type=1130 audit(1761955960.976:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:41.012586 systemd[1]: Finished systemd-fsck-usr.service. Nov 1 00:12:41.012604 kernel: audit: type=1130 audit(1761955960.989:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:41.012621 systemd[1]: Finished systemd-vconsole-setup.service. Nov 1 00:12:41.012639 systemd[1]: Starting dracut-cmdline-ask.service... Nov 1 00:12:41.012660 systemd-journald[310]: Journal started Nov 1 00:12:41.012753 systemd-journald[310]: Runtime Journal (/run/log/journal/ec26083a95f71c4b0b0fae016a4339fa) is 8.0M, max 75.4M, 67.4M free. Nov 1 00:12:40.976000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:40.989000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:41.000996 systemd-modules-load[311]: Inserted module 'overlay' Nov 1 00:12:41.023706 kernel: audit: type=1130 audit(1761955961.009:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:41.009000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:41.043746 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Nov 1 00:12:41.049968 systemd[1]: Started systemd-journald.service. Nov 1 00:12:41.067291 kernel: audit: type=1130 audit(1761955961.057:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:41.057000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:41.068185 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Nov 1 00:12:41.067000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:41.083015 kernel: audit: type=1130 audit(1761955961.067:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:41.089603 systemd-resolved[312]: Positive Trust Anchors: Nov 1 00:12:41.091712 systemd-resolved[312]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Nov 1 00:12:41.094864 systemd-resolved[312]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Nov 1 00:12:41.110703 systemd[1]: Finished dracut-cmdline-ask.service. Nov 1 00:12:41.114458 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Nov 1 00:12:41.111000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:41.123199 systemd[1]: Starting dracut-cmdline.service... Nov 1 00:12:41.128247 kernel: audit: type=1130 audit(1761955961.111:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:41.141272 kernel: Bridge firewalling registered Nov 1 00:12:41.140543 systemd-modules-load[311]: Inserted module 'br_netfilter' Nov 1 00:12:41.159214 dracut-cmdline[327]: dracut-dracut-053 Nov 1 00:12:41.172587 dracut-cmdline[327]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlycon flatcar.first_boot=detected acpi=force flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=284392058f112e827cd7c521dcce1be27e1367d0030df494642d12e41e342e29 Nov 1 00:12:41.185617 kernel: SCSI subsystem initialized Nov 1 00:12:41.198256 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Nov 1 00:12:41.198323 kernel: device-mapper: uevent: version 1.0.3 Nov 1 00:12:41.202654 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Nov 1 00:12:41.211266 systemd-modules-load[311]: Inserted module 'dm_multipath' Nov 1 00:12:41.215582 systemd[1]: Finished systemd-modules-load.service. Nov 1 00:12:41.230138 kernel: audit: type=1130 audit(1761955961.216:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:41.216000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:41.226544 systemd[1]: Starting systemd-sysctl.service... Nov 1 00:12:41.256029 systemd[1]: Finished systemd-sysctl.service. Nov 1 00:12:41.258000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:41.269143 kernel: audit: type=1130 audit(1761955961.258:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:41.346155 kernel: Loading iSCSI transport class v2.0-870. Nov 1 00:12:41.367157 kernel: iscsi: registered transport (tcp) Nov 1 00:12:41.395677 kernel: iscsi: registered transport (qla4xxx) Nov 1 00:12:41.395758 kernel: QLogic iSCSI HBA Driver Nov 1 00:12:41.560189 kernel: random: crng init done Nov 1 00:12:41.560296 systemd-resolved[312]: Defaulting to hostname 'linux'. Nov 1 00:12:41.564151 systemd[1]: Started systemd-resolved.service. Nov 1 00:12:41.577197 kernel: audit: type=1130 audit(1761955961.564:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:41.564000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:41.566156 systemd[1]: Reached target nss-lookup.target. Nov 1 00:12:41.593367 systemd[1]: Finished dracut-cmdline.service. Nov 1 00:12:41.592000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:41.596418 systemd[1]: Starting dracut-pre-udev.service... Nov 1 00:12:41.663157 kernel: raid6: neonx8 gen() 6215 MB/s Nov 1 00:12:41.681152 kernel: raid6: neonx8 xor() 4751 MB/s Nov 1 00:12:41.699145 kernel: raid6: neonx4 gen() 6417 MB/s Nov 1 00:12:41.717152 kernel: raid6: neonx4 xor() 4976 MB/s Nov 1 00:12:41.735148 kernel: raid6: neonx2 gen() 5723 MB/s Nov 1 00:12:41.753152 kernel: raid6: neonx2 xor() 4535 MB/s Nov 1 00:12:41.771152 kernel: raid6: neonx1 gen() 4406 MB/s Nov 1 00:12:41.789153 kernel: raid6: neonx1 xor() 3676 MB/s Nov 1 00:12:41.807152 kernel: raid6: int64x8 gen() 3398 MB/s Nov 1 00:12:41.825153 kernel: raid6: int64x8 xor() 2083 MB/s Nov 1 00:12:41.843151 kernel: raid6: int64x4 gen() 3771 MB/s Nov 1 00:12:41.861154 kernel: raid6: int64x4 xor() 2180 MB/s Nov 1 00:12:41.879160 kernel: raid6: int64x2 gen() 3583 MB/s Nov 1 00:12:41.897153 kernel: raid6: int64x2 xor() 1940 MB/s Nov 1 00:12:41.915153 kernel: raid6: int64x1 gen() 2752 MB/s Nov 1 00:12:41.934806 kernel: raid6: int64x1 xor() 1447 MB/s Nov 1 00:12:41.934836 kernel: raid6: using algorithm neonx4 gen() 6417 MB/s Nov 1 00:12:41.934860 kernel: raid6: .... xor() 4976 MB/s, rmw enabled Nov 1 00:12:41.936703 kernel: raid6: using neon recovery algorithm Nov 1 00:12:41.957223 kernel: xor: measuring software checksum speed Nov 1 00:12:41.957286 kernel: 8regs : 9099 MB/sec Nov 1 00:12:41.959178 kernel: 32regs : 10828 MB/sec Nov 1 00:12:41.961207 kernel: arm64_neon : 9024 MB/sec Nov 1 00:12:41.961237 kernel: xor: using function: 32regs (10828 MB/sec) Nov 1 00:12:42.059171 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Nov 1 00:12:42.076099 systemd[1]: Finished dracut-pre-udev.service. Nov 1 00:12:42.076000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:42.077000 audit: BPF prog-id=7 op=LOAD Nov 1 00:12:42.080000 audit: BPF prog-id=8 op=LOAD Nov 1 00:12:42.082845 systemd[1]: Starting systemd-udevd.service... Nov 1 00:12:42.112990 systemd-udevd[509]: Using default interface naming scheme 'v252'. Nov 1 00:12:42.124148 systemd[1]: Started systemd-udevd.service. Nov 1 00:12:42.133000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:42.135576 systemd[1]: Starting dracut-pre-trigger.service... Nov 1 00:12:42.163861 dracut-pre-trigger[512]: rd.md=0: removing MD RAID activation Nov 1 00:12:42.221526 systemd[1]: Finished dracut-pre-trigger.service. Nov 1 00:12:42.224000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:42.226608 systemd[1]: Starting systemd-udev-trigger.service... Nov 1 00:12:42.328185 systemd[1]: Finished systemd-udev-trigger.service. Nov 1 00:12:42.330000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:42.462766 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Nov 1 00:12:42.462832 kernel: ena 0000:00:05.0: enabling device (0010 -> 0012) Nov 1 00:12:42.480072 kernel: ena 0000:00:05.0: ENA device version: 0.10 Nov 1 00:12:42.480336 kernel: ena 0000:00:05.0: ENA controller version: 0.0.1 implementation version 1 Nov 1 00:12:42.480569 kernel: ACPI: \_SB_.PCI0.GSI0: Enabled at IRQ 35 Nov 1 00:12:42.480597 kernel: ena 0000:00:05.0: Elastic Network Adapter (ENA) found at mem 80114000, mac addr 06:e2:73:89:47:59 Nov 1 00:12:42.480813 kernel: nvme nvme0: pci function 0000:00:04.0 Nov 1 00:12:42.481708 (udev-worker)[552]: Network interface NamePolicy= disabled on kernel command line. Nov 1 00:12:42.492168 kernel: nvme nvme0: 2/0/0 default/read/poll queues Nov 1 00:12:42.501816 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Nov 1 00:12:42.501872 kernel: GPT:9289727 != 33554431 Nov 1 00:12:42.504207 kernel: GPT:Alternate GPT header not at the end of the disk. Nov 1 00:12:42.505568 kernel: GPT:9289727 != 33554431 Nov 1 00:12:42.507589 kernel: GPT: Use GNU Parted to correct GPT errors. Nov 1 00:12:42.509236 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Nov 1 00:12:42.581158 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/nvme0n1p6 scanned by (udev-worker) (550) Nov 1 00:12:42.661756 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Nov 1 00:12:42.681414 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Nov 1 00:12:42.707078 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Nov 1 00:12:42.719758 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Nov 1 00:12:42.724053 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Nov 1 00:12:42.739639 systemd[1]: Starting disk-uuid.service... Nov 1 00:12:42.750946 disk-uuid[663]: Primary Header is updated. Nov 1 00:12:42.750946 disk-uuid[663]: Secondary Entries is updated. Nov 1 00:12:42.750946 disk-uuid[663]: Secondary Header is updated. Nov 1 00:12:42.761212 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Nov 1 00:12:42.771154 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Nov 1 00:12:42.779160 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Nov 1 00:12:43.779801 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Nov 1 00:12:43.779867 disk-uuid[664]: The operation has completed successfully. Nov 1 00:12:43.944714 systemd[1]: disk-uuid.service: Deactivated successfully. Nov 1 00:12:43.949000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:43.949000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:43.944915 systemd[1]: Finished disk-uuid.service. Nov 1 00:12:43.972945 systemd[1]: Starting verity-setup.service... Nov 1 00:12:44.011174 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Nov 1 00:12:44.116565 systemd[1]: Found device dev-mapper-usr.device. Nov 1 00:12:44.120625 systemd[1]: Finished verity-setup.service. Nov 1 00:12:44.122000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:44.125515 systemd[1]: Mounting sysusr-usr.mount... Nov 1 00:12:44.223170 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Nov 1 00:12:44.223857 systemd[1]: Mounted sysusr-usr.mount. Nov 1 00:12:44.224294 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Nov 1 00:12:44.225566 systemd[1]: Starting ignition-setup.service... Nov 1 00:12:44.227009 systemd[1]: Starting parse-ip-for-networkd.service... Nov 1 00:12:44.269445 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Nov 1 00:12:44.269520 kernel: BTRFS info (device nvme0n1p6): using free space tree Nov 1 00:12:44.272056 kernel: BTRFS info (device nvme0n1p6): has skinny extents Nov 1 00:12:44.315147 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Nov 1 00:12:44.334606 systemd[1]: mnt-oem.mount: Deactivated successfully. Nov 1 00:12:44.353093 systemd[1]: Finished ignition-setup.service. Nov 1 00:12:44.354000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:44.364335 systemd[1]: Starting ignition-fetch-offline.service... Nov 1 00:12:44.398918 systemd[1]: Finished parse-ip-for-networkd.service. Nov 1 00:12:44.399000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:44.401000 audit: BPF prog-id=9 op=LOAD Nov 1 00:12:44.405278 systemd[1]: Starting systemd-networkd.service... Nov 1 00:12:44.454992 systemd-networkd[1188]: lo: Link UP Nov 1 00:12:44.455014 systemd-networkd[1188]: lo: Gained carrier Nov 1 00:12:44.462000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:44.455999 systemd-networkd[1188]: Enumeration completed Nov 1 00:12:44.456167 systemd[1]: Started systemd-networkd.service. Nov 1 00:12:44.459149 systemd-networkd[1188]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Nov 1 00:12:44.464018 systemd[1]: Reached target network.target. Nov 1 00:12:44.465470 systemd-networkd[1188]: eth0: Link UP Nov 1 00:12:44.465478 systemd-networkd[1188]: eth0: Gained carrier Nov 1 00:12:44.468886 systemd[1]: Starting iscsiuio.service... Nov 1 00:12:44.486241 systemd[1]: Started iscsiuio.service. Nov 1 00:12:44.501800 systemd-networkd[1188]: eth0: DHCPv4 address 172.31.27.146/20, gateway 172.31.16.1 acquired from 172.31.16.1 Nov 1 00:12:44.501000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:44.506383 systemd[1]: Starting iscsid.service... Nov 1 00:12:44.517982 iscsid[1193]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Nov 1 00:12:44.517982 iscsid[1193]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Nov 1 00:12:44.517982 iscsid[1193]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Nov 1 00:12:44.517982 iscsid[1193]: If using hardware iscsi like qla4xxx this message can be ignored. Nov 1 00:12:44.517982 iscsid[1193]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Nov 1 00:12:44.540210 iscsid[1193]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Nov 1 00:12:44.548928 systemd[1]: Started iscsid.service. Nov 1 00:12:44.549000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:44.552046 systemd[1]: Starting dracut-initqueue.service... Nov 1 00:12:44.577070 systemd[1]: Finished dracut-initqueue.service. Nov 1 00:12:44.576000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:44.580682 systemd[1]: Reached target remote-fs-pre.target. Nov 1 00:12:44.582585 systemd[1]: Reached target remote-cryptsetup.target. Nov 1 00:12:44.584500 systemd[1]: Reached target remote-fs.target. Nov 1 00:12:44.594665 systemd[1]: Starting dracut-pre-mount.service... Nov 1 00:12:44.615853 systemd[1]: Finished dracut-pre-mount.service. Nov 1 00:12:44.614000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:45.232582 ignition[1166]: Ignition 2.14.0 Nov 1 00:12:45.233063 ignition[1166]: Stage: fetch-offline Nov 1 00:12:45.233625 ignition[1166]: reading system config file "/usr/lib/ignition/base.d/base.ign" Nov 1 00:12:45.233687 ignition[1166]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Nov 1 00:12:45.252844 ignition[1166]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Nov 1 00:12:45.253967 ignition[1166]: Ignition finished successfully Nov 1 00:12:45.259737 systemd[1]: Finished ignition-fetch-offline.service. Nov 1 00:12:45.272395 kernel: kauditd_printk_skb: 18 callbacks suppressed Nov 1 00:12:45.272481 kernel: audit: type=1130 audit(1761955965.264:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:45.264000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:45.267208 systemd[1]: Starting ignition-fetch.service... Nov 1 00:12:45.284404 ignition[1212]: Ignition 2.14.0 Nov 1 00:12:45.286192 ignition[1212]: Stage: fetch Nov 1 00:12:45.287777 ignition[1212]: reading system config file "/usr/lib/ignition/base.d/base.ign" Nov 1 00:12:45.290293 ignition[1212]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Nov 1 00:12:45.301205 ignition[1212]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Nov 1 00:12:45.303566 ignition[1212]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Nov 1 00:12:45.316459 ignition[1212]: INFO : PUT result: OK Nov 1 00:12:45.321779 ignition[1212]: DEBUG : parsed url from cmdline: "" Nov 1 00:12:45.323885 ignition[1212]: INFO : no config URL provided Nov 1 00:12:45.323885 ignition[1212]: INFO : reading system config file "/usr/lib/ignition/user.ign" Nov 1 00:12:45.323885 ignition[1212]: INFO : no config at "/usr/lib/ignition/user.ign" Nov 1 00:12:45.323885 ignition[1212]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Nov 1 00:12:45.334828 ignition[1212]: INFO : PUT result: OK Nov 1 00:12:45.336488 ignition[1212]: INFO : GET http://169.254.169.254/2019-10-01/user-data: attempt #1 Nov 1 00:12:45.340292 ignition[1212]: INFO : GET result: OK Nov 1 00:12:45.342025 ignition[1212]: DEBUG : parsing config with SHA512: 56e343a4a7a8b3647b64702ceeea3fd0bbff614f101511c57a6a19512cc8eaf37d3911a444ef4f0ad632363b02e3cc129ac26ea61f3ec075af276ec78b6f61a1 Nov 1 00:12:45.355842 unknown[1212]: fetched base config from "system" Nov 1 00:12:45.355871 unknown[1212]: fetched base config from "system" Nov 1 00:12:45.355887 unknown[1212]: fetched user config from "aws" Nov 1 00:12:45.362107 ignition[1212]: fetch: fetch complete Nov 1 00:12:45.362178 ignition[1212]: fetch: fetch passed Nov 1 00:12:45.362274 ignition[1212]: Ignition finished successfully Nov 1 00:12:45.368807 systemd[1]: Finished ignition-fetch.service. Nov 1 00:12:45.373000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:45.384167 kernel: audit: type=1130 audit(1761955965.373:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:45.384453 systemd[1]: Starting ignition-kargs.service... Nov 1 00:12:45.403232 ignition[1218]: Ignition 2.14.0 Nov 1 00:12:45.405031 ignition[1218]: Stage: kargs Nov 1 00:12:45.406660 ignition[1218]: reading system config file "/usr/lib/ignition/base.d/base.ign" Nov 1 00:12:45.409200 ignition[1218]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Nov 1 00:12:45.419789 ignition[1218]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Nov 1 00:12:45.422570 ignition[1218]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Nov 1 00:12:45.426213 ignition[1218]: INFO : PUT result: OK Nov 1 00:12:45.431172 ignition[1218]: kargs: kargs passed Nov 1 00:12:45.431273 ignition[1218]: Ignition finished successfully Nov 1 00:12:45.434686 systemd[1]: Finished ignition-kargs.service. Nov 1 00:12:45.437000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:45.440560 systemd[1]: Starting ignition-disks.service... Nov 1 00:12:45.454288 kernel: audit: type=1130 audit(1761955965.437:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:45.456875 ignition[1224]: Ignition 2.14.0 Nov 1 00:12:45.456901 ignition[1224]: Stage: disks Nov 1 00:12:45.457273 ignition[1224]: reading system config file "/usr/lib/ignition/base.d/base.ign" Nov 1 00:12:45.457333 ignition[1224]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Nov 1 00:12:45.471490 ignition[1224]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Nov 1 00:12:45.474158 ignition[1224]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Nov 1 00:12:45.476836 ignition[1224]: INFO : PUT result: OK Nov 1 00:12:45.481986 ignition[1224]: disks: disks passed Nov 1 00:12:45.482110 ignition[1224]: Ignition finished successfully Nov 1 00:12:45.486528 systemd[1]: Finished ignition-disks.service. Nov 1 00:12:45.489991 systemd[1]: Reached target initrd-root-device.target. Nov 1 00:12:45.488000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:45.492018 systemd[1]: Reached target local-fs-pre.target. Nov 1 00:12:45.492149 systemd[1]: Reached target local-fs.target. Nov 1 00:12:45.507994 kernel: audit: type=1130 audit(1761955965.488:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:45.508101 systemd[1]: Reached target sysinit.target. Nov 1 00:12:45.511207 systemd[1]: Reached target basic.target. Nov 1 00:12:45.517303 systemd[1]: Starting systemd-fsck-root.service... Nov 1 00:12:45.554562 systemd-fsck[1232]: ROOT: clean, 637/553520 files, 56031/553472 blocks Nov 1 00:12:45.559069 systemd[1]: Finished systemd-fsck-root.service. Nov 1 00:12:45.574256 kernel: audit: type=1130 audit(1761955965.561:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:45.561000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:45.564092 systemd[1]: Mounting sysroot.mount... Nov 1 00:12:45.591170 kernel: EXT4-fs (nvme0n1p9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Nov 1 00:12:45.592693 systemd[1]: Mounted sysroot.mount. Nov 1 00:12:45.598720 systemd[1]: Reached target initrd-root-fs.target. Nov 1 00:12:45.617599 systemd[1]: Mounting sysroot-usr.mount... Nov 1 00:12:45.624770 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Nov 1 00:12:45.624866 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Nov 1 00:12:45.624924 systemd[1]: Reached target ignition-diskful.target. Nov 1 00:12:45.636952 systemd[1]: Mounted sysroot-usr.mount. Nov 1 00:12:45.661692 systemd[1]: Mounting sysroot-usr-share-oem.mount... Nov 1 00:12:45.669292 systemd[1]: Starting initrd-setup-root.service... Nov 1 00:12:45.688159 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/nvme0n1p6 scanned by mount (1249) Nov 1 00:12:45.688977 initrd-setup-root[1254]: cut: /sysroot/etc/passwd: No such file or directory Nov 1 00:12:45.697983 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Nov 1 00:12:45.698065 kernel: BTRFS info (device nvme0n1p6): using free space tree Nov 1 00:12:45.698091 kernel: BTRFS info (device nvme0n1p6): has skinny extents Nov 1 00:12:45.712274 initrd-setup-root[1278]: cut: /sysroot/etc/group: No such file or directory Nov 1 00:12:45.720752 initrd-setup-root[1286]: cut: /sysroot/etc/shadow: No such file or directory Nov 1 00:12:45.730406 initrd-setup-root[1294]: cut: /sysroot/etc/gshadow: No such file or directory Nov 1 00:12:45.742202 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Nov 1 00:12:45.746468 systemd[1]: Mounted sysroot-usr-share-oem.mount. Nov 1 00:12:45.955162 systemd[1]: Finished initrd-setup-root.service. Nov 1 00:12:45.957000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:45.959940 systemd[1]: Starting ignition-mount.service... Nov 1 00:12:45.969629 kernel: audit: type=1130 audit(1761955965.957:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:45.970773 systemd[1]: Starting sysroot-boot.service... Nov 1 00:12:45.983355 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Nov 1 00:12:45.983532 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Nov 1 00:12:46.013812 systemd[1]: Finished sysroot-boot.service. Nov 1 00:12:46.027379 kernel: audit: type=1130 audit(1761955966.017:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:46.017000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:46.063811 ignition[1317]: INFO : Ignition 2.14.0 Nov 1 00:12:46.065899 ignition[1317]: INFO : Stage: mount Nov 1 00:12:46.067738 ignition[1317]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Nov 1 00:12:46.070495 ignition[1317]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Nov 1 00:12:46.085594 ignition[1317]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Nov 1 00:12:46.088273 ignition[1317]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Nov 1 00:12:46.092050 ignition[1317]: INFO : PUT result: OK Nov 1 00:12:46.097186 ignition[1317]: INFO : mount: mount passed Nov 1 00:12:46.098970 ignition[1317]: INFO : Ignition finished successfully Nov 1 00:12:46.102039 systemd[1]: Finished ignition-mount.service. Nov 1 00:12:46.104000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:46.106833 systemd[1]: Starting ignition-files.service... Nov 1 00:12:46.116548 kernel: audit: type=1130 audit(1761955966.104:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:46.124161 systemd[1]: Mounting sysroot-usr-share-oem.mount... Nov 1 00:12:46.147165 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/nvme0n1p6 scanned by mount (1324) Nov 1 00:12:46.153681 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Nov 1 00:12:46.153740 kernel: BTRFS info (device nvme0n1p6): using free space tree Nov 1 00:12:46.153764 kernel: BTRFS info (device nvme0n1p6): has skinny extents Nov 1 00:12:46.169156 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Nov 1 00:12:46.174254 systemd[1]: Mounted sysroot-usr-share-oem.mount. Nov 1 00:12:46.192788 ignition[1343]: INFO : Ignition 2.14.0 Nov 1 00:12:46.192788 ignition[1343]: INFO : Stage: files Nov 1 00:12:46.196387 ignition[1343]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Nov 1 00:12:46.196387 ignition[1343]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Nov 1 00:12:46.214519 ignition[1343]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Nov 1 00:12:46.217209 ignition[1343]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Nov 1 00:12:46.220733 ignition[1343]: INFO : PUT result: OK Nov 1 00:12:46.225905 ignition[1343]: DEBUG : files: compiled without relabeling support, skipping Nov 1 00:12:46.231445 ignition[1343]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Nov 1 00:12:46.234624 ignition[1343]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Nov 1 00:12:46.278993 ignition[1343]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Nov 1 00:12:46.282441 ignition[1343]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Nov 1 00:12:46.287707 unknown[1343]: wrote ssh authorized keys file for user: core Nov 1 00:12:46.290159 ignition[1343]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Nov 1 00:12:46.295094 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.0-linux-arm64.tar.gz" Nov 1 00:12:46.299346 ignition[1343]: INFO : GET https://get.helm.sh/helm-v3.17.0-linux-arm64.tar.gz: attempt #1 Nov 1 00:12:46.371783 ignition[1343]: INFO : GET result: OK Nov 1 00:12:46.470309 systemd-networkd[1188]: eth0: Gained IPv6LL Nov 1 00:12:46.632893 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.0-linux-arm64.tar.gz" Nov 1 00:12:46.638408 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/etc/eks/bootstrap.sh" Nov 1 00:12:46.638408 ignition[1343]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Nov 1 00:12:46.664338 ignition[1343]: INFO : op(1): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1731634183" Nov 1 00:12:46.672620 ignition[1343]: CRITICAL : op(1): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1731634183": device or resource busy Nov 1 00:12:46.672620 ignition[1343]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1731634183", trying btrfs: device or resource busy Nov 1 00:12:46.672620 ignition[1343]: INFO : op(2): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1731634183" Nov 1 00:12:46.672620 ignition[1343]: INFO : op(2): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1731634183" Nov 1 00:12:46.692574 ignition[1343]: INFO : op(3): [started] unmounting "/mnt/oem1731634183" Nov 1 00:12:46.692574 ignition[1343]: INFO : op(3): [finished] unmounting "/mnt/oem1731634183" Nov 1 00:12:46.692574 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/etc/eks/bootstrap.sh" Nov 1 00:12:46.692574 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/install.sh" Nov 1 00:12:46.692574 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/install.sh" Nov 1 00:12:46.692574 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nginx.yaml" Nov 1 00:12:46.692574 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nginx.yaml" Nov 1 00:12:46.692574 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Nov 1 00:12:46.692574 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Nov 1 00:12:46.692574 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Nov 1 00:12:46.692574 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Nov 1 00:12:46.692574 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/etc/flatcar/update.conf" Nov 1 00:12:46.692574 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/etc/flatcar/update.conf" Nov 1 00:12:46.692574 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Nov 1 00:12:46.692574 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Nov 1 00:12:46.692574 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Nov 1 00:12:46.692574 ignition[1343]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Nov 1 00:12:46.689376 systemd[1]: mnt-oem1731634183.mount: Deactivated successfully. Nov 1 00:12:46.771367 ignition[1343]: INFO : op(4): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2418325857" Nov 1 00:12:46.771367 ignition[1343]: CRITICAL : op(4): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2418325857": device or resource busy Nov 1 00:12:46.771367 ignition[1343]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2418325857", trying btrfs: device or resource busy Nov 1 00:12:46.771367 ignition[1343]: INFO : op(5): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2418325857" Nov 1 00:12:46.771367 ignition[1343]: INFO : op(5): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2418325857" Nov 1 00:12:46.771367 ignition[1343]: INFO : op(6): [started] unmounting "/mnt/oem2418325857" Nov 1 00:12:46.771367 ignition[1343]: INFO : op(6): [finished] unmounting "/mnt/oem2418325857" Nov 1 00:12:46.771367 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Nov 1 00:12:46.771367 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Nov 1 00:12:46.771367 ignition[1343]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Nov 1 00:12:46.807483 ignition[1343]: INFO : op(7): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1310723104" Nov 1 00:12:46.807483 ignition[1343]: CRITICAL : op(7): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1310723104": device or resource busy Nov 1 00:12:46.807483 ignition[1343]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1310723104", trying btrfs: device or resource busy Nov 1 00:12:46.807483 ignition[1343]: INFO : op(8): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1310723104" Nov 1 00:12:46.807483 ignition[1343]: INFO : op(8): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1310723104" Nov 1 00:12:46.807483 ignition[1343]: INFO : op(9): [started] unmounting "/mnt/oem1310723104" Nov 1 00:12:46.807483 ignition[1343]: INFO : op(9): [finished] unmounting "/mnt/oem1310723104" Nov 1 00:12:46.807483 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Nov 1 00:12:46.807483 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(d): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Nov 1 00:12:46.807483 ignition[1343]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Nov 1 00:12:46.851302 ignition[1343]: INFO : op(a): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2154290896" Nov 1 00:12:46.854509 ignition[1343]: CRITICAL : op(a): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2154290896": device or resource busy Nov 1 00:12:46.854509 ignition[1343]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2154290896", trying btrfs: device or resource busy Nov 1 00:12:46.854509 ignition[1343]: INFO : op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2154290896" Nov 1 00:12:46.865191 ignition[1343]: INFO : op(b): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2154290896" Nov 1 00:12:46.868254 ignition[1343]: INFO : op(c): [started] unmounting "/mnt/oem2154290896" Nov 1 00:12:46.870665 ignition[1343]: INFO : op(c): [finished] unmounting "/mnt/oem2154290896" Nov 1 00:12:46.873058 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(d): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Nov 1 00:12:46.873058 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Nov 1 00:12:46.881898 ignition[1343]: INFO : GET https://extensions.flatcar.org/extensions/kubernetes-v1.32.4-arm64.raw: attempt #1 Nov 1 00:12:47.178182 ignition[1343]: INFO : GET result: OK Nov 1 00:12:47.832173 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Nov 1 00:12:47.837069 ignition[1343]: INFO : files: op(f): [started] processing unit "coreos-metadata-sshkeys@.service" Nov 1 00:12:47.837069 ignition[1343]: INFO : files: op(f): [finished] processing unit "coreos-metadata-sshkeys@.service" Nov 1 00:12:47.837069 ignition[1343]: INFO : files: op(10): [started] processing unit "amazon-ssm-agent.service" Nov 1 00:12:47.837069 ignition[1343]: INFO : files: op(10): op(11): [started] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Nov 1 00:12:47.837069 ignition[1343]: INFO : files: op(10): op(11): [finished] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Nov 1 00:12:47.837069 ignition[1343]: INFO : files: op(10): [finished] processing unit "amazon-ssm-agent.service" Nov 1 00:12:47.837069 ignition[1343]: INFO : files: op(12): [started] processing unit "nvidia.service" Nov 1 00:12:47.837069 ignition[1343]: INFO : files: op(12): [finished] processing unit "nvidia.service" Nov 1 00:12:47.837069 ignition[1343]: INFO : files: op(13): [started] processing unit "prepare-helm.service" Nov 1 00:12:47.837069 ignition[1343]: INFO : files: op(13): op(14): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Nov 1 00:12:47.837069 ignition[1343]: INFO : files: op(13): op(14): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Nov 1 00:12:47.837069 ignition[1343]: INFO : files: op(13): [finished] processing unit "prepare-helm.service" Nov 1 00:12:47.837069 ignition[1343]: INFO : files: op(15): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Nov 1 00:12:47.837069 ignition[1343]: INFO : files: op(15): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Nov 1 00:12:47.837069 ignition[1343]: INFO : files: op(16): [started] setting preset to enabled for "amazon-ssm-agent.service" Nov 1 00:12:47.837069 ignition[1343]: INFO : files: op(16): [finished] setting preset to enabled for "amazon-ssm-agent.service" Nov 1 00:12:47.837069 ignition[1343]: INFO : files: op(17): [started] setting preset to enabled for "nvidia.service" Nov 1 00:12:47.837069 ignition[1343]: INFO : files: op(17): [finished] setting preset to enabled for "nvidia.service" Nov 1 00:12:47.837069 ignition[1343]: INFO : files: op(18): [started] setting preset to enabled for "prepare-helm.service" Nov 1 00:12:47.837069 ignition[1343]: INFO : files: op(18): [finished] setting preset to enabled for "prepare-helm.service" Nov 1 00:12:47.907413 ignition[1343]: INFO : files: createResultFile: createFiles: op(19): [started] writing file "/sysroot/etc/.ignition-result.json" Nov 1 00:12:47.911305 ignition[1343]: INFO : files: createResultFile: createFiles: op(19): [finished] writing file "/sysroot/etc/.ignition-result.json" Nov 1 00:12:47.911305 ignition[1343]: INFO : files: files passed Nov 1 00:12:47.917993 ignition[1343]: INFO : Ignition finished successfully Nov 1 00:12:47.920248 systemd[1]: Finished ignition-files.service. Nov 1 00:12:47.923000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:47.933156 kernel: audit: type=1130 audit(1761955967.923:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:47.935307 systemd[1]: Starting initrd-setup-root-after-ignition.service... Nov 1 00:12:47.943669 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Nov 1 00:12:47.948547 systemd[1]: Starting ignition-quench.service... Nov 1 00:12:47.962176 systemd[1]: ignition-quench.service: Deactivated successfully. Nov 1 00:12:47.963541 systemd[1]: Finished ignition-quench.service. Nov 1 00:12:47.966000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:47.966000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:47.977159 kernel: audit: type=1130 audit(1761955967.966:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:47.977211 initrd-setup-root-after-ignition[1368]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Nov 1 00:12:47.981608 systemd[1]: Finished initrd-setup-root-after-ignition.service. Nov 1 00:12:47.984000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:47.986030 systemd[1]: Reached target ignition-complete.target. Nov 1 00:12:47.990926 systemd[1]: Starting initrd-parse-etc.service... Nov 1 00:12:48.018391 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Nov 1 00:12:48.019380 systemd[1]: Finished initrd-parse-etc.service. Nov 1 00:12:48.021000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:48.022000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:48.023453 systemd[1]: Reached target initrd-fs.target. Nov 1 00:12:48.025883 systemd[1]: Reached target initrd.target. Nov 1 00:12:48.026455 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Nov 1 00:12:48.027923 systemd[1]: Starting dracut-pre-pivot.service... Nov 1 00:12:48.056680 systemd[1]: Finished dracut-pre-pivot.service. Nov 1 00:12:48.061000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:48.065178 systemd[1]: Starting initrd-cleanup.service... Nov 1 00:12:48.089668 systemd[1]: Stopped target nss-lookup.target. Nov 1 00:12:48.093549 systemd[1]: Stopped target remote-cryptsetup.target. Nov 1 00:12:48.097535 systemd[1]: Stopped target timers.target. Nov 1 00:12:48.100885 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Nov 1 00:12:48.101238 systemd[1]: Stopped dracut-pre-pivot.service. Nov 1 00:12:48.105000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:48.106675 systemd[1]: Stopped target initrd.target. Nov 1 00:12:48.109894 systemd[1]: Stopped target basic.target. Nov 1 00:12:48.115018 systemd[1]: Stopped target ignition-complete.target. Nov 1 00:12:48.119035 systemd[1]: Stopped target ignition-diskful.target. Nov 1 00:12:48.122722 systemd[1]: Stopped target initrd-root-device.target. Nov 1 00:12:48.128087 systemd[1]: Stopped target remote-fs.target. Nov 1 00:12:48.131477 systemd[1]: Stopped target remote-fs-pre.target. Nov 1 00:12:48.136299 systemd[1]: Stopped target sysinit.target. Nov 1 00:12:48.141029 systemd[1]: Stopped target local-fs.target. Nov 1 00:12:48.144486 systemd[1]: Stopped target local-fs-pre.target. Nov 1 00:12:48.148000 systemd[1]: Stopped target swap.target. Nov 1 00:12:48.151187 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Nov 1 00:12:48.153428 systemd[1]: Stopped dracut-pre-mount.service. Nov 1 00:12:48.155000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:48.157023 systemd[1]: Stopped target cryptsetup.target. Nov 1 00:12:48.162053 systemd[1]: dracut-initqueue.service: Deactivated successfully. Nov 1 00:12:48.164303 systemd[1]: Stopped dracut-initqueue.service. Nov 1 00:12:48.166000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:48.167873 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Nov 1 00:12:48.170565 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Nov 1 00:12:48.173000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:48.174955 systemd[1]: ignition-files.service: Deactivated successfully. Nov 1 00:12:48.177057 systemd[1]: Stopped ignition-files.service. Nov 1 00:12:48.179000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:48.182111 systemd[1]: Stopping ignition-mount.service... Nov 1 00:12:48.196695 ignition[1381]: INFO : Ignition 2.14.0 Nov 1 00:12:48.196695 ignition[1381]: INFO : Stage: umount Nov 1 00:12:48.196695 ignition[1381]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Nov 1 00:12:48.196695 ignition[1381]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Nov 1 00:12:48.209000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:48.196394 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Nov 1 00:12:48.222643 ignition[1381]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Nov 1 00:12:48.222643 ignition[1381]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Nov 1 00:12:48.200994 systemd[1]: Stopped kmod-static-nodes.service. Nov 1 00:12:48.215611 systemd[1]: Stopping sysroot-boot.service... Nov 1 00:12:48.224414 ignition[1381]: INFO : PUT result: OK Nov 1 00:12:48.245000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:48.249000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:48.241785 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Nov 1 00:12:48.242149 systemd[1]: Stopped systemd-udev-trigger.service. Nov 1 00:12:48.246420 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Nov 1 00:12:48.246653 systemd[1]: Stopped dracut-pre-trigger.service. Nov 1 00:12:48.269988 ignition[1381]: INFO : umount: umount passed Nov 1 00:12:48.269988 ignition[1381]: INFO : Ignition finished successfully Nov 1 00:12:48.255381 systemd[1]: sysroot-boot.mount: Deactivated successfully. Nov 1 00:12:48.276000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:48.276000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:48.282000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:48.262657 systemd[1]: initrd-cleanup.service: Deactivated successfully. Nov 1 00:12:48.262857 systemd[1]: Finished initrd-cleanup.service. Nov 1 00:12:48.285000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:48.278062 systemd[1]: ignition-mount.service: Deactivated successfully. Nov 1 00:12:48.291000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:48.278305 systemd[1]: Stopped ignition-mount.service. Nov 1 00:12:48.295000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:48.284767 systemd[1]: sysroot-boot.service: Deactivated successfully. Nov 1 00:12:48.299000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:48.284958 systemd[1]: Stopped sysroot-boot.service. Nov 1 00:12:48.287705 systemd[1]: ignition-disks.service: Deactivated successfully. Nov 1 00:12:48.306000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:48.287804 systemd[1]: Stopped ignition-disks.service. Nov 1 00:12:48.292823 systemd[1]: ignition-kargs.service: Deactivated successfully. Nov 1 00:12:48.292910 systemd[1]: Stopped ignition-kargs.service. Nov 1 00:12:48.296791 systemd[1]: ignition-fetch.service: Deactivated successfully. Nov 1 00:12:48.296870 systemd[1]: Stopped ignition-fetch.service. Nov 1 00:12:48.300259 systemd[1]: Stopped target network.target. Nov 1 00:12:48.303971 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Nov 1 00:12:48.304380 systemd[1]: Stopped ignition-fetch-offline.service. Nov 1 00:12:48.308041 systemd[1]: Stopped target paths.target. Nov 1 00:12:48.310830 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Nov 1 00:12:48.314174 systemd[1]: Stopped systemd-ask-password-console.path. Nov 1 00:12:48.333185 systemd[1]: Stopped target slices.target. Nov 1 00:12:48.334796 systemd[1]: Stopped target sockets.target. Nov 1 00:12:48.336587 systemd[1]: iscsid.socket: Deactivated successfully. Nov 1 00:12:48.343000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:48.347000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:48.336646 systemd[1]: Closed iscsid.socket. Nov 1 00:12:48.338401 systemd[1]: iscsiuio.socket: Deactivated successfully. Nov 1 00:12:48.338455 systemd[1]: Closed iscsiuio.socket. Nov 1 00:12:48.341306 systemd[1]: ignition-setup.service: Deactivated successfully. Nov 1 00:12:48.341690 systemd[1]: Stopped ignition-setup.service. Nov 1 00:12:48.344589 systemd[1]: initrd-setup-root.service: Deactivated successfully. Nov 1 00:12:48.344668 systemd[1]: Stopped initrd-setup-root.service. Nov 1 00:12:48.365000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:48.366000 audit: BPF prog-id=6 op=UNLOAD Nov 1 00:12:48.348506 systemd[1]: Stopping systemd-networkd.service... Nov 1 00:12:48.350605 systemd[1]: Stopping systemd-resolved.service... Nov 1 00:12:48.356775 systemd[1]: systemd-resolved.service: Deactivated successfully. Nov 1 00:12:48.356989 systemd[1]: Stopped systemd-resolved.service. Nov 1 00:12:48.371680 systemd-networkd[1188]: eth0: DHCPv6 lease lost Nov 1 00:12:48.378681 systemd[1]: systemd-networkd.service: Deactivated successfully. Nov 1 00:12:48.380908 systemd[1]: Stopped systemd-networkd.service. Nov 1 00:12:48.383000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:48.384621 systemd[1]: systemd-networkd.socket: Deactivated successfully. Nov 1 00:12:48.387000 audit: BPF prog-id=9 op=UNLOAD Nov 1 00:12:48.384706 systemd[1]: Closed systemd-networkd.socket. Nov 1 00:12:48.393083 systemd[1]: Stopping network-cleanup.service... Nov 1 00:12:48.398276 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Nov 1 00:12:48.400000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:48.404000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:48.399854 systemd[1]: Stopped parse-ip-for-networkd.service. Nov 1 00:12:48.401915 systemd[1]: systemd-sysctl.service: Deactivated successfully. Nov 1 00:12:48.406000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:48.402024 systemd[1]: Stopped systemd-sysctl.service. Nov 1 00:12:48.406201 systemd[1]: systemd-modules-load.service: Deactivated successfully. Nov 1 00:12:48.406461 systemd[1]: Stopped systemd-modules-load.service. Nov 1 00:12:48.416233 systemd[1]: Stopping systemd-udevd.service... Nov 1 00:12:48.426371 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Nov 1 00:12:48.439068 systemd[1]: network-cleanup.service: Deactivated successfully. Nov 1 00:12:48.442549 systemd[1]: Stopped network-cleanup.service. Nov 1 00:12:48.444000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:48.446851 systemd[1]: systemd-udevd.service: Deactivated successfully. Nov 1 00:12:48.447366 systemd[1]: Stopped systemd-udevd.service. Nov 1 00:12:48.451000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:48.453343 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Nov 1 00:12:48.453553 systemd[1]: Closed systemd-udevd-control.socket. Nov 1 00:12:48.459551 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Nov 1 00:12:48.459730 systemd[1]: Closed systemd-udevd-kernel.socket. Nov 1 00:12:48.463613 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Nov 1 00:12:48.467000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:48.465238 systemd[1]: Stopped dracut-pre-udev.service. Nov 1 00:12:48.468963 systemd[1]: dracut-cmdline.service: Deactivated successfully. Nov 1 00:12:48.471000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:48.469048 systemd[1]: Stopped dracut-cmdline.service. Nov 1 00:12:48.475000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:48.472326 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Nov 1 00:12:48.474287 systemd[1]: Stopped dracut-cmdline-ask.service. Nov 1 00:12:48.482920 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Nov 1 00:12:48.495000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:48.501000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:48.501000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:48.495222 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Nov 1 00:12:48.495352 systemd[1]: Stopped systemd-vconsole-setup.service. Nov 1 00:12:48.499957 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Nov 1 00:12:48.500157 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Nov 1 00:12:48.502451 systemd[1]: Reached target initrd-switch-root.target. Nov 1 00:12:48.508586 systemd[1]: Starting initrd-switch-root.service... Nov 1 00:12:48.530597 systemd[1]: Switching root. Nov 1 00:12:48.559736 iscsid[1193]: iscsid shutting down. Nov 1 00:12:48.564292 systemd-journald[310]: Received SIGTERM from PID 1 (systemd). Nov 1 00:12:48.564394 systemd-journald[310]: Journal stopped Nov 1 00:12:54.585475 kernel: SELinux: Class mctp_socket not defined in policy. Nov 1 00:12:54.585591 kernel: SELinux: Class anon_inode not defined in policy. Nov 1 00:12:54.585634 kernel: SELinux: the above unknown classes and permissions will be allowed Nov 1 00:12:54.585667 kernel: SELinux: policy capability network_peer_controls=1 Nov 1 00:12:54.585704 kernel: SELinux: policy capability open_perms=1 Nov 1 00:12:54.585735 kernel: SELinux: policy capability extended_socket_class=1 Nov 1 00:12:54.585777 kernel: SELinux: policy capability always_check_network=0 Nov 1 00:12:54.585807 kernel: SELinux: policy capability cgroup_seclabel=1 Nov 1 00:12:54.585841 kernel: SELinux: policy capability nnp_nosuid_transition=1 Nov 1 00:12:54.585872 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Nov 1 00:12:54.585899 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Nov 1 00:12:54.585934 systemd[1]: Successfully loaded SELinux policy in 116.441ms. Nov 1 00:12:54.586012 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 19.970ms. Nov 1 00:12:54.586052 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Nov 1 00:12:54.586084 systemd[1]: Detected virtualization amazon. Nov 1 00:12:54.586138 systemd[1]: Detected architecture arm64. Nov 1 00:12:54.586174 systemd[1]: Detected first boot. Nov 1 00:12:54.586205 systemd[1]: Initializing machine ID from VM UUID. Nov 1 00:12:54.586237 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Nov 1 00:12:54.586269 systemd[1]: Populated /etc with preset unit settings. Nov 1 00:12:54.586302 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Nov 1 00:12:54.586358 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Nov 1 00:12:54.586397 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Nov 1 00:12:54.586429 kernel: kauditd_printk_skb: 54 callbacks suppressed Nov 1 00:12:54.586462 kernel: audit: type=1334 audit(1761955974.096:86): prog-id=12 op=LOAD Nov 1 00:12:54.586492 kernel: audit: type=1334 audit(1761955974.096:87): prog-id=3 op=UNLOAD Nov 1 00:12:54.586523 kernel: audit: type=1334 audit(1761955974.098:88): prog-id=13 op=LOAD Nov 1 00:12:54.586557 systemd[1]: iscsiuio.service: Deactivated successfully. Nov 1 00:12:54.586590 kernel: audit: type=1334 audit(1761955974.101:89): prog-id=14 op=LOAD Nov 1 00:12:54.586674 systemd[1]: Stopped iscsiuio.service. Nov 1 00:12:54.586710 kernel: audit: type=1334 audit(1761955974.101:90): prog-id=4 op=UNLOAD Nov 1 00:12:54.586746 kernel: audit: type=1334 audit(1761955974.101:91): prog-id=5 op=UNLOAD Nov 1 00:12:54.586779 kernel: audit: type=1131 audit(1761955974.105:92): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:54.586807 kernel: audit: type=1334 audit(1761955974.109:93): prog-id=12 op=UNLOAD Nov 1 00:12:54.586838 kernel: audit: type=1131 audit(1761955974.131:94): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:54.586869 systemd[1]: iscsid.service: Deactivated successfully. Nov 1 00:12:54.586899 systemd[1]: Stopped iscsid.service. Nov 1 00:12:54.586930 kernel: audit: type=1131 audit(1761955974.145:95): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:54.586959 systemd[1]: initrd-switch-root.service: Deactivated successfully. Nov 1 00:12:54.586996 systemd[1]: Stopped initrd-switch-root.service. Nov 1 00:12:54.587029 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Nov 1 00:12:54.587061 systemd[1]: Created slice system-addon\x2dconfig.slice. Nov 1 00:12:54.587093 systemd[1]: Created slice system-addon\x2drun.slice. Nov 1 00:12:54.587167 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Nov 1 00:12:54.587200 systemd[1]: Created slice system-getty.slice. Nov 1 00:12:54.587232 systemd[1]: Created slice system-modprobe.slice. Nov 1 00:12:54.587267 systemd[1]: Created slice system-serial\x2dgetty.slice. Nov 1 00:12:54.587302 systemd[1]: Created slice system-system\x2dcloudinit.slice. Nov 1 00:12:54.587332 systemd[1]: Created slice system-systemd\x2dfsck.slice. Nov 1 00:12:54.587363 systemd[1]: Created slice user.slice. Nov 1 00:12:54.587395 systemd[1]: Started systemd-ask-password-console.path. Nov 1 00:12:54.587424 systemd[1]: Started systemd-ask-password-wall.path. Nov 1 00:12:54.587455 systemd[1]: Set up automount boot.automount. Nov 1 00:12:54.587485 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Nov 1 00:12:54.587516 systemd[1]: Stopped target initrd-switch-root.target. Nov 1 00:12:54.587552 systemd[1]: Stopped target initrd-fs.target. Nov 1 00:12:54.587581 systemd[1]: Stopped target initrd-root-fs.target. Nov 1 00:12:54.587610 systemd[1]: Reached target integritysetup.target. Nov 1 00:12:54.587641 systemd[1]: Reached target remote-cryptsetup.target. Nov 1 00:12:54.587671 systemd[1]: Reached target remote-fs.target. Nov 1 00:12:54.587703 systemd[1]: Reached target slices.target. Nov 1 00:12:54.587735 systemd[1]: Reached target swap.target. Nov 1 00:12:54.587767 systemd[1]: Reached target torcx.target. Nov 1 00:12:54.587802 systemd[1]: Reached target veritysetup.target. Nov 1 00:12:54.587832 systemd[1]: Listening on systemd-coredump.socket. Nov 1 00:12:54.587865 systemd[1]: Listening on systemd-initctl.socket. Nov 1 00:12:54.587895 systemd[1]: Listening on systemd-networkd.socket. Nov 1 00:12:54.587924 systemd[1]: Listening on systemd-udevd-control.socket. Nov 1 00:12:54.587954 systemd[1]: Listening on systemd-udevd-kernel.socket. Nov 1 00:12:54.587985 systemd[1]: Listening on systemd-userdbd.socket. Nov 1 00:12:54.588016 systemd[1]: Mounting dev-hugepages.mount... Nov 1 00:12:54.588045 systemd[1]: Mounting dev-mqueue.mount... Nov 1 00:12:54.588074 systemd[1]: Mounting media.mount... Nov 1 00:12:54.588106 systemd[1]: Mounting sys-kernel-debug.mount... Nov 1 00:12:54.588158 systemd[1]: Mounting sys-kernel-tracing.mount... Nov 1 00:12:54.588190 systemd[1]: Mounting tmp.mount... Nov 1 00:12:54.588221 systemd[1]: Starting flatcar-tmpfiles.service... Nov 1 00:12:54.588250 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:12:54.588282 systemd[1]: Starting kmod-static-nodes.service... Nov 1 00:12:54.588313 systemd[1]: Starting modprobe@configfs.service... Nov 1 00:12:54.588346 systemd[1]: Starting modprobe@dm_mod.service... Nov 1 00:12:54.588376 systemd[1]: Starting modprobe@drm.service... Nov 1 00:12:54.588407 systemd[1]: Starting modprobe@efi_pstore.service... Nov 1 00:12:54.588440 systemd[1]: Starting modprobe@fuse.service... Nov 1 00:12:54.588475 systemd[1]: Starting modprobe@loop.service... Nov 1 00:12:54.588507 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Nov 1 00:12:54.588539 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Nov 1 00:12:54.588568 systemd[1]: Stopped systemd-fsck-root.service. Nov 1 00:12:54.588597 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Nov 1 00:12:54.588627 systemd[1]: Stopped systemd-fsck-usr.service. Nov 1 00:12:54.588657 systemd[1]: Stopped systemd-journald.service. Nov 1 00:12:54.588687 systemd[1]: Starting systemd-journald.service... Nov 1 00:12:54.588719 systemd[1]: Starting systemd-modules-load.service... Nov 1 00:12:54.588749 systemd[1]: Starting systemd-network-generator.service... Nov 1 00:12:54.588780 systemd[1]: Starting systemd-remount-fs.service... Nov 1 00:12:54.588809 systemd[1]: Starting systemd-udev-trigger.service... Nov 1 00:12:54.588840 systemd[1]: verity-setup.service: Deactivated successfully. Nov 1 00:12:54.588868 kernel: fuse: init (API version 7.34) Nov 1 00:12:54.588896 systemd[1]: Stopped verity-setup.service. Nov 1 00:12:54.588927 kernel: loop: module loaded Nov 1 00:12:54.588956 systemd[1]: Mounted dev-hugepages.mount. Nov 1 00:12:54.588986 systemd[1]: Mounted dev-mqueue.mount. Nov 1 00:12:54.589019 systemd[1]: Mounted media.mount. Nov 1 00:12:54.589049 systemd[1]: Mounted sys-kernel-debug.mount. Nov 1 00:12:54.589077 systemd[1]: Mounted sys-kernel-tracing.mount. Nov 1 00:12:54.589109 systemd[1]: Mounted tmp.mount. Nov 1 00:12:54.589157 systemd[1]: Finished kmod-static-nodes.service. Nov 1 00:12:54.589192 systemd[1]: modprobe@configfs.service: Deactivated successfully. Nov 1 00:12:54.589222 systemd[1]: Finished modprobe@configfs.service. Nov 1 00:12:54.589253 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Nov 1 00:12:54.589283 systemd[1]: Finished modprobe@dm_mod.service. Nov 1 00:12:54.589312 systemd[1]: modprobe@drm.service: Deactivated successfully. Nov 1 00:12:54.589344 systemd-journald[1492]: Journal started Nov 1 00:12:54.589444 systemd-journald[1492]: Runtime Journal (/run/log/journal/ec26083a95f71c4b0b0fae016a4339fa) is 8.0M, max 75.4M, 67.4M free. Nov 1 00:12:49.438000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Nov 1 00:12:49.637000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Nov 1 00:12:49.637000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Nov 1 00:12:54.591891 systemd[1]: Finished modprobe@drm.service. Nov 1 00:12:49.637000 audit: BPF prog-id=10 op=LOAD Nov 1 00:12:49.637000 audit: BPF prog-id=10 op=UNLOAD Nov 1 00:12:49.637000 audit: BPF prog-id=11 op=LOAD Nov 1 00:12:49.637000 audit: BPF prog-id=11 op=UNLOAD Nov 1 00:12:49.843000 audit[1414]: AVC avc: denied { associate } for pid=1414 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Nov 1 00:12:49.843000 audit[1414]: SYSCALL arch=c00000b7 syscall=5 success=yes exit=0 a0=400014589c a1=40000c6de0 a2=40000cd0c0 a3=32 items=0 ppid=1397 pid=1414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:49.843000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Nov 1 00:12:49.847000 audit[1414]: AVC avc: denied { associate } for pid=1414 comm="torcx-generator" name="bin" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Nov 1 00:12:49.847000 audit[1414]: SYSCALL arch=c00000b7 syscall=34 success=yes exit=0 a0=ffffffffffffff9c a1=4000145979 a2=1ed a3=0 items=2 ppid=1397 pid=1414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:49.847000 audit: CWD cwd="/" Nov 1 00:12:49.847000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:12:49.847000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:12:49.847000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Nov 1 00:12:54.096000 audit: BPF prog-id=12 op=LOAD Nov 1 00:12:54.096000 audit: BPF prog-id=3 op=UNLOAD Nov 1 00:12:54.098000 audit: BPF prog-id=13 op=LOAD Nov 1 00:12:54.101000 audit: BPF prog-id=14 op=LOAD Nov 1 00:12:54.101000 audit: BPF prog-id=4 op=UNLOAD Nov 1 00:12:54.101000 audit: BPF prog-id=5 op=UNLOAD Nov 1 00:12:54.105000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:54.109000 audit: BPF prog-id=12 op=UNLOAD Nov 1 00:12:54.131000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:54.145000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:54.160000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:54.160000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:54.426000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:54.433000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:54.441000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:54.441000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:54.442000 audit: BPF prog-id=15 op=LOAD Nov 1 00:12:54.442000 audit: BPF prog-id=16 op=LOAD Nov 1 00:12:54.443000 audit: BPF prog-id=17 op=LOAD Nov 1 00:12:54.443000 audit: BPF prog-id=13 op=UNLOAD Nov 1 00:12:54.443000 audit: BPF prog-id=14 op=UNLOAD Nov 1 00:12:54.507000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:54.561000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:54.572000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:54.572000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:54.576000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Nov 1 00:12:54.576000 audit[1492]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=3 a1=fffff9fba850 a2=4000 a3=1 items=0 ppid=1 pid=1492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:54.576000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Nov 1 00:12:54.585000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:54.585000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:54.595000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:54.595000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:49.831585 /usr/lib/systemd/system-generators/torcx-generator[1414]: time="2025-11-01T00:12:49Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Nov 1 00:12:54.093489 systemd[1]: Queued start job for default target multi-user.target. Nov 1 00:12:49.832245 /usr/lib/systemd/system-generators/torcx-generator[1414]: time="2025-11-01T00:12:49Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Nov 1 00:12:54.093511 systemd[1]: Unnecessary job was removed for dev-nvme0n1p6.device. Nov 1 00:12:49.832293 /usr/lib/systemd/system-generators/torcx-generator[1414]: time="2025-11-01T00:12:49Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Nov 1 00:12:54.106172 systemd[1]: systemd-journald.service: Deactivated successfully. Nov 1 00:12:49.832358 /usr/lib/systemd/system-generators/torcx-generator[1414]: time="2025-11-01T00:12:49Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Nov 1 00:12:49.832384 /usr/lib/systemd/system-generators/torcx-generator[1414]: time="2025-11-01T00:12:49Z" level=debug msg="skipped missing lower profile" missing profile=oem Nov 1 00:12:49.832442 /usr/lib/systemd/system-generators/torcx-generator[1414]: time="2025-11-01T00:12:49Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Nov 1 00:12:49.832473 /usr/lib/systemd/system-generators/torcx-generator[1414]: time="2025-11-01T00:12:49Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Nov 1 00:12:54.602653 systemd[1]: Started systemd-journald.service. Nov 1 00:12:49.832872 /usr/lib/systemd/system-generators/torcx-generator[1414]: time="2025-11-01T00:12:49Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Nov 1 00:12:54.602000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:49.832950 /usr/lib/systemd/system-generators/torcx-generator[1414]: time="2025-11-01T00:12:49Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Nov 1 00:12:54.604358 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Nov 1 00:12:49.832987 /usr/lib/systemd/system-generators/torcx-generator[1414]: time="2025-11-01T00:12:49Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Nov 1 00:12:54.607340 systemd[1]: Finished modprobe@efi_pstore.service. Nov 1 00:12:49.833841 /usr/lib/systemd/system-generators/torcx-generator[1414]: time="2025-11-01T00:12:49Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Nov 1 00:12:49.833918 /usr/lib/systemd/system-generators/torcx-generator[1414]: time="2025-11-01T00:12:49Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Nov 1 00:12:49.833962 /usr/lib/systemd/system-generators/torcx-generator[1414]: time="2025-11-01T00:12:49Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.8: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.8 Nov 1 00:12:49.834030 /usr/lib/systemd/system-generators/torcx-generator[1414]: time="2025-11-01T00:12:49Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Nov 1 00:12:49.834080 /usr/lib/systemd/system-generators/torcx-generator[1414]: time="2025-11-01T00:12:49Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.8: no such file or directory" path=/var/lib/torcx/store/3510.3.8 Nov 1 00:12:49.834135 /usr/lib/systemd/system-generators/torcx-generator[1414]: time="2025-11-01T00:12:49Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Nov 1 00:12:53.189227 /usr/lib/systemd/system-generators/torcx-generator[1414]: time="2025-11-01T00:12:53Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Nov 1 00:12:53.189753 /usr/lib/systemd/system-generators/torcx-generator[1414]: time="2025-11-01T00:12:53Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Nov 1 00:12:53.190002 /usr/lib/systemd/system-generators/torcx-generator[1414]: time="2025-11-01T00:12:53Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Nov 1 00:12:53.190506 /usr/lib/systemd/system-generators/torcx-generator[1414]: time="2025-11-01T00:12:53Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Nov 1 00:12:53.190612 /usr/lib/systemd/system-generators/torcx-generator[1414]: time="2025-11-01T00:12:53Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Nov 1 00:12:53.190746 /usr/lib/systemd/system-generators/torcx-generator[1414]: time="2025-11-01T00:12:53Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Nov 1 00:12:54.613000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:54.613000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:54.616005 systemd[1]: modprobe@fuse.service: Deactivated successfully. Nov 1 00:12:54.616429 systemd[1]: Finished modprobe@fuse.service. Nov 1 00:12:54.619000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:54.619000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:54.621219 systemd[1]: modprobe@loop.service: Deactivated successfully. Nov 1 00:12:54.622335 systemd[1]: Finished modprobe@loop.service. Nov 1 00:12:54.625000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:54.625000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:54.627109 systemd[1]: Finished systemd-modules-load.service. Nov 1 00:12:54.630000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:54.632261 systemd[1]: Finished systemd-network-generator.service. Nov 1 00:12:54.637000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:54.639538 systemd[1]: Finished systemd-remount-fs.service. Nov 1 00:12:54.642000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:54.645173 systemd[1]: Reached target network-pre.target. Nov 1 00:12:54.652663 systemd[1]: Mounting sys-fs-fuse-connections.mount... Nov 1 00:12:54.662158 systemd[1]: Mounting sys-kernel-config.mount... Nov 1 00:12:54.665921 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Nov 1 00:12:54.674799 systemd[1]: Starting systemd-hwdb-update.service... Nov 1 00:12:54.681001 systemd[1]: Starting systemd-journal-flush.service... Nov 1 00:12:54.686852 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Nov 1 00:12:54.689345 systemd[1]: Starting systemd-random-seed.service... Nov 1 00:12:54.693517 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Nov 1 00:12:54.695827 systemd[1]: Starting systemd-sysctl.service... Nov 1 00:12:54.710767 systemd[1]: Finished flatcar-tmpfiles.service. Nov 1 00:12:54.716823 systemd-journald[1492]: Time spent on flushing to /var/log/journal/ec26083a95f71c4b0b0fae016a4339fa is 83.057ms for 1125 entries. Nov 1 00:12:54.716823 systemd-journald[1492]: System Journal (/var/log/journal/ec26083a95f71c4b0b0fae016a4339fa) is 8.0M, max 195.6M, 187.6M free. Nov 1 00:12:54.825398 systemd-journald[1492]: Received client request to flush runtime journal. Nov 1 00:12:54.716000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:54.766000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:54.797000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:54.824000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:54.717547 systemd[1]: Mounted sys-fs-fuse-connections.mount. Nov 1 00:12:54.724674 systemd[1]: Mounted sys-kernel-config.mount. Nov 1 00:12:54.737566 systemd[1]: Starting systemd-sysusers.service... Nov 1 00:12:54.763684 systemd[1]: Finished systemd-random-seed.service. Nov 1 00:12:54.768345 systemd[1]: Reached target first-boot-complete.target. Nov 1 00:12:54.791616 systemd[1]: Finished systemd-sysctl.service. Nov 1 00:12:54.820975 systemd[1]: Finished systemd-udev-trigger.service. Nov 1 00:12:54.827967 systemd[1]: Starting systemd-udev-settle.service... Nov 1 00:12:54.834860 systemd[1]: Finished systemd-journal-flush.service. Nov 1 00:12:54.838000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:54.848547 udevadm[1533]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Nov 1 00:12:54.974897 systemd[1]: Finished systemd-sysusers.service. Nov 1 00:12:54.977000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:55.579000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:55.575891 systemd[1]: Finished systemd-hwdb-update.service. Nov 1 00:12:55.580000 audit: BPF prog-id=18 op=LOAD Nov 1 00:12:55.580000 audit: BPF prog-id=19 op=LOAD Nov 1 00:12:55.580000 audit: BPF prog-id=7 op=UNLOAD Nov 1 00:12:55.580000 audit: BPF prog-id=8 op=UNLOAD Nov 1 00:12:55.582736 systemd[1]: Starting systemd-udevd.service... Nov 1 00:12:55.620025 systemd-udevd[1534]: Using default interface naming scheme 'v252'. Nov 1 00:12:55.679406 systemd[1]: Started systemd-udevd.service. Nov 1 00:12:55.686000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:55.690000 audit: BPF prog-id=20 op=LOAD Nov 1 00:12:55.693077 systemd[1]: Starting systemd-networkd.service... Nov 1 00:12:55.715000 audit: BPF prog-id=21 op=LOAD Nov 1 00:12:55.715000 audit: BPF prog-id=22 op=LOAD Nov 1 00:12:55.715000 audit: BPF prog-id=23 op=LOAD Nov 1 00:12:55.717887 systemd[1]: Starting systemd-userdbd.service... Nov 1 00:12:55.766025 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Nov 1 00:12:55.815561 systemd[1]: Started systemd-userdbd.service. Nov 1 00:12:55.821000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:55.837435 (udev-worker)[1542]: Network interface NamePolicy= disabled on kernel command line. Nov 1 00:12:56.005248 systemd-networkd[1549]: lo: Link UP Nov 1 00:12:56.005270 systemd-networkd[1549]: lo: Gained carrier Nov 1 00:12:56.006248 systemd-networkd[1549]: Enumeration completed Nov 1 00:12:56.006410 systemd[1]: Started systemd-networkd.service. Nov 1 00:12:56.007000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:56.010757 systemd[1]: Starting systemd-networkd-wait-online.service... Nov 1 00:12:56.013671 systemd-networkd[1549]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Nov 1 00:12:56.021178 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Nov 1 00:12:56.021584 systemd-networkd[1549]: eth0: Link UP Nov 1 00:12:56.022089 systemd-networkd[1549]: eth0: Gained carrier Nov 1 00:12:56.038578 systemd-networkd[1549]: eth0: DHCPv4 address 172.31.27.146/20, gateway 172.31.16.1 acquired from 172.31.16.1 Nov 1 00:12:56.172279 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Nov 1 00:12:56.175007 systemd[1]: Finished systemd-udev-settle.service. Nov 1 00:12:56.175000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:56.179356 systemd[1]: Starting lvm2-activation-early.service... Nov 1 00:12:56.225994 lvm[1653]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Nov 1 00:12:56.263776 systemd[1]: Finished lvm2-activation-early.service. Nov 1 00:12:56.264000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:56.265997 systemd[1]: Reached target cryptsetup.target. Nov 1 00:12:56.269929 systemd[1]: Starting lvm2-activation.service... Nov 1 00:12:56.277895 lvm[1654]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Nov 1 00:12:56.318702 systemd[1]: Finished lvm2-activation.service. Nov 1 00:12:56.319000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:56.320858 systemd[1]: Reached target local-fs-pre.target. Nov 1 00:12:56.322878 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Nov 1 00:12:56.322935 systemd[1]: Reached target local-fs.target. Nov 1 00:12:56.324816 systemd[1]: Reached target machines.target. Nov 1 00:12:56.328863 systemd[1]: Starting ldconfig.service... Nov 1 00:12:56.331470 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:12:56.331604 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:12:56.334185 systemd[1]: Starting systemd-boot-update.service... Nov 1 00:12:56.337872 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Nov 1 00:12:56.345671 systemd[1]: Starting systemd-machine-id-commit.service... Nov 1 00:12:56.350106 systemd[1]: Starting systemd-sysext.service... Nov 1 00:12:56.371484 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1656 (bootctl) Nov 1 00:12:56.373920 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Nov 1 00:12:56.388734 systemd[1]: Unmounting usr-share-oem.mount... Nov 1 00:12:56.396997 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Nov 1 00:12:56.398000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:56.405367 systemd[1]: usr-share-oem.mount: Deactivated successfully. Nov 1 00:12:56.405820 systemd[1]: Unmounted usr-share-oem.mount. Nov 1 00:12:56.429158 kernel: loop0: detected capacity change from 0 to 207008 Nov 1 00:12:56.527645 systemd-fsck[1665]: fsck.fat 4.2 (2021-01-31) Nov 1 00:12:56.527645 systemd-fsck[1665]: /dev/nvme0n1p1: 236 files, 117310/258078 clusters Nov 1 00:12:56.530288 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Nov 1 00:12:56.533000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:56.536781 systemd[1]: Mounting boot.mount... Nov 1 00:12:56.557742 systemd[1]: Mounted boot.mount. Nov 1 00:12:56.583142 systemd[1]: Finished systemd-boot-update.service. Nov 1 00:12:56.584000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:56.616382 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Nov 1 00:12:56.644290 kernel: loop1: detected capacity change from 0 to 207008 Nov 1 00:12:56.665233 (sd-sysext)[1681]: Using extensions 'kubernetes'. Nov 1 00:12:56.668741 (sd-sysext)[1681]: Merged extensions into '/usr'. Nov 1 00:12:56.705782 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Nov 1 00:12:56.707335 systemd[1]: Finished systemd-machine-id-commit.service. Nov 1 00:12:56.708000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:56.712947 systemd[1]: Mounting usr-share-oem.mount... Nov 1 00:12:56.715292 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:12:56.718183 systemd[1]: Starting modprobe@dm_mod.service... Nov 1 00:12:56.726088 systemd[1]: Starting modprobe@efi_pstore.service... Nov 1 00:12:56.730283 systemd[1]: Starting modprobe@loop.service... Nov 1 00:12:56.732407 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:12:56.732749 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:12:56.735003 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Nov 1 00:12:56.736408 systemd[1]: Finished modprobe@dm_mod.service. Nov 1 00:12:56.737000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:56.737000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:56.743062 systemd[1]: Mounted usr-share-oem.mount. Nov 1 00:12:56.746652 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Nov 1 00:12:56.746952 systemd[1]: Finished modprobe@efi_pstore.service. Nov 1 00:12:56.748000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:56.748000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:56.750738 systemd[1]: modprobe@loop.service: Deactivated successfully. Nov 1 00:12:56.751046 systemd[1]: Finished modprobe@loop.service. Nov 1 00:12:56.751000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:56.751000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:56.754447 systemd[1]: Finished systemd-sysext.service. Nov 1 00:12:56.755000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:56.759780 systemd[1]: Starting ensure-sysext.service... Nov 1 00:12:56.765537 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Nov 1 00:12:56.765673 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Nov 1 00:12:56.768036 systemd[1]: Starting systemd-tmpfiles-setup.service... Nov 1 00:12:56.776001 systemd[1]: Reloading. Nov 1 00:12:56.827478 systemd-tmpfiles[1688]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Nov 1 00:12:56.874546 systemd-tmpfiles[1688]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Nov 1 00:12:56.879268 /usr/lib/systemd/system-generators/torcx-generator[1707]: time="2025-11-01T00:12:56Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Nov 1 00:12:56.879862 /usr/lib/systemd/system-generators/torcx-generator[1707]: time="2025-11-01T00:12:56Z" level=info msg="torcx already run" Nov 1 00:12:56.900614 systemd-tmpfiles[1688]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Nov 1 00:12:57.092631 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Nov 1 00:12:57.092907 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Nov 1 00:12:57.134335 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Nov 1 00:12:57.222270 systemd-networkd[1549]: eth0: Gained IPv6LL Nov 1 00:12:57.296000 audit: BPF prog-id=24 op=LOAD Nov 1 00:12:57.296000 audit: BPF prog-id=21 op=UNLOAD Nov 1 00:12:57.297000 audit: BPF prog-id=25 op=LOAD Nov 1 00:12:57.297000 audit: BPF prog-id=26 op=LOAD Nov 1 00:12:57.297000 audit: BPF prog-id=22 op=UNLOAD Nov 1 00:12:57.297000 audit: BPF prog-id=23 op=UNLOAD Nov 1 00:12:57.298000 audit: BPF prog-id=27 op=LOAD Nov 1 00:12:57.298000 audit: BPF prog-id=28 op=LOAD Nov 1 00:12:57.298000 audit: BPF prog-id=18 op=UNLOAD Nov 1 00:12:57.298000 audit: BPF prog-id=19 op=UNLOAD Nov 1 00:12:57.301000 audit: BPF prog-id=29 op=LOAD Nov 1 00:12:57.301000 audit: BPF prog-id=20 op=UNLOAD Nov 1 00:12:57.303000 audit: BPF prog-id=30 op=LOAD Nov 1 00:12:57.304000 audit: BPF prog-id=15 op=UNLOAD Nov 1 00:12:57.304000 audit: BPF prog-id=31 op=LOAD Nov 1 00:12:57.304000 audit: BPF prog-id=32 op=LOAD Nov 1 00:12:57.304000 audit: BPF prog-id=16 op=UNLOAD Nov 1 00:12:57.304000 audit: BPF prog-id=17 op=UNLOAD Nov 1 00:12:57.328155 systemd[1]: Finished systemd-networkd-wait-online.service. Nov 1 00:12:57.329000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:57.332755 systemd[1]: Finished systemd-tmpfiles-setup.service. Nov 1 00:12:57.333000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:57.341805 systemd[1]: Starting audit-rules.service... Nov 1 00:12:57.345919 systemd[1]: Starting clean-ca-certificates.service... Nov 1 00:12:57.354867 systemd[1]: Starting systemd-journal-catalog-update.service... Nov 1 00:12:57.365000 audit: BPF prog-id=33 op=LOAD Nov 1 00:12:57.369885 systemd[1]: Starting systemd-resolved.service... Nov 1 00:12:57.372000 audit: BPF prog-id=34 op=LOAD Nov 1 00:12:57.375301 systemd[1]: Starting systemd-timesyncd.service... Nov 1 00:12:57.379711 systemd[1]: Starting systemd-update-utmp.service... Nov 1 00:12:57.392337 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:12:57.397875 systemd[1]: Starting modprobe@dm_mod.service... Nov 1 00:12:57.402432 systemd[1]: Starting modprobe@efi_pstore.service... Nov 1 00:12:57.406948 systemd[1]: Starting modprobe@loop.service... Nov 1 00:12:57.410412 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:12:57.410711 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:12:57.421744 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Nov 1 00:12:57.423073 systemd[1]: Finished modprobe@efi_pstore.service. Nov 1 00:12:57.424000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:57.424000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:57.426535 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:12:57.426836 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:12:57.427044 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:12:57.427872 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Nov 1 00:12:57.436823 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Nov 1 00:12:57.438001 systemd[1]: Finished modprobe@dm_mod.service. Nov 1 00:12:57.439000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:57.439000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:57.442490 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:12:57.446057 systemd[1]: Starting modprobe@drm.service... Nov 1 00:12:57.451949 systemd[1]: Starting modprobe@efi_pstore.service... Nov 1 00:12:57.454369 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:12:57.454685 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:12:57.463428 systemd[1]: Finished ensure-sysext.service. Nov 1 00:12:57.464000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:57.467072 systemd[1]: Finished clean-ca-certificates.service. Nov 1 00:12:57.466000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:57.469395 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Nov 1 00:12:57.473000 audit[1771]: SYSTEM_BOOT pid=1771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Nov 1 00:12:57.477515 systemd[1]: Finished systemd-update-utmp.service. Nov 1 00:12:57.478000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:57.482746 systemd[1]: modprobe@drm.service: Deactivated successfully. Nov 1 00:12:57.483056 systemd[1]: Finished modprobe@drm.service. Nov 1 00:12:57.483000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:57.483000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:57.498906 systemd[1]: modprobe@loop.service: Deactivated successfully. Nov 1 00:12:57.499250 systemd[1]: Finished modprobe@loop.service. Nov 1 00:12:57.501720 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Nov 1 00:12:57.502018 systemd[1]: Finished modprobe@efi_pstore.service. Nov 1 00:12:57.500000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:57.500000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:57.502000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:57.502000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:57.504344 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Nov 1 00:12:57.504439 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Nov 1 00:12:57.520921 systemd[1]: Finished systemd-journal-catalog-update.service. Nov 1 00:12:57.522000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:57.587000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Nov 1 00:12:57.587000 audit[1790]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffd152c1a0 a2=420 a3=0 items=0 ppid=1765 pid=1790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:57.587000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Nov 1 00:12:57.589771 augenrules[1790]: No rules Nov 1 00:12:57.591436 systemd[1]: Finished audit-rules.service. Nov 1 00:12:57.599788 systemd[1]: Started systemd-timesyncd.service. Nov 1 00:12:57.601888 systemd[1]: Reached target time-set.target. Nov 1 00:12:57.630676 systemd-resolved[1769]: Positive Trust Anchors: Nov 1 00:12:57.631246 systemd-resolved[1769]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Nov 1 00:12:57.631410 systemd-resolved[1769]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Nov 1 00:12:57.688258 systemd-resolved[1769]: Defaulting to hostname 'linux'. Nov 1 00:12:57.692548 systemd[1]: Started systemd-resolved.service. Nov 1 00:12:57.694701 systemd[1]: Reached target network.target. Nov 1 00:12:57.696512 systemd[1]: Reached target network-online.target. Nov 1 00:12:57.698460 systemd[1]: Reached target nss-lookup.target. Nov 1 00:12:57.757425 systemd-timesyncd[1770]: Contacted time server 172.234.44.141:123 (0.flatcar.pool.ntp.org). Nov 1 00:12:57.758186 systemd-timesyncd[1770]: Initial clock synchronization to Sat 2025-11-01 00:12:57.847423 UTC. Nov 1 00:12:57.874239 ldconfig[1655]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Nov 1 00:12:57.885048 systemd[1]: Finished ldconfig.service. Nov 1 00:12:57.889029 systemd[1]: Starting systemd-update-done.service... Nov 1 00:12:57.904284 systemd[1]: Finished systemd-update-done.service. Nov 1 00:12:57.906501 systemd[1]: Reached target sysinit.target. Nov 1 00:12:57.908434 systemd[1]: Started motdgen.path. Nov 1 00:12:57.910088 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Nov 1 00:12:57.912836 systemd[1]: Started logrotate.timer. Nov 1 00:12:57.914636 systemd[1]: Started mdadm.timer. Nov 1 00:12:57.916190 systemd[1]: Started systemd-tmpfiles-clean.timer. Nov 1 00:12:57.918087 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Nov 1 00:12:57.918150 systemd[1]: Reached target paths.target. Nov 1 00:12:57.919762 systemd[1]: Reached target timers.target. Nov 1 00:12:57.924234 systemd[1]: Listening on dbus.socket. Nov 1 00:12:57.927819 systemd[1]: Starting docker.socket... Nov 1 00:12:57.935075 systemd[1]: Listening on sshd.socket. Nov 1 00:12:57.937151 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:12:57.938044 systemd[1]: Listening on docker.socket. Nov 1 00:12:57.940010 systemd[1]: Reached target sockets.target. Nov 1 00:12:57.941897 systemd[1]: Reached target basic.target. Nov 1 00:12:57.943715 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Nov 1 00:12:57.943777 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Nov 1 00:12:57.945874 systemd[1]: Started amazon-ssm-agent.service. Nov 1 00:12:57.951561 systemd[1]: Starting containerd.service... Nov 1 00:12:57.966454 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Nov 1 00:12:57.974456 systemd[1]: Starting dbus.service... Nov 1 00:12:57.982448 systemd[1]: Starting enable-oem-cloudinit.service... Nov 1 00:12:57.989329 systemd[1]: Starting extend-filesystems.service... Nov 1 00:12:57.994462 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Nov 1 00:12:58.005798 systemd[1]: Starting kubelet.service... Nov 1 00:12:58.013799 systemd[1]: Starting motdgen.service... Nov 1 00:12:58.018001 systemd[1]: Started nvidia.service. Nov 1 00:12:58.022697 systemd[1]: Starting prepare-helm.service... Nov 1 00:12:58.027361 jq[1804]: false Nov 1 00:12:58.030296 systemd[1]: Starting ssh-key-proc-cmdline.service... Nov 1 00:12:58.036886 systemd[1]: Starting sshd-keygen.service... Nov 1 00:12:58.045225 systemd[1]: Starting systemd-logind.service... Nov 1 00:12:58.047258 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:12:58.047421 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Nov 1 00:12:58.049031 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Nov 1 00:12:58.052719 systemd[1]: Starting update-engine.service... Nov 1 00:12:58.058369 systemd[1]: Starting update-ssh-keys-after-ignition.service... Nov 1 00:12:58.077426 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Nov 1 00:12:58.077863 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Nov 1 00:12:58.084840 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Nov 1 00:12:58.085326 systemd[1]: Finished ssh-key-proc-cmdline.service. Nov 1 00:12:58.120160 jq[1816]: true Nov 1 00:12:58.181669 tar[1822]: linux-arm64/LICENSE Nov 1 00:12:58.182624 jq[1823]: true Nov 1 00:12:58.197464 tar[1822]: linux-arm64/helm Nov 1 00:12:58.263892 dbus-daemon[1802]: [system] SELinux support is enabled Nov 1 00:12:58.268159 systemd[1]: Started dbus.service. Nov 1 00:12:58.273338 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Nov 1 00:12:58.273403 systemd[1]: Reached target system-config.target. Nov 1 00:12:58.275436 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Nov 1 00:12:58.275473 systemd[1]: Reached target user-config.target. Nov 1 00:12:58.287628 extend-filesystems[1805]: Found loop1 Nov 1 00:12:58.290572 extend-filesystems[1805]: Found nvme0n1 Nov 1 00:12:58.290572 extend-filesystems[1805]: Found nvme0n1p1 Nov 1 00:12:58.290572 extend-filesystems[1805]: Found nvme0n1p2 Nov 1 00:12:58.290572 extend-filesystems[1805]: Found nvme0n1p3 Nov 1 00:12:58.290572 extend-filesystems[1805]: Found usr Nov 1 00:12:58.290572 extend-filesystems[1805]: Found nvme0n1p4 Nov 1 00:12:58.290572 extend-filesystems[1805]: Found nvme0n1p6 Nov 1 00:12:58.290572 extend-filesystems[1805]: Found nvme0n1p7 Nov 1 00:12:58.305742 extend-filesystems[1805]: Found nvme0n1p9 Nov 1 00:12:58.305742 extend-filesystems[1805]: Checking size of /dev/nvme0n1p9 Nov 1 00:12:58.338966 dbus-daemon[1802]: [system] Activating via systemd: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service' requested by ':1.3' (uid=244 pid=1549 comm="/usr/lib/systemd/systemd-networkd" label="system_u:system_r:kernel_t:s0") Nov 1 00:12:58.343347 systemd[1]: motdgen.service: Deactivated successfully. Nov 1 00:12:58.343710 systemd[1]: Finished motdgen.service. Nov 1 00:12:58.349057 systemd[1]: Starting systemd-hostnamed.service... Nov 1 00:12:58.389355 extend-filesystems[1805]: Resized partition /dev/nvme0n1p9 Nov 1 00:12:58.420783 extend-filesystems[1864]: resize2fs 1.46.5 (30-Dec-2021) Nov 1 00:12:58.457044 bash[1863]: Updated "/home/core/.ssh/authorized_keys" Nov 1 00:12:58.459284 systemd[1]: Finished update-ssh-keys-after-ignition.service. Nov 1 00:12:58.464167 kernel: EXT4-fs (nvme0n1p9): resizing filesystem from 553472 to 3587067 blocks Nov 1 00:12:58.556136 update_engine[1815]: I1101 00:12:58.555486 1815 main.cc:92] Flatcar Update Engine starting Nov 1 00:12:58.575361 systemd[1]: Started update-engine.service. Nov 1 00:12:58.577408 update_engine[1815]: I1101 00:12:58.577311 1815 update_check_scheduler.cc:74] Next update check in 5m17s Nov 1 00:12:58.580370 systemd[1]: Started locksmithd.service. Nov 1 00:12:58.587718 kernel: EXT4-fs (nvme0n1p9): resized filesystem to 3587067 Nov 1 00:12:58.615585 extend-filesystems[1864]: Filesystem at /dev/nvme0n1p9 is mounted on /; on-line resizing required Nov 1 00:12:58.615585 extend-filesystems[1864]: old_desc_blocks = 1, new_desc_blocks = 2 Nov 1 00:12:58.615585 extend-filesystems[1864]: The filesystem on /dev/nvme0n1p9 is now 3587067 (4k) blocks long. Nov 1 00:12:58.624280 extend-filesystems[1805]: Resized filesystem in /dev/nvme0n1p9 Nov 1 00:12:58.626361 amazon-ssm-agent[1799]: 2025/11/01 00:12:58 Failed to load instance info from vault. RegistrationKey does not exist. Nov 1 00:12:58.629528 systemd[1]: extend-filesystems.service: Deactivated successfully. Nov 1 00:12:58.629954 systemd[1]: Finished extend-filesystems.service. Nov 1 00:12:58.655260 amazon-ssm-agent[1799]: Initializing new seelog logger Nov 1 00:12:58.655260 amazon-ssm-agent[1799]: New Seelog Logger Creation Complete Nov 1 00:12:58.655260 amazon-ssm-agent[1799]: 2025/11/01 00:12:58 Found config file at /etc/amazon/ssm/amazon-ssm-agent.json. Nov 1 00:12:58.655260 amazon-ssm-agent[1799]: Applying config override from /etc/amazon/ssm/amazon-ssm-agent.json. Nov 1 00:12:58.655260 amazon-ssm-agent[1799]: 2025/11/01 00:12:58 processing appconfig overrides Nov 1 00:12:58.695403 systemd-logind[1813]: Watching system buttons on /dev/input/event0 (Power Button) Nov 1 00:12:58.704315 systemd-logind[1813]: Watching system buttons on /dev/input/event1 (Sleep Button) Nov 1 00:12:58.707522 systemd-logind[1813]: New seat seat0. Nov 1 00:12:58.717544 systemd[1]: Started systemd-logind.service. Nov 1 00:12:58.752110 systemd[1]: nvidia.service: Deactivated successfully. Nov 1 00:12:58.838612 env[1824]: time="2025-11-01T00:12:58.837714714Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Nov 1 00:12:58.977765 dbus-daemon[1802]: [system] Successfully activated service 'org.freedesktop.hostname1' Nov 1 00:12:58.978044 systemd[1]: Started systemd-hostnamed.service. Nov 1 00:12:58.980491 dbus-daemon[1802]: [system] Activating via systemd: service name='org.freedesktop.PolicyKit1' unit='polkit.service' requested by ':1.6' (uid=0 pid=1859 comm="/usr/lib/systemd/systemd-hostnamed" label="system_u:system_r:kernel_t:s0") Nov 1 00:12:58.986580 systemd[1]: Starting polkit.service... Nov 1 00:12:59.048318 polkitd[1914]: Started polkitd version 121 Nov 1 00:12:59.065087 env[1824]: time="2025-11-01T00:12:59.064835375Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Nov 1 00:12:59.070515 env[1824]: time="2025-11-01T00:12:59.070458636Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Nov 1 00:12:59.093447 env[1824]: time="2025-11-01T00:12:59.093359126Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.192-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Nov 1 00:12:59.093657 env[1824]: time="2025-11-01T00:12:59.093625391Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Nov 1 00:12:59.094379 env[1824]: time="2025-11-01T00:12:59.094325313Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Nov 1 00:12:59.094605 env[1824]: time="2025-11-01T00:12:59.094572492Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Nov 1 00:12:59.094794 env[1824]: time="2025-11-01T00:12:59.094763284Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Nov 1 00:12:59.094927 env[1824]: time="2025-11-01T00:12:59.094899059Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Nov 1 00:12:59.095369 env[1824]: time="2025-11-01T00:12:59.095338266Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Nov 1 00:12:59.096337 env[1824]: time="2025-11-01T00:12:59.096297497Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Nov 1 00:12:59.096863 env[1824]: time="2025-11-01T00:12:59.096822042Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Nov 1 00:12:59.102694 env[1824]: time="2025-11-01T00:12:59.102586579Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Nov 1 00:12:59.103191 env[1824]: time="2025-11-01T00:12:59.103148485Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Nov 1 00:12:59.103374 env[1824]: time="2025-11-01T00:12:59.103344245Z" level=info msg="metadata content store policy set" policy=shared Nov 1 00:12:59.115294 polkitd[1914]: Loading rules from directory /etc/polkit-1/rules.d Nov 1 00:12:59.116435 polkitd[1914]: Loading rules from directory /usr/share/polkit-1/rules.d Nov 1 00:12:59.117738 env[1824]: time="2025-11-01T00:12:59.117683358Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Nov 1 00:12:59.118021 env[1824]: time="2025-11-01T00:12:59.117946751Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Nov 1 00:12:59.118193 env[1824]: time="2025-11-01T00:12:59.118162313Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Nov 1 00:12:59.118420 env[1824]: time="2025-11-01T00:12:59.118386309Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Nov 1 00:12:59.118554 env[1824]: time="2025-11-01T00:12:59.118523102Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Nov 1 00:12:59.118726 env[1824]: time="2025-11-01T00:12:59.118661966Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Nov 1 00:12:59.118857 env[1824]: time="2025-11-01T00:12:59.118826752Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Nov 1 00:12:59.119505 env[1824]: time="2025-11-01T00:12:59.119440888Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Nov 1 00:12:59.119681 env[1824]: time="2025-11-01T00:12:59.119649882Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Nov 1 00:12:59.119835 env[1824]: time="2025-11-01T00:12:59.119805228Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Nov 1 00:12:59.119958 env[1824]: time="2025-11-01T00:12:59.119928520Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Nov 1 00:12:59.120083 env[1824]: time="2025-11-01T00:12:59.120054006Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Nov 1 00:12:59.120424 env[1824]: time="2025-11-01T00:12:59.120392449Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Nov 1 00:12:59.120693 env[1824]: time="2025-11-01T00:12:59.120665125Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Nov 1 00:12:59.121224 env[1824]: time="2025-11-01T00:12:59.121190045Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Nov 1 00:12:59.121394 env[1824]: time="2025-11-01T00:12:59.121363108Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Nov 1 00:12:59.121544 env[1824]: time="2025-11-01T00:12:59.121513388Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Nov 1 00:12:59.121875 env[1824]: time="2025-11-01T00:12:59.121841409Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Nov 1 00:12:59.122046 env[1824]: time="2025-11-01T00:12:59.121983860Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Nov 1 00:12:59.122185 env[1824]: time="2025-11-01T00:12:59.122155760Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Nov 1 00:12:59.122350 env[1824]: time="2025-11-01T00:12:59.122318279Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Nov 1 00:12:59.122479 env[1824]: time="2025-11-01T00:12:59.122449328Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Nov 1 00:12:59.122626 env[1824]: time="2025-11-01T00:12:59.122596069Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Nov 1 00:12:59.122746 env[1824]: time="2025-11-01T00:12:59.122716975Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Nov 1 00:12:59.122869 env[1824]: time="2025-11-01T00:12:59.122839249Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Nov 1 00:12:59.123046 env[1824]: time="2025-11-01T00:12:59.123015026Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Nov 1 00:12:59.123463 env[1824]: time="2025-11-01T00:12:59.123427730Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Nov 1 00:12:59.123604 env[1824]: time="2025-11-01T00:12:59.123574060Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Nov 1 00:12:59.123731 env[1824]: time="2025-11-01T00:12:59.123702054Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Nov 1 00:12:59.124272 env[1824]: time="2025-11-01T00:12:59.124229217Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Nov 1 00:12:59.124627 env[1824]: time="2025-11-01T00:12:59.124586515Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Nov 1 00:12:59.127558 env[1824]: time="2025-11-01T00:12:59.127507618Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Nov 1 00:12:59.128036 env[1824]: time="2025-11-01T00:12:59.127998824Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Nov 1 00:12:59.128231 env[1824]: time="2025-11-01T00:12:59.128200341Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Nov 1 00:12:59.128803 env[1824]: time="2025-11-01T00:12:59.128696856Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Nov 1 00:12:59.131105 env[1824]: time="2025-11-01T00:12:59.130003667Z" level=info msg="Connect containerd service" Nov 1 00:12:59.131105 env[1824]: time="2025-11-01T00:12:59.130082497Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Nov 1 00:12:59.135666 env[1824]: time="2025-11-01T00:12:59.135604352Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Nov 1 00:12:59.135870 polkitd[1914]: Finished loading, compiling and executing 2 rules Nov 1 00:12:59.136916 dbus-daemon[1802]: [system] Successfully activated service 'org.freedesktop.PolicyKit1' Nov 1 00:12:59.137200 systemd[1]: Started polkit.service. Nov 1 00:12:59.140098 polkitd[1914]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Nov 1 00:12:59.143169 env[1824]: time="2025-11-01T00:12:59.143092464Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Nov 1 00:12:59.151310 env[1824]: time="2025-11-01T00:12:59.151261533Z" level=info msg=serving... address=/run/containerd/containerd.sock Nov 1 00:12:59.151652 env[1824]: time="2025-11-01T00:12:59.151619741Z" level=info msg="containerd successfully booted in 0.437677s" Nov 1 00:12:59.151734 systemd[1]: Started containerd.service. Nov 1 00:12:59.167045 env[1824]: time="2025-11-01T00:12:59.166937862Z" level=info msg="Start subscribing containerd event" Nov 1 00:12:59.170790 env[1824]: time="2025-11-01T00:12:59.170703580Z" level=info msg="Start recovering state" Nov 1 00:12:59.170952 env[1824]: time="2025-11-01T00:12:59.170898843Z" level=info msg="Start event monitor" Nov 1 00:12:59.171025 env[1824]: time="2025-11-01T00:12:59.170947886Z" level=info msg="Start snapshots syncer" Nov 1 00:12:59.171025 env[1824]: time="2025-11-01T00:12:59.170981321Z" level=info msg="Start cni network conf syncer for default" Nov 1 00:12:59.171025 env[1824]: time="2025-11-01T00:12:59.171004491Z" level=info msg="Start streaming server" Nov 1 00:12:59.202744 systemd-hostnamed[1859]: Hostname set to (transient) Nov 1 00:12:59.202903 systemd-resolved[1769]: System hostname changed to 'ip-172-31-27-146'. Nov 1 00:12:59.330501 coreos-metadata[1801]: Nov 01 00:12:59.330 INFO Putting http://169.254.169.254/latest/api/token: Attempt #1 Nov 1 00:12:59.332406 coreos-metadata[1801]: Nov 01 00:12:59.332 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys: Attempt #1 Nov 1 00:12:59.334227 coreos-metadata[1801]: Nov 01 00:12:59.334 INFO Fetch successful Nov 1 00:12:59.334227 coreos-metadata[1801]: Nov 01 00:12:59.334 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys/0/openssh-key: Attempt #1 Nov 1 00:12:59.335462 coreos-metadata[1801]: Nov 01 00:12:59.335 INFO Fetch successful Nov 1 00:12:59.340768 unknown[1801]: wrote ssh authorized keys file for user: core Nov 1 00:12:59.368733 update-ssh-keys[1963]: Updated "/home/core/.ssh/authorized_keys" Nov 1 00:12:59.369823 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Nov 1 00:12:59.439940 amazon-ssm-agent[1799]: 2025-11-01 00:12:59 INFO Create new startup processor Nov 1 00:12:59.442646 amazon-ssm-agent[1799]: 2025-11-01 00:12:59 INFO [LongRunningPluginsManager] registered plugins: {} Nov 1 00:12:59.442896 amazon-ssm-agent[1799]: 2025-11-01 00:12:59 INFO Initializing bookkeeping folders Nov 1 00:12:59.451083 amazon-ssm-agent[1799]: 2025-11-01 00:12:59 INFO removing the completed state files Nov 1 00:12:59.451299 amazon-ssm-agent[1799]: 2025-11-01 00:12:59 INFO Initializing bookkeeping folders for long running plugins Nov 1 00:12:59.451421 amazon-ssm-agent[1799]: 2025-11-01 00:12:59 INFO Initializing replies folder for MDS reply requests that couldn't reach the service Nov 1 00:12:59.451559 amazon-ssm-agent[1799]: 2025-11-01 00:12:59 INFO Initializing healthcheck folders for long running plugins Nov 1 00:12:59.452463 amazon-ssm-agent[1799]: 2025-11-01 00:12:59 INFO Initializing locations for inventory plugin Nov 1 00:12:59.452636 amazon-ssm-agent[1799]: 2025-11-01 00:12:59 INFO Initializing default location for custom inventory Nov 1 00:12:59.452806 amazon-ssm-agent[1799]: 2025-11-01 00:12:59 INFO Initializing default location for file inventory Nov 1 00:12:59.452928 amazon-ssm-agent[1799]: 2025-11-01 00:12:59 INFO Initializing default location for role inventory Nov 1 00:12:59.453152 amazon-ssm-agent[1799]: 2025-11-01 00:12:59 INFO Init the cloudwatchlogs publisher Nov 1 00:12:59.453276 amazon-ssm-agent[1799]: 2025-11-01 00:12:59 INFO [instanceID=i-0c20941eecc370c69] Successfully loaded platform independent plugin aws:runDockerAction Nov 1 00:12:59.453398 amazon-ssm-agent[1799]: 2025-11-01 00:12:59 INFO [instanceID=i-0c20941eecc370c69] Successfully loaded platform independent plugin aws:configurePackage Nov 1 00:12:59.453543 amazon-ssm-agent[1799]: 2025-11-01 00:12:59 INFO [instanceID=i-0c20941eecc370c69] Successfully loaded platform independent plugin aws:softwareInventory Nov 1 00:12:59.453658 amazon-ssm-agent[1799]: 2025-11-01 00:12:59 INFO [instanceID=i-0c20941eecc370c69] Successfully loaded platform independent plugin aws:configureDocker Nov 1 00:12:59.453774 amazon-ssm-agent[1799]: 2025-11-01 00:12:59 INFO [instanceID=i-0c20941eecc370c69] Successfully loaded platform independent plugin aws:refreshAssociation Nov 1 00:12:59.453906 amazon-ssm-agent[1799]: 2025-11-01 00:12:59 INFO [instanceID=i-0c20941eecc370c69] Successfully loaded platform independent plugin aws:downloadContent Nov 1 00:12:59.454025 amazon-ssm-agent[1799]: 2025-11-01 00:12:59 INFO [instanceID=i-0c20941eecc370c69] Successfully loaded platform independent plugin aws:runDocument Nov 1 00:12:59.455173 amazon-ssm-agent[1799]: 2025-11-01 00:12:59 INFO [instanceID=i-0c20941eecc370c69] Successfully loaded platform independent plugin aws:runPowerShellScript Nov 1 00:12:59.456333 amazon-ssm-agent[1799]: 2025-11-01 00:12:59 INFO [instanceID=i-0c20941eecc370c69] Successfully loaded platform independent plugin aws:updateSsmAgent Nov 1 00:12:59.456485 amazon-ssm-agent[1799]: 2025-11-01 00:12:59 INFO [instanceID=i-0c20941eecc370c69] Successfully loaded platform dependent plugin aws:runShellScript Nov 1 00:12:59.456608 amazon-ssm-agent[1799]: 2025-11-01 00:12:59 INFO Starting Agent: amazon-ssm-agent - v2.3.1319.0 Nov 1 00:12:59.456725 amazon-ssm-agent[1799]: 2025-11-01 00:12:59 INFO OS: linux, Arch: arm64 Nov 1 00:12:59.484215 amazon-ssm-agent[1799]: datastore file /var/lib/amazon/ssm/i-0c20941eecc370c69/longrunningplugins/datastore/store doesn't exist - no long running plugins to execute Nov 1 00:12:59.550852 amazon-ssm-agent[1799]: 2025-11-01 00:12:59 INFO [MessageGatewayService] Starting session document processing engine... Nov 1 00:12:59.653677 amazon-ssm-agent[1799]: 2025-11-01 00:12:59 INFO [MessageGatewayService] [EngineProcessor] Starting Nov 1 00:12:59.748158 amazon-ssm-agent[1799]: 2025-11-01 00:12:59 INFO [MessageGatewayService] SSM Agent is trying to setup control channel for Session Manager module. Nov 1 00:12:59.842759 amazon-ssm-agent[1799]: 2025-11-01 00:12:59 INFO [MessageGatewayService] Setting up websocket for controlchannel for instance: i-0c20941eecc370c69, requestId: 6c5670dc-4a27-4c3b-b381-88136f02128a Nov 1 00:12:59.937540 amazon-ssm-agent[1799]: 2025-11-01 00:12:59 INFO [MessagingDeliveryService] Starting document processing engine... Nov 1 00:13:00.032395 amazon-ssm-agent[1799]: 2025-11-01 00:12:59 INFO [MessagingDeliveryService] [EngineProcessor] Starting Nov 1 00:13:00.127519 amazon-ssm-agent[1799]: 2025-11-01 00:12:59 INFO [MessagingDeliveryService] [EngineProcessor] Initial processing Nov 1 00:13:00.222935 amazon-ssm-agent[1799]: 2025-11-01 00:12:59 INFO [MessagingDeliveryService] Starting message polling Nov 1 00:13:00.265019 tar[1822]: linux-arm64/README.md Nov 1 00:13:00.277932 systemd[1]: Finished prepare-helm.service. Nov 1 00:13:00.318403 amazon-ssm-agent[1799]: 2025-11-01 00:12:59 INFO [MessagingDeliveryService] Starting send replies to MDS Nov 1 00:13:00.414489 amazon-ssm-agent[1799]: 2025-11-01 00:12:59 INFO [instanceID=i-0c20941eecc370c69] Starting association polling Nov 1 00:13:00.492700 locksmithd[1878]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Nov 1 00:13:00.510375 amazon-ssm-agent[1799]: 2025-11-01 00:12:59 INFO [MessagingDeliveryService] [Association] [EngineProcessor] Starting Nov 1 00:13:00.606493 amazon-ssm-agent[1799]: 2025-11-01 00:12:59 INFO [MessagingDeliveryService] [Association] Launching response handler Nov 1 00:13:00.702776 amazon-ssm-agent[1799]: 2025-11-01 00:12:59 INFO [MessagingDeliveryService] [Association] [EngineProcessor] Initial processing Nov 1 00:13:00.799367 amazon-ssm-agent[1799]: 2025-11-01 00:12:59 INFO [MessagingDeliveryService] [Association] Initializing association scheduling service Nov 1 00:13:00.861513 systemd[1]: Started kubelet.service. Nov 1 00:13:00.896000 amazon-ssm-agent[1799]: 2025-11-01 00:12:59 INFO [MessagingDeliveryService] [Association] Association scheduling service initialized Nov 1 00:13:00.992922 amazon-ssm-agent[1799]: 2025-11-01 00:12:59 INFO [MessageGatewayService] listening reply. Nov 1 00:13:01.090141 amazon-ssm-agent[1799]: 2025-11-01 00:12:59 INFO [HealthCheck] HealthCheck reporting agent health. Nov 1 00:13:01.187328 amazon-ssm-agent[1799]: 2025-11-01 00:12:59 INFO [OfflineService] Starting document processing engine... Nov 1 00:13:01.284779 amazon-ssm-agent[1799]: 2025-11-01 00:12:59 INFO [OfflineService] [EngineProcessor] Starting Nov 1 00:13:01.382510 amazon-ssm-agent[1799]: 2025-11-01 00:12:59 INFO [OfflineService] [EngineProcessor] Initial processing Nov 1 00:13:01.480277 amazon-ssm-agent[1799]: 2025-11-01 00:12:59 INFO [OfflineService] Starting message polling Nov 1 00:13:01.578413 amazon-ssm-agent[1799]: 2025-11-01 00:12:59 INFO [OfflineService] Starting send replies to MDS Nov 1 00:13:01.676808 amazon-ssm-agent[1799]: 2025-11-01 00:12:59 INFO [LongRunningPluginsManager] starting long running plugin manager Nov 1 00:13:01.775258 amazon-ssm-agent[1799]: 2025-11-01 00:12:59 INFO [LongRunningPluginsManager] there aren't any long running plugin to execute Nov 1 00:13:01.873860 amazon-ssm-agent[1799]: 2025-11-01 00:12:59 INFO [LongRunningPluginsManager] There are no long running plugins currently getting executed - skipping their healthcheck Nov 1 00:13:01.972793 amazon-ssm-agent[1799]: 2025-11-01 00:12:59 INFO [StartupProcessor] Executing startup processor tasks Nov 1 00:13:01.999172 kubelet[2004]: E1101 00:13:01.999093 2004 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 00:13:02.003445 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 00:13:02.003750 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 00:13:02.004177 systemd[1]: kubelet.service: Consumed 1.552s CPU time. Nov 1 00:13:02.071906 amazon-ssm-agent[1799]: 2025-11-01 00:12:59 INFO [StartupProcessor] Write to serial port: Amazon SSM Agent v2.3.1319.0 is running Nov 1 00:13:02.171302 amazon-ssm-agent[1799]: 2025-11-01 00:12:59 INFO [StartupProcessor] Write to serial port: OsProductName: Flatcar Container Linux by Kinvolk Nov 1 00:13:02.271358 amazon-ssm-agent[1799]: 2025-11-01 00:12:59 INFO [StartupProcessor] Write to serial port: OsVersion: 3510.3.8 Nov 1 00:13:02.370901 amazon-ssm-agent[1799]: 2025-11-01 00:12:59 INFO [MessageGatewayService] Opening websocket connection to: wss://ssmmessages.us-west-2.amazonaws.com/v1/control-channel/i-0c20941eecc370c69?role=subscribe&stream=input Nov 1 00:13:02.470725 amazon-ssm-agent[1799]: 2025-11-01 00:12:59 INFO [MessageGatewayService] Successfully opened websocket connection to: wss://ssmmessages.us-west-2.amazonaws.com/v1/control-channel/i-0c20941eecc370c69?role=subscribe&stream=input Nov 1 00:13:02.571242 amazon-ssm-agent[1799]: 2025-11-01 00:12:59 INFO [MessageGatewayService] Starting receiving message from control channel Nov 1 00:13:02.671738 amazon-ssm-agent[1799]: 2025-11-01 00:12:59 INFO [MessageGatewayService] [EngineProcessor] Initial processing Nov 1 00:13:05.262110 sshd_keygen[1818]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Nov 1 00:13:05.301303 systemd[1]: Finished sshd-keygen.service. Nov 1 00:13:05.306259 systemd[1]: Starting issuegen.service... Nov 1 00:13:05.317584 systemd[1]: issuegen.service: Deactivated successfully. Nov 1 00:13:05.317984 systemd[1]: Finished issuegen.service. Nov 1 00:13:05.322516 systemd[1]: Starting systemd-user-sessions.service... Nov 1 00:13:05.337349 systemd[1]: Finished systemd-user-sessions.service. Nov 1 00:13:05.342221 systemd[1]: Started getty@tty1.service. Nov 1 00:13:05.346675 systemd[1]: Started serial-getty@ttyS0.service. Nov 1 00:13:05.349274 systemd[1]: Reached target getty.target. Nov 1 00:13:05.351291 systemd[1]: Reached target multi-user.target. Nov 1 00:13:05.355794 systemd[1]: Starting systemd-update-utmp-runlevel.service... Nov 1 00:13:05.372012 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Nov 1 00:13:05.372413 systemd[1]: Finished systemd-update-utmp-runlevel.service. Nov 1 00:13:05.377756 systemd[1]: Startup finished in 1.203s (kernel) + 8.701s (initrd) + 16.072s (userspace) = 25.978s. Nov 1 00:13:07.082317 systemd[1]: Created slice system-sshd.slice. Nov 1 00:13:07.085075 systemd[1]: Started sshd@0-172.31.27.146:22-147.75.109.163:44522.service. Nov 1 00:13:07.530919 sshd[2025]: Accepted publickey for core from 147.75.109.163 port 44522 ssh2: RSA SHA256:l10clL99NTgBLZDdAUsIsAniCj4DES+0hQanxvSOioM Nov 1 00:13:07.536756 sshd[2025]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:13:07.556675 systemd[1]: Created slice user-500.slice. Nov 1 00:13:07.559061 systemd[1]: Starting user-runtime-dir@500.service... Nov 1 00:13:07.564324 systemd-logind[1813]: New session 1 of user core. Nov 1 00:13:07.587789 systemd[1]: Finished user-runtime-dir@500.service. Nov 1 00:13:07.591044 systemd[1]: Starting user@500.service... Nov 1 00:13:07.598809 (systemd)[2028]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:13:07.779613 systemd[2028]: Queued start job for default target default.target. Nov 1 00:13:07.781535 systemd[2028]: Reached target paths.target. Nov 1 00:13:07.781592 systemd[2028]: Reached target sockets.target. Nov 1 00:13:07.781625 systemd[2028]: Reached target timers.target. Nov 1 00:13:07.781656 systemd[2028]: Reached target basic.target. Nov 1 00:13:07.781756 systemd[2028]: Reached target default.target. Nov 1 00:13:07.781825 systemd[2028]: Startup finished in 170ms. Nov 1 00:13:07.782277 systemd[1]: Started user@500.service. Nov 1 00:13:07.784307 systemd[1]: Started session-1.scope. Nov 1 00:13:07.933247 systemd[1]: Started sshd@1-172.31.27.146:22-147.75.109.163:44530.service. Nov 1 00:13:08.111545 sshd[2037]: Accepted publickey for core from 147.75.109.163 port 44530 ssh2: RSA SHA256:l10clL99NTgBLZDdAUsIsAniCj4DES+0hQanxvSOioM Nov 1 00:13:08.114020 sshd[2037]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:13:08.122356 systemd-logind[1813]: New session 2 of user core. Nov 1 00:13:08.123213 systemd[1]: Started session-2.scope. Nov 1 00:13:08.255072 sshd[2037]: pam_unix(sshd:session): session closed for user core Nov 1 00:13:08.260362 systemd-logind[1813]: Session 2 logged out. Waiting for processes to exit. Nov 1 00:13:08.260544 systemd[1]: session-2.scope: Deactivated successfully. Nov 1 00:13:08.261900 systemd[1]: sshd@1-172.31.27.146:22-147.75.109.163:44530.service: Deactivated successfully. Nov 1 00:13:08.263805 systemd-logind[1813]: Removed session 2. Nov 1 00:13:08.282580 systemd[1]: Started sshd@2-172.31.27.146:22-147.75.109.163:44542.service. Nov 1 00:13:08.455006 sshd[2043]: Accepted publickey for core from 147.75.109.163 port 44542 ssh2: RSA SHA256:l10clL99NTgBLZDdAUsIsAniCj4DES+0hQanxvSOioM Nov 1 00:13:08.458011 sshd[2043]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:13:08.466497 systemd[1]: Started session-3.scope. Nov 1 00:13:08.467256 systemd-logind[1813]: New session 3 of user core. Nov 1 00:13:08.588847 sshd[2043]: pam_unix(sshd:session): session closed for user core Nov 1 00:13:08.595849 systemd[1]: sshd@2-172.31.27.146:22-147.75.109.163:44542.service: Deactivated successfully. Nov 1 00:13:08.596303 systemd-logind[1813]: Session 3 logged out. Waiting for processes to exit. Nov 1 00:13:08.597170 systemd[1]: session-3.scope: Deactivated successfully. Nov 1 00:13:08.600819 systemd-logind[1813]: Removed session 3. Nov 1 00:13:08.621093 systemd[1]: Started sshd@3-172.31.27.146:22-147.75.109.163:44556.service. Nov 1 00:13:08.798772 sshd[2049]: Accepted publickey for core from 147.75.109.163 port 44556 ssh2: RSA SHA256:l10clL99NTgBLZDdAUsIsAniCj4DES+0hQanxvSOioM Nov 1 00:13:08.801708 sshd[2049]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:13:08.809222 systemd-logind[1813]: New session 4 of user core. Nov 1 00:13:08.810649 systemd[1]: Started session-4.scope. Nov 1 00:13:08.942230 sshd[2049]: pam_unix(sshd:session): session closed for user core Nov 1 00:13:08.947275 systemd[1]: session-4.scope: Deactivated successfully. Nov 1 00:13:08.948407 systemd[1]: sshd@3-172.31.27.146:22-147.75.109.163:44556.service: Deactivated successfully. Nov 1 00:13:08.949927 systemd-logind[1813]: Session 4 logged out. Waiting for processes to exit. Nov 1 00:13:08.951723 systemd-logind[1813]: Removed session 4. Nov 1 00:13:08.969570 systemd[1]: Started sshd@4-172.31.27.146:22-147.75.109.163:44562.service. Nov 1 00:13:09.142608 sshd[2055]: Accepted publickey for core from 147.75.109.163 port 44562 ssh2: RSA SHA256:l10clL99NTgBLZDdAUsIsAniCj4DES+0hQanxvSOioM Nov 1 00:13:09.145712 sshd[2055]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:13:09.154406 systemd[1]: Started session-5.scope. Nov 1 00:13:09.156234 systemd-logind[1813]: New session 5 of user core. Nov 1 00:13:09.330533 sudo[2058]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Nov 1 00:13:09.331084 sudo[2058]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Nov 1 00:13:09.356741 dbus-daemon[1802]: avc: received setenforce notice (enforcing=1) Nov 1 00:13:09.358229 sudo[2058]: pam_unix(sudo:session): session closed for user root Nov 1 00:13:09.383083 sshd[2055]: pam_unix(sshd:session): session closed for user core Nov 1 00:13:09.387948 systemd[1]: session-5.scope: Deactivated successfully. Nov 1 00:13:09.389226 systemd-logind[1813]: Session 5 logged out. Waiting for processes to exit. Nov 1 00:13:09.389602 systemd[1]: sshd@4-172.31.27.146:22-147.75.109.163:44562.service: Deactivated successfully. Nov 1 00:13:09.393110 systemd-logind[1813]: Removed session 5. Nov 1 00:13:09.410383 systemd[1]: Started sshd@5-172.31.27.146:22-147.75.109.163:44574.service. Nov 1 00:13:09.582901 sshd[2062]: Accepted publickey for core from 147.75.109.163 port 44574 ssh2: RSA SHA256:l10clL99NTgBLZDdAUsIsAniCj4DES+0hQanxvSOioM Nov 1 00:13:09.585651 sshd[2062]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:13:09.594827 systemd[1]: Started session-6.scope. Nov 1 00:13:09.596249 systemd-logind[1813]: New session 6 of user core. Nov 1 00:13:09.702767 sudo[2066]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Nov 1 00:13:09.703735 sudo[2066]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Nov 1 00:13:09.708784 sudo[2066]: pam_unix(sudo:session): session closed for user root Nov 1 00:13:09.718197 sudo[2065]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Nov 1 00:13:09.719249 sudo[2065]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Nov 1 00:13:09.736677 systemd[1]: Stopping audit-rules.service... Nov 1 00:13:09.737000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Nov 1 00:13:09.738942 auditctl[2069]: No rules Nov 1 00:13:09.740573 kernel: kauditd_printk_skb: 104 callbacks suppressed Nov 1 00:13:09.740666 kernel: audit: type=1305 audit(1761955989.737:196): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Nov 1 00:13:09.741284 systemd[1]: audit-rules.service: Deactivated successfully. Nov 1 00:13:09.741638 systemd[1]: Stopped audit-rules.service. Nov 1 00:13:09.737000 audit[2069]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffd0040bf0 a2=420 a3=0 items=0 ppid=1 pid=2069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.745225 systemd[1]: Starting audit-rules.service... Nov 1 00:13:09.758302 kernel: audit: type=1300 audit(1761955989.737:196): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffd0040bf0 a2=420 a3=0 items=0 ppid=1 pid=2069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.737000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Nov 1 00:13:09.765629 kernel: audit: type=1327 audit(1761955989.737:196): proctitle=2F7362696E2F617564697463746C002D44 Nov 1 00:13:09.765754 kernel: audit: type=1131 audit(1761955989.739:197): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:09.739000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:09.782353 augenrules[2086]: No rules Nov 1 00:13:09.782000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:09.783550 systemd[1]: Finished audit-rules.service. Nov 1 00:13:09.792904 sudo[2065]: pam_unix(sudo:session): session closed for user root Nov 1 00:13:09.791000 audit[2065]: USER_END pid=2065 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:13:09.802619 kernel: audit: type=1130 audit(1761955989.782:198): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:09.802687 kernel: audit: type=1106 audit(1761955989.791:199): pid=2065 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:13:09.792000 audit[2065]: CRED_DISP pid=2065 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:13:09.811416 kernel: audit: type=1104 audit(1761955989.792:200): pid=2065 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:13:09.824167 sshd[2062]: pam_unix(sshd:session): session closed for user core Nov 1 00:13:09.824000 audit[2062]: USER_END pid=2062 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:09.824000 audit[2062]: CRED_DISP pid=2062 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:09.838448 systemd[1]: sshd@5-172.31.27.146:22-147.75.109.163:44574.service: Deactivated successfully. Nov 1 00:13:09.839621 systemd[1]: session-6.scope: Deactivated successfully. Nov 1 00:13:09.841759 systemd-logind[1813]: Session 6 logged out. Waiting for processes to exit. Nov 1 00:13:09.843517 systemd-logind[1813]: Removed session 6. Nov 1 00:13:09.847629 kernel: audit: type=1106 audit(1761955989.824:201): pid=2062 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:09.847740 kernel: audit: type=1104 audit(1761955989.824:202): pid=2062 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:09.836000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.27.146:22-147.75.109.163:44574 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:09.857215 kernel: audit: type=1131 audit(1761955989.836:203): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.27.146:22-147.75.109.163:44574 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:09.857903 systemd[1]: Started sshd@6-172.31.27.146:22-147.75.109.163:44588.service. Nov 1 00:13:09.859000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.27.146:22-147.75.109.163:44588 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:10.032000 audit[2092]: USER_ACCT pid=2092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:10.034355 sshd[2092]: Accepted publickey for core from 147.75.109.163 port 44588 ssh2: RSA SHA256:l10clL99NTgBLZDdAUsIsAniCj4DES+0hQanxvSOioM Nov 1 00:13:10.036000 audit[2092]: CRED_ACQ pid=2092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:10.036000 audit[2092]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd7655ca0 a2=3 a3=1 items=0 ppid=1 pid=2092 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:10.036000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:13:10.038109 sshd[2092]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:13:10.045825 systemd-logind[1813]: New session 7 of user core. Nov 1 00:13:10.046622 systemd[1]: Started session-7.scope. Nov 1 00:13:10.054000 audit[2092]: USER_START pid=2092 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:10.057000 audit[2094]: CRED_ACQ pid=2094 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:10.152000 audit[2095]: USER_ACCT pid=2095 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:13:10.153869 sudo[2095]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Nov 1 00:13:10.152000 audit[2095]: CRED_REFR pid=2095 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:13:10.154464 sudo[2095]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Nov 1 00:13:10.156000 audit[2095]: USER_START pid=2095 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:13:10.235547 systemd[1]: Starting docker.service... Nov 1 00:13:10.352785 env[2105]: time="2025-11-01T00:13:10.352612536Z" level=info msg="Starting up" Nov 1 00:13:10.356216 env[2105]: time="2025-11-01T00:13:10.356169392Z" level=info msg="parsed scheme: \"unix\"" module=grpc Nov 1 00:13:10.356417 env[2105]: time="2025-11-01T00:13:10.356389599Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Nov 1 00:13:10.356567 env[2105]: time="2025-11-01T00:13:10.356535020Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Nov 1 00:13:10.356678 env[2105]: time="2025-11-01T00:13:10.356651649Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Nov 1 00:13:10.361775 env[2105]: time="2025-11-01T00:13:10.361704346Z" level=info msg="parsed scheme: \"unix\"" module=grpc Nov 1 00:13:10.361775 env[2105]: time="2025-11-01T00:13:10.361750831Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Nov 1 00:13:10.361961 env[2105]: time="2025-11-01T00:13:10.361790136Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Nov 1 00:13:10.361961 env[2105]: time="2025-11-01T00:13:10.361814648Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Nov 1 00:13:10.371785 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport3157736523-merged.mount: Deactivated successfully. Nov 1 00:13:10.423520 env[2105]: time="2025-11-01T00:13:10.423439706Z" level=info msg="Loading containers: start." Nov 1 00:13:10.581000 audit[2135]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=2135 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:13:10.581000 audit[2135]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffe714c640 a2=0 a3=1 items=0 ppid=2105 pid=2135 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:10.581000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Nov 1 00:13:10.585000 audit[2137]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=2137 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:13:10.585000 audit[2137]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffd62e3780 a2=0 a3=1 items=0 ppid=2105 pid=2137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:10.585000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Nov 1 00:13:10.590000 audit[2139]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=2139 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:13:10.590000 audit[2139]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffc80d9f80 a2=0 a3=1 items=0 ppid=2105 pid=2139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:10.590000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Nov 1 00:13:10.595000 audit[2141]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=2141 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:13:10.595000 audit[2141]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=fffff53254a0 a2=0 a3=1 items=0 ppid=2105 pid=2141 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:10.595000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Nov 1 00:13:10.609000 audit[2143]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=2143 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:13:10.609000 audit[2143]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc37958d0 a2=0 a3=1 items=0 ppid=2105 pid=2143 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:10.609000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Nov 1 00:13:10.643000 audit[2148]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=2148 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:13:10.643000 audit[2148]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffcddc3620 a2=0 a3=1 items=0 ppid=2105 pid=2148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:10.643000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Nov 1 00:13:10.662000 audit[2150]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=2150 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:13:10.662000 audit[2150]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffffe723d30 a2=0 a3=1 items=0 ppid=2105 pid=2150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:10.662000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Nov 1 00:13:10.666000 audit[2152]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=2152 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:13:10.666000 audit[2152]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffda549c80 a2=0 a3=1 items=0 ppid=2105 pid=2152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:10.666000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Nov 1 00:13:10.671000 audit[2154]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=2154 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:13:10.671000 audit[2154]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffe178fbf0 a2=0 a3=1 items=0 ppid=2105 pid=2154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:10.671000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:13:10.690000 audit[2158]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=2158 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:13:10.690000 audit[2158]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffe62aaf10 a2=0 a3=1 items=0 ppid=2105 pid=2158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:10.690000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:13:10.697000 audit[2159]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=2159 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:13:10.697000 audit[2159]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffe326e630 a2=0 a3=1 items=0 ppid=2105 pid=2159 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:10.697000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:13:10.740186 kernel: Initializing XFRM netlink socket Nov 1 00:13:10.817067 env[2105]: time="2025-11-01T00:13:10.816995851Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Nov 1 00:13:10.820266 (udev-worker)[2115]: Network interface NamePolicy= disabled on kernel command line. Nov 1 00:13:10.855000 audit[2167]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=2167 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:13:10.855000 audit[2167]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=ffffd814ec30 a2=0 a3=1 items=0 ppid=2105 pid=2167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:10.855000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Nov 1 00:13:10.871000 audit[2170]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=2170 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:13:10.871000 audit[2170]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffec2c1a10 a2=0 a3=1 items=0 ppid=2105 pid=2170 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:10.871000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Nov 1 00:13:10.878000 audit[2173]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=2173 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:13:10.878000 audit[2173]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffc00ef1e0 a2=0 a3=1 items=0 ppid=2105 pid=2173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:10.878000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Nov 1 00:13:10.882000 audit[2175]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=2175 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:13:10.882000 audit[2175]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=fffff15ee4b0 a2=0 a3=1 items=0 ppid=2105 pid=2175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:10.882000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Nov 1 00:13:10.886000 audit[2177]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=2177 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:13:10.886000 audit[2177]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffca9a00a0 a2=0 a3=1 items=0 ppid=2105 pid=2177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:10.886000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Nov 1 00:13:10.890000 audit[2179]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=2179 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:13:10.890000 audit[2179]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=ffffc3876550 a2=0 a3=1 items=0 ppid=2105 pid=2179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:10.890000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Nov 1 00:13:10.896000 audit[2181]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=2181 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:13:10.896000 audit[2181]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=fffffc3a9780 a2=0 a3=1 items=0 ppid=2105 pid=2181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:10.896000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Nov 1 00:13:10.917000 audit[2184]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=2184 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:13:10.917000 audit[2184]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffde6e41a0 a2=0 a3=1 items=0 ppid=2105 pid=2184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:10.917000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Nov 1 00:13:10.923000 audit[2186]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=2186 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:13:10.923000 audit[2186]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffd6928070 a2=0 a3=1 items=0 ppid=2105 pid=2186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:10.923000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Nov 1 00:13:10.929000 audit[2188]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=2188 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:13:10.929000 audit[2188]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffce40eea0 a2=0 a3=1 items=0 ppid=2105 pid=2188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:10.929000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Nov 1 00:13:10.934000 audit[2190]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=2190 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:13:10.934000 audit[2190]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffed028b20 a2=0 a3=1 items=0 ppid=2105 pid=2190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:10.934000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Nov 1 00:13:10.936402 systemd-networkd[1549]: docker0: Link UP Nov 1 00:13:10.958000 audit[2194]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=2194 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:13:10.958000 audit[2194]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff5777b40 a2=0 a3=1 items=0 ppid=2105 pid=2194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:10.958000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:13:10.965000 audit[2195]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=2195 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:13:10.965000 audit[2195]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=fffff3f60b30 a2=0 a3=1 items=0 ppid=2105 pid=2195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:10.965000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:13:10.968045 env[2105]: time="2025-11-01T00:13:10.967979731Z" level=info msg="Loading containers: done." Nov 1 00:13:10.998431 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck286981746-merged.mount: Deactivated successfully. Nov 1 00:13:11.018506 env[2105]: time="2025-11-01T00:13:11.018445938Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Nov 1 00:13:11.018800 env[2105]: time="2025-11-01T00:13:11.018759725Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Nov 1 00:13:11.018987 env[2105]: time="2025-11-01T00:13:11.018954764Z" level=info msg="Daemon has completed initialization" Nov 1 00:13:11.052000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:11.053078 systemd[1]: Started docker.service. Nov 1 00:13:11.073730 env[2105]: time="2025-11-01T00:13:11.073646046Z" level=info msg="API listen on /run/docker.sock" Nov 1 00:13:12.255075 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Nov 1 00:13:12.255463 systemd[1]: Stopped kubelet.service. Nov 1 00:13:12.255560 systemd[1]: kubelet.service: Consumed 1.552s CPU time. Nov 1 00:13:12.255000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:12.255000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:12.258081 systemd[1]: Starting kubelet.service... Nov 1 00:13:12.490606 env[1824]: time="2025-11-01T00:13:12.490546344Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.32.9\"" Nov 1 00:13:12.649000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:12.650603 systemd[1]: Started kubelet.service. Nov 1 00:13:12.738432 kubelet[2231]: E1101 00:13:12.738373 2231 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 00:13:12.745659 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 00:13:12.745964 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 00:13:12.745000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 00:13:13.102859 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2900568609.mount: Deactivated successfully. Nov 1 00:13:15.020473 env[1824]: time="2025-11-01T00:13:15.020391214Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:13:15.024422 env[1824]: time="2025-11-01T00:13:15.023470673Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:02ea53851f07db91ed471dab1ab11541f5c294802371cd8f0cfd423cd5c71002,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:13:15.027157 env[1824]: time="2025-11-01T00:13:15.026963233Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:13:15.030542 env[1824]: time="2025-11-01T00:13:15.030490813Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:6df11cc2ad9679b1117be34d3a0230add88bc0a08fd7a3ebc26b680575e8de97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:13:15.032223 env[1824]: time="2025-11-01T00:13:15.032177828Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.32.9\" returns image reference \"sha256:02ea53851f07db91ed471dab1ab11541f5c294802371cd8f0cfd423cd5c71002\"" Nov 1 00:13:15.033355 env[1824]: time="2025-11-01T00:13:15.033309893Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.32.9\"" Nov 1 00:13:17.079513 env[1824]: time="2025-11-01T00:13:17.079412945Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:13:17.082179 env[1824]: time="2025-11-01T00:13:17.082087056Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:f0bcbad5082c944520b370596a2384affda710b9d7daf84e8a48352699af8e4b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:13:17.086459 env[1824]: time="2025-11-01T00:13:17.086399595Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:13:17.091527 env[1824]: time="2025-11-01T00:13:17.090451585Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:243c4b8e3bce271fcb1b78008ab996ab6976b1a20096deac08338fcd17979922,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:13:17.092693 env[1824]: time="2025-11-01T00:13:17.092628153Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.32.9\" returns image reference \"sha256:f0bcbad5082c944520b370596a2384affda710b9d7daf84e8a48352699af8e4b\"" Nov 1 00:13:17.095068 env[1824]: time="2025-11-01T00:13:17.095016313Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.32.9\"" Nov 1 00:13:18.654363 env[1824]: time="2025-11-01T00:13:18.654305615Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:13:18.660220 env[1824]: time="2025-11-01T00:13:18.660168923Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1d625baf81b59592006d97a6741bc947698ed222b612ac10efa57b7aa96d2a27,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:13:18.664262 env[1824]: time="2025-11-01T00:13:18.664198389Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:13:18.668435 env[1824]: time="2025-11-01T00:13:18.668384781Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:50c49520dbd0e8b4076b6a5c77d8014df09ea3d59a73e8bafd2678d51ebb92d5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:13:18.669941 env[1824]: time="2025-11-01T00:13:18.669893338Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.32.9\" returns image reference \"sha256:1d625baf81b59592006d97a6741bc947698ed222b612ac10efa57b7aa96d2a27\"" Nov 1 00:13:18.670803 env[1824]: time="2025-11-01T00:13:18.670758841Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.32.9\"" Nov 1 00:13:19.775405 amazon-ssm-agent[1799]: 2025-11-01 00:13:19 INFO [MessagingDeliveryService] [Association] No associations on boot. Requerying for associations after 30 seconds. Nov 1 00:13:20.009460 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2122320937.mount: Deactivated successfully. Nov 1 00:13:20.957022 env[1824]: time="2025-11-01T00:13:20.956961883Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:13:20.962908 env[1824]: time="2025-11-01T00:13:20.962858400Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:72b57ec14d31e8422925ef4c3eff44822cdc04a11fd30d13824f1897d83a16d4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:13:20.969913 env[1824]: time="2025-11-01T00:13:20.969860561Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:13:20.976425 env[1824]: time="2025-11-01T00:13:20.976358865Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:886af02535dc34886e4618b902f8c140d89af57233a245621d29642224516064,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:13:20.977488 env[1824]: time="2025-11-01T00:13:20.977442560Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.32.9\" returns image reference \"sha256:72b57ec14d31e8422925ef4c3eff44822cdc04a11fd30d13824f1897d83a16d4\"" Nov 1 00:13:20.978352 env[1824]: time="2025-11-01T00:13:20.978307881Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\"" Nov 1 00:13:21.515212 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3840563992.mount: Deactivated successfully. Nov 1 00:13:22.993068 env[1824]: time="2025-11-01T00:13:22.993007632Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:13:22.997358 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Nov 1 00:13:23.008177 kernel: kauditd_printk_skb: 88 callbacks suppressed Nov 1 00:13:23.008289 kernel: audit: type=1130 audit(1761956002.996:242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:22.996000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:22.997698 systemd[1]: Stopped kubelet.service. Nov 1 00:13:23.000294 systemd[1]: Starting kubelet.service... Nov 1 00:13:22.996000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:23.017319 kernel: audit: type=1131 audit(1761956002.996:243): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:23.018813 env[1824]: time="2025-11-01T00:13:23.018730092Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2f6c962e7b8311337352d9fdea917da2184d9919f4da7695bc2a6517cf392fe4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:13:23.024661 env[1824]: time="2025-11-01T00:13:23.024597355Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:13:23.031317 env[1824]: time="2025-11-01T00:13:23.031261534Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:9caabbf6238b189a65d0d6e6ac138de60d6a1c419e5a341fbbb7c78382559c6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:13:23.033553 env[1824]: time="2025-11-01T00:13:23.033488233Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\" returns image reference \"sha256:2f6c962e7b8311337352d9fdea917da2184d9919f4da7695bc2a6517cf392fe4\"" Nov 1 00:13:23.035849 env[1824]: time="2025-11-01T00:13:23.035798869Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Nov 1 00:13:23.349090 systemd[1]: Started kubelet.service. Nov 1 00:13:23.348000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:23.360215 kernel: audit: type=1130 audit(1761956003.348:244): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:23.434656 kubelet[2243]: E1101 00:13:23.434561 2243 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 00:13:23.439382 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 00:13:23.439689 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 00:13:23.438000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 00:13:23.449164 kernel: audit: type=1131 audit(1761956003.438:245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 00:13:23.552919 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4034288147.mount: Deactivated successfully. Nov 1 00:13:23.567981 env[1824]: time="2025-11-01T00:13:23.567903556Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:13:23.573169 env[1824]: time="2025-11-01T00:13:23.573104325Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:13:23.579698 env[1824]: time="2025-11-01T00:13:23.579624013Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:13:23.583034 env[1824]: time="2025-11-01T00:13:23.582983365Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:13:23.584114 env[1824]: time="2025-11-01T00:13:23.584065502Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8\"" Nov 1 00:13:23.585846 env[1824]: time="2025-11-01T00:13:23.585787135Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.16-0\"" Nov 1 00:13:24.200888 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2053483656.mount: Deactivated successfully. Nov 1 00:13:28.105736 env[1824]: time="2025-11-01T00:13:28.105674142Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.16-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:13:28.111013 env[1824]: time="2025-11-01T00:13:28.110948769Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7fc9d4aa817aa6a3e549f3cd49d1f7b496407be979fc36dd5f356d59ce8c3a82,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:13:28.116842 env[1824]: time="2025-11-01T00:13:28.116771224Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.16-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:13:28.121858 env[1824]: time="2025-11-01T00:13:28.121793499Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:c6a9d11cc5c04b114ccdef39a9265eeef818e3d02f5359be035ae784097fdec5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:13:28.126654 env[1824]: time="2025-11-01T00:13:28.126582061Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.16-0\" returns image reference \"sha256:7fc9d4aa817aa6a3e549f3cd49d1f7b496407be979fc36dd5f356d59ce8c3a82\"" Nov 1 00:13:29.227000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:29.227412 systemd[1]: systemd-hostnamed.service: Deactivated successfully. Nov 1 00:13:29.239161 kernel: audit: type=1131 audit(1761956009.227:246): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:29.257000 audit: BPF prog-id=40 op=UNLOAD Nov 1 00:13:29.257000 audit: BPF prog-id=39 op=UNLOAD Nov 1 00:13:29.262527 kernel: audit: type=1334 audit(1761956009.257:247): prog-id=40 op=UNLOAD Nov 1 00:13:29.262604 kernel: audit: type=1334 audit(1761956009.257:248): prog-id=39 op=UNLOAD Nov 1 00:13:29.262654 kernel: audit: type=1334 audit(1761956009.257:249): prog-id=38 op=UNLOAD Nov 1 00:13:29.257000 audit: BPF prog-id=38 op=UNLOAD Nov 1 00:13:33.691050 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 3. Nov 1 00:13:33.691421 systemd[1]: Stopped kubelet.service. Nov 1 00:13:33.690000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:33.701941 systemd[1]: Starting kubelet.service... Nov 1 00:13:33.690000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:33.722153 kernel: audit: type=1130 audit(1761956013.690:250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:33.722249 kernel: audit: type=1131 audit(1761956013.690:251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:34.042269 systemd[1]: Started kubelet.service. Nov 1 00:13:34.041000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:34.055175 kernel: audit: type=1130 audit(1761956014.041:252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:34.135804 kubelet[2272]: E1101 00:13:34.135729 2272 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 00:13:34.138761 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 00:13:34.139110 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 00:13:34.138000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 00:13:34.148160 kernel: audit: type=1131 audit(1761956014.138:253): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 00:13:34.476000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:34.475988 systemd[1]: Stopped kubelet.service. Nov 1 00:13:34.484798 systemd[1]: Starting kubelet.service... Nov 1 00:13:34.494867 kernel: audit: type=1130 audit(1761956014.476:254): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:34.494996 kernel: audit: type=1131 audit(1761956014.476:255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:34.476000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:34.551837 systemd[1]: Reloading. Nov 1 00:13:34.729530 /usr/lib/systemd/system-generators/torcx-generator[2307]: time="2025-11-01T00:13:34Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Nov 1 00:13:34.729595 /usr/lib/systemd/system-generators/torcx-generator[2307]: time="2025-11-01T00:13:34Z" level=info msg="torcx already run" Nov 1 00:13:34.920428 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Nov 1 00:13:34.920885 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Nov 1 00:13:34.959480 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Nov 1 00:13:35.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.140011 kernel: audit: type=1400 audit(1761956015.123:256): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.140197 kernel: audit: type=1400 audit(1761956015.123:257): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.140259 kernel: audit: type=1400 audit(1761956015.123:258): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.124000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.155612 kernel: audit: type=1400 audit(1761956015.124:259): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.155698 kernel: audit: type=1400 audit(1761956015.124:260): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.124000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.124000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.171089 kernel: audit: type=1400 audit(1761956015.124:261): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.171206 kernel: audit: type=1400 audit(1761956015.124:262): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.124000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.179300 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Nov 1 00:13:35.124000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.124000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.131000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.131000 audit: BPF prog-id=43 op=LOAD Nov 1 00:13:35.131000 audit: BPF prog-id=34 op=UNLOAD Nov 1 00:13:35.133000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.133000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.134000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.134000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.134000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.134000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.134000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.134000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.134000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.139000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.139000 audit: BPF prog-id=44 op=LOAD Nov 1 00:13:35.139000 audit: BPF prog-id=24 op=UNLOAD Nov 1 00:13:35.139000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.139000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.139000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.146000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.146000 audit: BPF prog-id=45 op=LOAD Nov 1 00:13:35.146000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.146000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.146000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.154000 audit: BPF prog-id=46 op=LOAD Nov 1 00:13:35.154000 audit: BPF prog-id=25 op=UNLOAD Nov 1 00:13:35.154000 audit: BPF prog-id=26 op=UNLOAD Nov 1 00:13:35.155000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.155000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.155000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.155000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.155000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.155000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.155000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.155000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.162000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.162000 audit: BPF prog-id=47 op=LOAD Nov 1 00:13:35.162000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.162000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.162000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.162000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.162000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.162000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.162000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.162000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.170000 audit: BPF prog-id=48 op=LOAD Nov 1 00:13:35.170000 audit: BPF prog-id=27 op=UNLOAD Nov 1 00:13:35.170000 audit: BPF prog-id=28 op=UNLOAD Nov 1 00:13:35.171000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.171000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.171000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.171000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.180000 audit: BPF prog-id=49 op=LOAD Nov 1 00:13:35.180000 audit: BPF prog-id=29 op=UNLOAD Nov 1 00:13:35.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.184000 audit: BPF prog-id=50 op=LOAD Nov 1 00:13:35.184000 audit: BPF prog-id=33 op=UNLOAD Nov 1 00:13:35.185000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.185000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.185000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.185000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.185000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.185000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.185000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.185000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.185000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.186000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.186000 audit: BPF prog-id=51 op=LOAD Nov 1 00:13:35.186000 audit: BPF prog-id=30 op=UNLOAD Nov 1 00:13:35.186000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.186000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.186000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.186000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.186000 audit: BPF prog-id=52 op=LOAD Nov 1 00:13:35.186000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.186000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.186000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.186000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.186000 audit: BPF prog-id=53 op=LOAD Nov 1 00:13:35.186000 audit: BPF prog-id=31 op=UNLOAD Nov 1 00:13:35.186000 audit: BPF prog-id=32 op=UNLOAD Nov 1 00:13:35.189000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.189000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.189000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.189000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.189000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.189000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.189000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.189000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.189000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.189000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.189000 audit: BPF prog-id=54 op=LOAD Nov 1 00:13:35.189000 audit: BPF prog-id=35 op=UNLOAD Nov 1 00:13:35.189000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.189000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.189000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.189000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.189000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.189000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.189000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.189000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.190000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.190000 audit: BPF prog-id=55 op=LOAD Nov 1 00:13:35.190000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.190000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.190000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.190000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.190000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.190000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.190000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.190000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.190000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.190000 audit: BPF prog-id=56 op=LOAD Nov 1 00:13:35.190000 audit: BPF prog-id=36 op=UNLOAD Nov 1 00:13:35.190000 audit: BPF prog-id=37 op=UNLOAD Nov 1 00:13:35.196000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.196000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.196000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.196000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.196000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.196000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.196000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.196000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.196000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.196000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:35.196000 audit: BPF prog-id=57 op=LOAD Nov 1 00:13:35.196000 audit: BPF prog-id=41 op=UNLOAD Nov 1 00:13:35.237099 systemd[1]: Started kubelet.service. Nov 1 00:13:35.236000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:35.249609 systemd[1]: Stopping kubelet.service... Nov 1 00:13:35.250449 systemd[1]: kubelet.service: Deactivated successfully. Nov 1 00:13:35.250830 systemd[1]: Stopped kubelet.service. Nov 1 00:13:35.249000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:35.254488 systemd[1]: Starting kubelet.service... Nov 1 00:13:35.572032 systemd[1]: Started kubelet.service. Nov 1 00:13:35.572000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:35.663991 kubelet[2371]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Nov 1 00:13:35.664517 kubelet[2371]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Nov 1 00:13:35.664655 kubelet[2371]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Nov 1 00:13:35.664949 kubelet[2371]: I1101 00:13:35.664897 2371 server.go:215] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Nov 1 00:13:37.204020 kubelet[2371]: I1101 00:13:37.203966 2371 server.go:520] "Kubelet version" kubeletVersion="v1.32.4" Nov 1 00:13:37.204647 kubelet[2371]: I1101 00:13:37.204621 2371 server.go:522] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Nov 1 00:13:37.205267 kubelet[2371]: I1101 00:13:37.205241 2371 server.go:954] "Client rotation is on, will bootstrap in background" Nov 1 00:13:37.285191 kubelet[2371]: E1101 00:13:37.285110 2371 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://172.31.27.146:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 172.31.27.146:6443: connect: connection refused" logger="UnhandledError" Nov 1 00:13:37.287218 kubelet[2371]: I1101 00:13:37.287114 2371 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Nov 1 00:13:37.305069 kubelet[2371]: E1101 00:13:37.305001 2371 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Nov 1 00:13:37.305069 kubelet[2371]: I1101 00:13:37.305063 2371 server.go:1421] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Nov 1 00:13:37.311112 kubelet[2371]: I1101 00:13:37.311045 2371 server.go:772] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Nov 1 00:13:37.311746 kubelet[2371]: I1101 00:13:37.311677 2371 container_manager_linux.go:268] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Nov 1 00:13:37.312035 kubelet[2371]: I1101 00:13:37.311740 2371 container_manager_linux.go:273] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ip-172-31-27-146","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Nov 1 00:13:37.312234 kubelet[2371]: I1101 00:13:37.312218 2371 topology_manager.go:138] "Creating topology manager with none policy" Nov 1 00:13:37.312312 kubelet[2371]: I1101 00:13:37.312240 2371 container_manager_linux.go:304] "Creating device plugin manager" Nov 1 00:13:37.312602 kubelet[2371]: I1101 00:13:37.312574 2371 state_mem.go:36] "Initialized new in-memory state store" Nov 1 00:13:37.318966 kubelet[2371]: I1101 00:13:37.318910 2371 kubelet.go:446] "Attempting to sync node with API server" Nov 1 00:13:37.319149 kubelet[2371]: I1101 00:13:37.319091 2371 kubelet.go:341] "Adding static pod path" path="/etc/kubernetes/manifests" Nov 1 00:13:37.319239 kubelet[2371]: I1101 00:13:37.319211 2371 kubelet.go:352] "Adding apiserver pod source" Nov 1 00:13:37.319304 kubelet[2371]: I1101 00:13:37.319245 2371 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Nov 1 00:13:37.322882 kubelet[2371]: W1101 00:13:37.322786 2371 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://172.31.27.146:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-27-146&limit=500&resourceVersion=0": dial tcp 172.31.27.146:6443: connect: connection refused Nov 1 00:13:37.323040 kubelet[2371]: E1101 00:13:37.322896 2371 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://172.31.27.146:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-27-146&limit=500&resourceVersion=0\": dial tcp 172.31.27.146:6443: connect: connection refused" logger="UnhandledError" Nov 1 00:13:37.328600 kubelet[2371]: I1101 00:13:37.328565 2371 kuberuntime_manager.go:269] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Nov 1 00:13:37.329853 kubelet[2371]: I1101 00:13:37.329823 2371 kubelet.go:890] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Nov 1 00:13:37.330205 kubelet[2371]: W1101 00:13:37.330184 2371 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Nov 1 00:13:37.331920 kubelet[2371]: I1101 00:13:37.331885 2371 watchdog_linux.go:99] "Systemd watchdog is not enabled" Nov 1 00:13:37.332114 kubelet[2371]: I1101 00:13:37.332092 2371 server.go:1287] "Started kubelet" Nov 1 00:13:37.332520 kubelet[2371]: W1101 00:13:37.332460 2371 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://172.31.27.146:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 172.31.27.146:6443: connect: connection refused Nov 1 00:13:37.332684 kubelet[2371]: E1101 00:13:37.332653 2371 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://172.31.27.146:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 172.31.27.146:6443: connect: connection refused" logger="UnhandledError" Nov 1 00:13:37.350662 kubelet[2371]: I1101 00:13:37.350583 2371 server.go:169] "Starting to listen" address="0.0.0.0" port=10250 Nov 1 00:13:37.352270 kubelet[2371]: I1101 00:13:37.352221 2371 server.go:479] "Adding debug handlers to kubelet server" Nov 1 00:13:37.355142 kubelet[2371]: I1101 00:13:37.355026 2371 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Nov 1 00:13:37.355781 kubelet[2371]: I1101 00:13:37.355745 2371 server.go:243] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Nov 1 00:13:37.355000 audit[2371]: AVC avc: denied { mac_admin } for pid=2371 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:37.355000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:13:37.355000 audit[2371]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000a45ad0 a1=4000a376f8 a2=4000a45aa0 a3=25 items=0 ppid=1 pid=2371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:37.355000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:13:37.355000 audit[2371]: AVC avc: denied { mac_admin } for pid=2371 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:37.355000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:13:37.355000 audit[2371]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000a4b540 a1=4000a37710 a2=4000a45b60 a3=25 items=0 ppid=1 pid=2371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:37.355000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:13:37.357541 kubelet[2371]: I1101 00:13:37.356759 2371 kubelet.go:1507] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Nov 1 00:13:37.357541 kubelet[2371]: I1101 00:13:37.356843 2371 kubelet.go:1511] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Nov 1 00:13:37.357541 kubelet[2371]: I1101 00:13:37.356982 2371 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Nov 1 00:13:37.360454 kubelet[2371]: E1101 00:13:37.359959 2371 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://172.31.27.146:6443/api/v1/namespaces/default/events\": dial tcp 172.31.27.146:6443: connect: connection refused" event="&Event{ObjectMeta:{ip-172-31-27-146.1873b9a99af08182 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:ip-172-31-27-146,UID:ip-172-31-27-146,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:ip-172-31-27-146,},FirstTimestamp:2025-11-01 00:13:37.332060546 +0000 UTC m=+1.749569729,LastTimestamp:2025-11-01 00:13:37.332060546 +0000 UTC m=+1.749569729,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:ip-172-31-27-146,}" Nov 1 00:13:37.362359 kubelet[2371]: I1101 00:13:37.362307 2371 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Nov 1 00:13:37.363000 audit[2383]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=2383 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:13:37.363000 audit[2383]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffde446c70 a2=0 a3=1 items=0 ppid=2371 pid=2383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:37.363000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Nov 1 00:13:37.366850 kubelet[2371]: I1101 00:13:37.366793 2371 volume_manager.go:297] "Starting Kubelet Volume Manager" Nov 1 00:13:37.367541 kubelet[2371]: E1101 00:13:37.367468 2371 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-27-146\" not found" Nov 1 00:13:37.368643 kubelet[2371]: I1101 00:13:37.368581 2371 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Nov 1 00:13:37.371029 kubelet[2371]: I1101 00:13:37.369059 2371 reconciler.go:26] "Reconciler: start to sync state" Nov 1 00:13:37.371029 kubelet[2371]: W1101 00:13:37.370558 2371 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://172.31.27.146:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.27.146:6443: connect: connection refused Nov 1 00:13:37.371029 kubelet[2371]: E1101 00:13:37.370653 2371 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://172.31.27.146:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 172.31.27.146:6443: connect: connection refused" logger="UnhandledError" Nov 1 00:13:37.371029 kubelet[2371]: E1101 00:13:37.370811 2371 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.27.146:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-27-146?timeout=10s\": dial tcp 172.31.27.146:6443: connect: connection refused" interval="200ms" Nov 1 00:13:37.371842 kubelet[2371]: I1101 00:13:37.371548 2371 factory.go:221] Registration of the systemd container factory successfully Nov 1 00:13:37.372449 kubelet[2371]: I1101 00:13:37.372386 2371 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Nov 1 00:13:37.372000 audit[2384]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=2384 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:13:37.372000 audit[2384]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffea85a40 a2=0 a3=1 items=0 ppid=2371 pid=2384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:37.372000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Nov 1 00:13:37.377339 kubelet[2371]: E1101 00:13:37.377274 2371 kubelet.go:1555] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Nov 1 00:13:37.378645 kubelet[2371]: I1101 00:13:37.378599 2371 factory.go:221] Registration of the containerd container factory successfully Nov 1 00:13:37.383000 audit[2386]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=2386 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:13:37.383000 audit[2386]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffc8c0b430 a2=0 a3=1 items=0 ppid=2371 pid=2386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:37.383000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Nov 1 00:13:37.389000 audit[2388]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=2388 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:13:37.389000 audit[2388]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=fffff2bb80b0 a2=0 a3=1 items=0 ppid=2371 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:37.389000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Nov 1 00:13:37.410000 audit[2394]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=2394 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:13:37.410000 audit[2394]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=fffff112f680 a2=0 a3=1 items=0 ppid=2371 pid=2394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:37.410000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Nov 1 00:13:37.413303 kubelet[2371]: I1101 00:13:37.413225 2371 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Nov 1 00:13:37.415000 audit[2395]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=2395 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:13:37.415000 audit[2395]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffd1e62760 a2=0 a3=1 items=0 ppid=2371 pid=2395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:37.415000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Nov 1 00:13:37.418551 kubelet[2371]: I1101 00:13:37.418512 2371 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Nov 1 00:13:37.419392 kubelet[2371]: I1101 00:13:37.419364 2371 status_manager.go:227] "Starting to sync pod status with apiserver" Nov 1 00:13:37.419621 kubelet[2371]: I1101 00:13:37.419596 2371 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Nov 1 00:13:37.418000 audit[2396]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=2396 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:13:37.418000 audit[2396]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff8dd2e90 a2=0 a3=1 items=0 ppid=2371 pid=2396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:37.418000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Nov 1 00:13:37.420864 kubelet[2371]: I1101 00:13:37.420837 2371 kubelet.go:2382] "Starting kubelet main sync loop" Nov 1 00:13:37.421209 kubelet[2371]: E1101 00:13:37.421104 2371 kubelet.go:2406] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Nov 1 00:13:37.420000 audit[2398]: NETFILTER_CFG table=mangle:33 family=10 entries=1 op=nft_register_chain pid=2398 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:13:37.420000 audit[2398]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff098f010 a2=0 a3=1 items=0 ppid=2371 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:37.420000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Nov 1 00:13:37.422892 kubelet[2371]: W1101 00:13:37.422848 2371 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://172.31.27.146:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.27.146:6443: connect: connection refused Nov 1 00:13:37.423194 kubelet[2371]: E1101 00:13:37.423099 2371 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://172.31.27.146:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 172.31.27.146:6443: connect: connection refused" logger="UnhandledError" Nov 1 00:13:37.424181 kubelet[2371]: I1101 00:13:37.424085 2371 cpu_manager.go:221] "Starting CPU manager" policy="none" Nov 1 00:13:37.423000 audit[2399]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=2399 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:13:37.423000 audit[2399]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd20b19d0 a2=0 a3=1 items=0 ppid=2371 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:37.423000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Nov 1 00:13:37.425645 kubelet[2371]: I1101 00:13:37.424339 2371 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Nov 1 00:13:37.425919 kubelet[2371]: I1101 00:13:37.425872 2371 state_mem.go:36] "Initialized new in-memory state store" Nov 1 00:13:37.425000 audit[2400]: NETFILTER_CFG table=nat:35 family=10 entries=2 op=nft_register_chain pid=2400 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:13:37.425000 audit[2400]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=ffffea4b50c0 a2=0 a3=1 items=0 ppid=2371 pid=2400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:37.425000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Nov 1 00:13:37.427000 audit[2401]: NETFILTER_CFG table=filter:36 family=2 entries=1 op=nft_register_chain pid=2401 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:13:37.427000 audit[2401]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd74f4280 a2=0 a3=1 items=0 ppid=2371 pid=2401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:37.427000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Nov 1 00:13:37.428000 audit[2402]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=2402 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:13:37.428000 audit[2402]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=fffff07d2ba0 a2=0 a3=1 items=0 ppid=2371 pid=2402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:37.428000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Nov 1 00:13:37.432477 kubelet[2371]: I1101 00:13:37.432444 2371 policy_none.go:49] "None policy: Start" Nov 1 00:13:37.432643 kubelet[2371]: I1101 00:13:37.432622 2371 memory_manager.go:186] "Starting memorymanager" policy="None" Nov 1 00:13:37.432780 kubelet[2371]: I1101 00:13:37.432760 2371 state_mem.go:35] "Initializing new in-memory state store" Nov 1 00:13:37.442198 systemd[1]: Created slice kubepods.slice. Nov 1 00:13:37.451968 systemd[1]: Created slice kubepods-besteffort.slice. Nov 1 00:13:37.468057 systemd[1]: Created slice kubepods-burstable.slice. Nov 1 00:13:37.472604 kubelet[2371]: E1101 00:13:37.472547 2371 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-27-146\" not found" Nov 1 00:13:37.474640 kubelet[2371]: I1101 00:13:37.474604 2371 manager.go:519] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Nov 1 00:13:37.473000 audit[2371]: AVC avc: denied { mac_admin } for pid=2371 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:37.473000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:13:37.473000 audit[2371]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000a44bd0 a1=4000ced0e0 a2=4000a44a20 a3=25 items=0 ppid=1 pid=2371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:37.473000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:13:37.477733 kubelet[2371]: I1101 00:13:37.477271 2371 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" Nov 1 00:13:37.477733 kubelet[2371]: I1101 00:13:37.477530 2371 eviction_manager.go:189] "Eviction manager: starting control loop" Nov 1 00:13:37.477932 kubelet[2371]: I1101 00:13:37.477653 2371 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Nov 1 00:13:37.478633 kubelet[2371]: I1101 00:13:37.478601 2371 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Nov 1 00:13:37.480184 kubelet[2371]: E1101 00:13:37.480104 2371 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Nov 1 00:13:37.480327 kubelet[2371]: E1101 00:13:37.480248 2371 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ip-172-31-27-146\" not found" Nov 1 00:13:37.538539 systemd[1]: Created slice kubepods-burstable-pod3f371552a05e78133c953bed90464198.slice. Nov 1 00:13:37.550925 kubelet[2371]: E1101 00:13:37.550660 2371 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-27-146\" not found" node="ip-172-31-27-146" Nov 1 00:13:37.556378 systemd[1]: Created slice kubepods-burstable-pod7d2582130ec47b9024f3ea9e77062b13.slice. Nov 1 00:13:37.562972 kubelet[2371]: E1101 00:13:37.562484 2371 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-27-146\" not found" node="ip-172-31-27-146" Nov 1 00:13:37.565751 systemd[1]: Created slice kubepods-burstable-pod5c3bd5ffd2c89c752284d3b7d4b71ff4.slice. Nov 1 00:13:37.568858 kubelet[2371]: E1101 00:13:37.568795 2371 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-27-146\" not found" node="ip-172-31-27-146" Nov 1 00:13:37.572269 kubelet[2371]: E1101 00:13:37.572216 2371 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.27.146:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-27-146?timeout=10s\": dial tcp 172.31.27.146:6443: connect: connection refused" interval="400ms" Nov 1 00:13:37.573582 kubelet[2371]: I1101 00:13:37.573536 2371 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/3f371552a05e78133c953bed90464198-ca-certs\") pod \"kube-controller-manager-ip-172-31-27-146\" (UID: \"3f371552a05e78133c953bed90464198\") " pod="kube-system/kube-controller-manager-ip-172-31-27-146" Nov 1 00:13:37.573660 kubelet[2371]: I1101 00:13:37.573595 2371 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/3f371552a05e78133c953bed90464198-kubeconfig\") pod \"kube-controller-manager-ip-172-31-27-146\" (UID: \"3f371552a05e78133c953bed90464198\") " pod="kube-system/kube-controller-manager-ip-172-31-27-146" Nov 1 00:13:37.573660 kubelet[2371]: I1101 00:13:37.573640 2371 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/5c3bd5ffd2c89c752284d3b7d4b71ff4-ca-certs\") pod \"kube-apiserver-ip-172-31-27-146\" (UID: \"5c3bd5ffd2c89c752284d3b7d4b71ff4\") " pod="kube-system/kube-apiserver-ip-172-31-27-146" Nov 1 00:13:37.573818 kubelet[2371]: I1101 00:13:37.573680 2371 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/5c3bd5ffd2c89c752284d3b7d4b71ff4-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-27-146\" (UID: \"5c3bd5ffd2c89c752284d3b7d4b71ff4\") " pod="kube-system/kube-apiserver-ip-172-31-27-146" Nov 1 00:13:37.573818 kubelet[2371]: I1101 00:13:37.573720 2371 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/3f371552a05e78133c953bed90464198-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-27-146\" (UID: \"3f371552a05e78133c953bed90464198\") " pod="kube-system/kube-controller-manager-ip-172-31-27-146" Nov 1 00:13:37.573818 kubelet[2371]: I1101 00:13:37.573754 2371 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/3f371552a05e78133c953bed90464198-k8s-certs\") pod \"kube-controller-manager-ip-172-31-27-146\" (UID: \"3f371552a05e78133c953bed90464198\") " pod="kube-system/kube-controller-manager-ip-172-31-27-146" Nov 1 00:13:37.573818 kubelet[2371]: I1101 00:13:37.573792 2371 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/3f371552a05e78133c953bed90464198-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-27-146\" (UID: \"3f371552a05e78133c953bed90464198\") " pod="kube-system/kube-controller-manager-ip-172-31-27-146" Nov 1 00:13:37.574036 kubelet[2371]: I1101 00:13:37.573834 2371 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/7d2582130ec47b9024f3ea9e77062b13-kubeconfig\") pod \"kube-scheduler-ip-172-31-27-146\" (UID: \"7d2582130ec47b9024f3ea9e77062b13\") " pod="kube-system/kube-scheduler-ip-172-31-27-146" Nov 1 00:13:37.574036 kubelet[2371]: I1101 00:13:37.573881 2371 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/5c3bd5ffd2c89c752284d3b7d4b71ff4-k8s-certs\") pod \"kube-apiserver-ip-172-31-27-146\" (UID: \"5c3bd5ffd2c89c752284d3b7d4b71ff4\") " pod="kube-system/kube-apiserver-ip-172-31-27-146" Nov 1 00:13:37.580422 kubelet[2371]: I1101 00:13:37.580375 2371 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-27-146" Nov 1 00:13:37.581094 kubelet[2371]: E1101 00:13:37.581054 2371 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://172.31.27.146:6443/api/v1/nodes\": dial tcp 172.31.27.146:6443: connect: connection refused" node="ip-172-31-27-146" Nov 1 00:13:37.784083 kubelet[2371]: I1101 00:13:37.783947 2371 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-27-146" Nov 1 00:13:37.785621 kubelet[2371]: E1101 00:13:37.785424 2371 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://172.31.27.146:6443/api/v1/nodes\": dial tcp 172.31.27.146:6443: connect: connection refused" node="ip-172-31-27-146" Nov 1 00:13:37.854089 env[1824]: time="2025-11-01T00:13:37.853588634Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-27-146,Uid:3f371552a05e78133c953bed90464198,Namespace:kube-system,Attempt:0,}" Nov 1 00:13:37.864660 env[1824]: time="2025-11-01T00:13:37.864592403Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-27-146,Uid:7d2582130ec47b9024f3ea9e77062b13,Namespace:kube-system,Attempt:0,}" Nov 1 00:13:37.870518 env[1824]: time="2025-11-01T00:13:37.870446120Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-27-146,Uid:5c3bd5ffd2c89c752284d3b7d4b71ff4,Namespace:kube-system,Attempt:0,}" Nov 1 00:13:37.973278 kubelet[2371]: E1101 00:13:37.973205 2371 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.27.146:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-27-146?timeout=10s\": dial tcp 172.31.27.146:6443: connect: connection refused" interval="800ms" Nov 1 00:13:38.188678 kubelet[2371]: I1101 00:13:38.188632 2371 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-27-146" Nov 1 00:13:38.189275 kubelet[2371]: E1101 00:13:38.189221 2371 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://172.31.27.146:6443/api/v1/nodes\": dial tcp 172.31.27.146:6443: connect: connection refused" node="ip-172-31-27-146" Nov 1 00:13:38.317961 kubelet[2371]: W1101 00:13:38.317899 2371 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://172.31.27.146:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.27.146:6443: connect: connection refused Nov 1 00:13:38.318677 kubelet[2371]: E1101 00:13:38.317973 2371 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://172.31.27.146:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 172.31.27.146:6443: connect: connection refused" logger="UnhandledError" Nov 1 00:13:38.327889 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1263175386.mount: Deactivated successfully. Nov 1 00:13:38.343454 env[1824]: time="2025-11-01T00:13:38.343378372Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:13:38.352996 env[1824]: time="2025-11-01T00:13:38.352891760Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:13:38.357887 env[1824]: time="2025-11-01T00:13:38.357804572Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:13:38.362722 env[1824]: time="2025-11-01T00:13:38.362669246Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:13:38.367438 env[1824]: time="2025-11-01T00:13:38.367389215Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:13:38.370539 env[1824]: time="2025-11-01T00:13:38.370488454Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:13:38.374244 env[1824]: time="2025-11-01T00:13:38.374184561Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:13:38.377596 env[1824]: time="2025-11-01T00:13:38.377536579Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:13:38.384221 env[1824]: time="2025-11-01T00:13:38.381311693Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:13:38.386349 env[1824]: time="2025-11-01T00:13:38.386294666Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:13:38.392262 env[1824]: time="2025-11-01T00:13:38.392196440Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:13:38.410237 env[1824]: time="2025-11-01T00:13:38.410056306Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:13:38.448688 env[1824]: time="2025-11-01T00:13:38.448504150Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:13:38.449114 env[1824]: time="2025-11-01T00:13:38.448872854Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:13:38.449537 env[1824]: time="2025-11-01T00:13:38.449404167Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:13:38.450367 kubelet[2371]: W1101 00:13:38.450259 2371 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://172.31.27.146:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-27-146&limit=500&resourceVersion=0": dial tcp 172.31.27.146:6443: connect: connection refused Nov 1 00:13:38.450367 kubelet[2371]: E1101 00:13:38.450362 2371 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://172.31.27.146:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-27-146&limit=500&resourceVersion=0\": dial tcp 172.31.27.146:6443: connect: connection refused" logger="UnhandledError" Nov 1 00:13:38.464815 env[1824]: time="2025-11-01T00:13:38.460957780Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/72a22307a6f172eccc21a231154a5e47414d62586757d4d897afb0f53a8916ce pid=2411 runtime=io.containerd.runc.v2 Nov 1 00:13:38.478144 env[1824]: time="2025-11-01T00:13:38.477989615Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:13:38.478501 env[1824]: time="2025-11-01T00:13:38.478425047Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:13:38.478711 env[1824]: time="2025-11-01T00:13:38.478650019Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:13:38.479224 env[1824]: time="2025-11-01T00:13:38.479109659Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/7891e2ca27400bd730599c31e7c1d368bcba3567ca1d19d30a83a4ac417e6f5b pid=2430 runtime=io.containerd.runc.v2 Nov 1 00:13:38.495790 kubelet[2371]: W1101 00:13:38.495702 2371 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://172.31.27.146:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.27.146:6443: connect: connection refused Nov 1 00:13:38.495976 kubelet[2371]: E1101 00:13:38.495807 2371 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://172.31.27.146:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 172.31.27.146:6443: connect: connection refused" logger="UnhandledError" Nov 1 00:13:38.505483 env[1824]: time="2025-11-01T00:13:38.503875454Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:13:38.505483 env[1824]: time="2025-11-01T00:13:38.504831387Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:13:38.505483 env[1824]: time="2025-11-01T00:13:38.504875901Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:13:38.505483 env[1824]: time="2025-11-01T00:13:38.505301937Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/90b4b55aa35a7814f1d4fd666e8d1f16df659bb47f39a6f691e74fec4f8f8d63 pid=2456 runtime=io.containerd.runc.v2 Nov 1 00:13:38.509881 systemd[1]: Started cri-containerd-7891e2ca27400bd730599c31e7c1d368bcba3567ca1d19d30a83a4ac417e6f5b.scope. Nov 1 00:13:38.526952 systemd[1]: Started cri-containerd-72a22307a6f172eccc21a231154a5e47414d62586757d4d897afb0f53a8916ce.scope. Nov 1 00:13:38.562411 systemd[1]: Started cri-containerd-90b4b55aa35a7814f1d4fd666e8d1f16df659bb47f39a6f691e74fec4f8f8d63.scope. Nov 1 00:13:38.579000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.579000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.579000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.579000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.580000 audit: BPF prog-id=58 op=LOAD Nov 1 00:13:38.582000 audit[2443]: AVC avc: denied { bpf } for pid=2443 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.582000 audit[2443]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2430 pid=2443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:38.582000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738393165326361323734303062643733303539396333316537633164 Nov 1 00:13:38.582000 audit[2443]: AVC avc: denied { perfmon } for pid=2443 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.582000 audit[2443]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2430 pid=2443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:38.582000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738393165326361323734303062643733303539396333316537633164 Nov 1 00:13:38.583000 audit[2443]: AVC avc: denied { bpf } for pid=2443 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.583000 audit[2443]: AVC avc: denied { bpf } for pid=2443 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.583000 audit[2443]: AVC avc: denied { bpf } for pid=2443 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.583000 audit[2443]: AVC avc: denied { perfmon } for pid=2443 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.583000 audit[2443]: AVC avc: denied { perfmon } for pid=2443 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.583000 audit[2443]: AVC avc: denied { perfmon } for pid=2443 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.583000 audit[2443]: AVC avc: denied { perfmon } for pid=2443 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.583000 audit[2443]: AVC avc: denied { perfmon } for pid=2443 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.583000 audit[2443]: AVC avc: denied { bpf } for pid=2443 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.583000 audit[2443]: AVC avc: denied { bpf } for pid=2443 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.583000 audit: BPF prog-id=59 op=LOAD Nov 1 00:13:38.583000 audit[2443]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2430 pid=2443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:38.583000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738393165326361323734303062643733303539396333316537633164 Nov 1 00:13:38.587000 audit[2443]: AVC avc: denied { bpf } for pid=2443 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.587000 audit[2443]: AVC avc: denied { bpf } for pid=2443 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.587000 audit[2443]: AVC avc: denied { perfmon } for pid=2443 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.587000 audit[2443]: AVC avc: denied { perfmon } for pid=2443 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.587000 audit[2443]: AVC avc: denied { perfmon } for pid=2443 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.587000 audit[2443]: AVC avc: denied { perfmon } for pid=2443 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.587000 audit[2443]: AVC avc: denied { perfmon } for pid=2443 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.587000 audit[2443]: AVC avc: denied { bpf } for pid=2443 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.587000 audit[2443]: AVC avc: denied { bpf } for pid=2443 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.587000 audit: BPF prog-id=60 op=LOAD Nov 1 00:13:38.587000 audit[2443]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2430 pid=2443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:38.587000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738393165326361323734303062643733303539396333316537633164 Nov 1 00:13:38.592000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.592000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.592000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.592000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.592000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.592000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.592000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.592000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.592000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.592000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.592000 audit: BPF prog-id=61 op=LOAD Nov 1 00:13:38.593000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.593000 audit[2429]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2411 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:38.593000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732613232333037613666313732656363633231613233313135346135 Nov 1 00:13:38.593000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.593000 audit[2429]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2411 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:38.593000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732613232333037613666313732656363633231613233313135346135 Nov 1 00:13:38.593000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.593000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.593000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.593000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.593000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.593000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.593000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.593000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.593000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.593000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.593000 audit: BPF prog-id=62 op=LOAD Nov 1 00:13:38.593000 audit[2429]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2411 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:38.593000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732613232333037613666313732656363633231613233313135346135 Nov 1 00:13:38.593000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.593000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.593000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.593000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.593000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.593000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.593000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.593000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.593000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.593000 audit: BPF prog-id=63 op=LOAD Nov 1 00:13:38.593000 audit[2429]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2411 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:38.593000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732613232333037613666313732656363633231613233313135346135 Nov 1 00:13:38.593000 audit: BPF prog-id=63 op=UNLOAD Nov 1 00:13:38.594000 audit: BPF prog-id=62 op=UNLOAD Nov 1 00:13:38.594000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.594000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.594000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.594000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.594000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.594000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.594000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.594000 audit[2429]: AVC avc: denied { perfmon } for pid=2429 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.594000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.594000 audit[2429]: AVC avc: denied { bpf } for pid=2429 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.594000 audit: BPF prog-id=64 op=LOAD Nov 1 00:13:38.594000 audit[2429]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2411 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:38.594000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732613232333037613666313732656363633231613233313135346135 Nov 1 00:13:38.597000 audit: BPF prog-id=60 op=UNLOAD Nov 1 00:13:38.597000 audit: BPF prog-id=59 op=UNLOAD Nov 1 00:13:38.598000 audit[2443]: AVC avc: denied { bpf } for pid=2443 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.598000 audit[2443]: AVC avc: denied { bpf } for pid=2443 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.598000 audit[2443]: AVC avc: denied { bpf } for pid=2443 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.598000 audit[2443]: AVC avc: denied { perfmon } for pid=2443 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.598000 audit[2443]: AVC avc: denied { perfmon } for pid=2443 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.598000 audit[2443]: AVC avc: denied { perfmon } for pid=2443 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.598000 audit[2443]: AVC avc: denied { perfmon } for pid=2443 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.598000 audit[2443]: AVC avc: denied { perfmon } for pid=2443 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.598000 audit[2443]: AVC avc: denied { bpf } for pid=2443 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.598000 audit[2443]: AVC avc: denied { bpf } for pid=2443 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.598000 audit: BPF prog-id=65 op=LOAD Nov 1 00:13:38.598000 audit[2443]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2430 pid=2443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:38.598000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738393165326361323734303062643733303539396333316537633164 Nov 1 00:13:38.666000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.666000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.666000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.666000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.666000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.667000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.667000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.667000 audit: BPF prog-id=66 op=LOAD Nov 1 00:13:38.668000 audit[2473]: AVC avc: denied { bpf } for pid=2473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.668000 audit[2473]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2456 pid=2473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:38.668000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930623462353561613335613738313466316434666436363665386431 Nov 1 00:13:38.668000 audit[2473]: AVC avc: denied { perfmon } for pid=2473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.668000 audit[2473]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2456 pid=2473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:38.668000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930623462353561613335613738313466316434666436363665386431 Nov 1 00:13:38.668000 audit[2473]: AVC avc: denied { bpf } for pid=2473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.668000 audit[2473]: AVC avc: denied { bpf } for pid=2473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.668000 audit[2473]: AVC avc: denied { bpf } for pid=2473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.668000 audit[2473]: AVC avc: denied { perfmon } for pid=2473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.668000 audit[2473]: AVC avc: denied { perfmon } for pid=2473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.668000 audit[2473]: AVC avc: denied { perfmon } for pid=2473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.668000 audit[2473]: AVC avc: denied { perfmon } for pid=2473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.668000 audit[2473]: AVC avc: denied { perfmon } for pid=2473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.668000 audit[2473]: AVC avc: denied { bpf } for pid=2473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.668000 audit[2473]: AVC avc: denied { bpf } for pid=2473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.668000 audit: BPF prog-id=67 op=LOAD Nov 1 00:13:38.668000 audit[2473]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2456 pid=2473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:38.668000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930623462353561613335613738313466316434666436363665386431 Nov 1 00:13:38.668000 audit[2473]: AVC avc: denied { bpf } for pid=2473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.668000 audit[2473]: AVC avc: denied { bpf } for pid=2473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.668000 audit[2473]: AVC avc: denied { perfmon } for pid=2473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.668000 audit[2473]: AVC avc: denied { perfmon } for pid=2473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.668000 audit[2473]: AVC avc: denied { perfmon } for pid=2473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.668000 audit[2473]: AVC avc: denied { perfmon } for pid=2473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.668000 audit[2473]: AVC avc: denied { perfmon } for pid=2473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.668000 audit[2473]: AVC avc: denied { bpf } for pid=2473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.668000 audit[2473]: AVC avc: denied { bpf } for pid=2473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.668000 audit: BPF prog-id=68 op=LOAD Nov 1 00:13:38.668000 audit[2473]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2456 pid=2473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:38.668000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930623462353561613335613738313466316434666436363665386431 Nov 1 00:13:38.668000 audit: BPF prog-id=68 op=UNLOAD Nov 1 00:13:38.668000 audit: BPF prog-id=67 op=UNLOAD Nov 1 00:13:38.668000 audit[2473]: AVC avc: denied { bpf } for pid=2473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.668000 audit[2473]: AVC avc: denied { bpf } for pid=2473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.668000 audit[2473]: AVC avc: denied { bpf } for pid=2473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.668000 audit[2473]: AVC avc: denied { perfmon } for pid=2473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.668000 audit[2473]: AVC avc: denied { perfmon } for pid=2473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.668000 audit[2473]: AVC avc: denied { perfmon } for pid=2473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.668000 audit[2473]: AVC avc: denied { perfmon } for pid=2473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.668000 audit[2473]: AVC avc: denied { perfmon } for pid=2473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.668000 audit[2473]: AVC avc: denied { bpf } for pid=2473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.668000 audit[2473]: AVC avc: denied { bpf } for pid=2473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.668000 audit: BPF prog-id=69 op=LOAD Nov 1 00:13:38.668000 audit[2473]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2456 pid=2473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:38.668000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930623462353561613335613738313466316434666436363665386431 Nov 1 00:13:38.681607 env[1824]: time="2025-11-01T00:13:38.681547695Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-27-146,Uid:5c3bd5ffd2c89c752284d3b7d4b71ff4,Namespace:kube-system,Attempt:0,} returns sandbox id \"7891e2ca27400bd730599c31e7c1d368bcba3567ca1d19d30a83a4ac417e6f5b\"" Nov 1 00:13:38.694252 env[1824]: time="2025-11-01T00:13:38.693353031Z" level=info msg="CreateContainer within sandbox \"7891e2ca27400bd730599c31e7c1d368bcba3567ca1d19d30a83a4ac417e6f5b\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Nov 1 00:13:38.696359 env[1824]: time="2025-11-01T00:13:38.696286839Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-27-146,Uid:3f371552a05e78133c953bed90464198,Namespace:kube-system,Attempt:0,} returns sandbox id \"72a22307a6f172eccc21a231154a5e47414d62586757d4d897afb0f53a8916ce\"" Nov 1 00:13:38.701544 env[1824]: time="2025-11-01T00:13:38.701410148Z" level=info msg="CreateContainer within sandbox \"72a22307a6f172eccc21a231154a5e47414d62586757d4d897afb0f53a8916ce\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Nov 1 00:13:38.708467 kubelet[2371]: W1101 00:13:38.708339 2371 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://172.31.27.146:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 172.31.27.146:6443: connect: connection refused Nov 1 00:13:38.708660 kubelet[2371]: E1101 00:13:38.708482 2371 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://172.31.27.146:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 172.31.27.146:6443: connect: connection refused" logger="UnhandledError" Nov 1 00:13:38.742271 env[1824]: time="2025-11-01T00:13:38.742206215Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-27-146,Uid:7d2582130ec47b9024f3ea9e77062b13,Namespace:kube-system,Attempt:0,} returns sandbox id \"90b4b55aa35a7814f1d4fd666e8d1f16df659bb47f39a6f691e74fec4f8f8d63\"" Nov 1 00:13:38.749924 env[1824]: time="2025-11-01T00:13:38.749866810Z" level=info msg="CreateContainer within sandbox \"90b4b55aa35a7814f1d4fd666e8d1f16df659bb47f39a6f691e74fec4f8f8d63\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Nov 1 00:13:38.750334 env[1824]: time="2025-11-01T00:13:38.750272982Z" level=info msg="CreateContainer within sandbox \"72a22307a6f172eccc21a231154a5e47414d62586757d4d897afb0f53a8916ce\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"16f05e0f7163d2682c3fce0129181c6d2bb4303ee7933eed51fc08de25524c66\"" Nov 1 00:13:38.751455 env[1824]: time="2025-11-01T00:13:38.751403815Z" level=info msg="StartContainer for \"16f05e0f7163d2682c3fce0129181c6d2bb4303ee7933eed51fc08de25524c66\"" Nov 1 00:13:38.755516 env[1824]: time="2025-11-01T00:13:38.755453335Z" level=info msg="CreateContainer within sandbox \"7891e2ca27400bd730599c31e7c1d368bcba3567ca1d19d30a83a4ac417e6f5b\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"aaf628c61580b1a35debe73dc46620b17edaffa8c1af68f55bbe7c2e9e18f0ab\"" Nov 1 00:13:38.757456 env[1824]: time="2025-11-01T00:13:38.757406859Z" level=info msg="StartContainer for \"aaf628c61580b1a35debe73dc46620b17edaffa8c1af68f55bbe7c2e9e18f0ab\"" Nov 1 00:13:38.774604 kubelet[2371]: E1101 00:13:38.774527 2371 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.27.146:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-27-146?timeout=10s\": dial tcp 172.31.27.146:6443: connect: connection refused" interval="1.6s" Nov 1 00:13:38.784064 env[1824]: time="2025-11-01T00:13:38.783998373Z" level=info msg="CreateContainer within sandbox \"90b4b55aa35a7814f1d4fd666e8d1f16df659bb47f39a6f691e74fec4f8f8d63\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"418b8d1055771f87746954d8bae649e4e9fd1fb6283202b98340ceb5eef867bb\"" Nov 1 00:13:38.785510 env[1824]: time="2025-11-01T00:13:38.785412038Z" level=info msg="StartContainer for \"418b8d1055771f87746954d8bae649e4e9fd1fb6283202b98340ceb5eef867bb\"" Nov 1 00:13:38.796400 systemd[1]: Started cri-containerd-16f05e0f7163d2682c3fce0129181c6d2bb4303ee7933eed51fc08de25524c66.scope. Nov 1 00:13:38.825337 systemd[1]: Started cri-containerd-aaf628c61580b1a35debe73dc46620b17edaffa8c1af68f55bbe7c2e9e18f0ab.scope. Nov 1 00:13:38.867073 systemd[1]: Started cri-containerd-418b8d1055771f87746954d8bae649e4e9fd1fb6283202b98340ceb5eef867bb.scope. Nov 1 00:13:38.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.884000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.884000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.884000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.884000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.884000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.884000 audit: BPF prog-id=70 op=LOAD Nov 1 00:13:38.885000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.885000 audit[2544]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2411 pid=2544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:38.885000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136663035653066373136336432363832633366636530313239313831 Nov 1 00:13:38.886000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.886000 audit[2544]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2411 pid=2544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:38.886000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136663035653066373136336432363832633366636530313239313831 Nov 1 00:13:38.887000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.887000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.887000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.887000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.887000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.887000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.887000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.887000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.887000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.887000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.887000 audit: BPF prog-id=71 op=LOAD Nov 1 00:13:38.887000 audit[2544]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2411 pid=2544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:38.887000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136663035653066373136336432363832633366636530313239313831 Nov 1 00:13:38.889000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.889000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.889000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.889000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.889000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.889000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.889000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.889000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.889000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.889000 audit: BPF prog-id=72 op=LOAD Nov 1 00:13:38.889000 audit[2544]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2411 pid=2544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:38.889000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136663035653066373136336432363832633366636530313239313831 Nov 1 00:13:38.891000 audit: BPF prog-id=72 op=UNLOAD Nov 1 00:13:38.891000 audit: BPF prog-id=71 op=UNLOAD Nov 1 00:13:38.891000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.891000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.891000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.891000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.891000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.891000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.891000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.891000 audit[2544]: AVC avc: denied { perfmon } for pid=2544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.891000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.891000 audit[2544]: AVC avc: denied { bpf } for pid=2544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.891000 audit: BPF prog-id=73 op=LOAD Nov 1 00:13:38.891000 audit[2544]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2411 pid=2544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:38.891000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136663035653066373136336432363832633366636530313239313831 Nov 1 00:13:38.911000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.911000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.912000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.912000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.912000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.912000 audit: BPF prog-id=74 op=LOAD Nov 1 00:13:38.913000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.913000 audit[2552]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2430 pid=2552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:38.913000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161663632386336313538306231613335646562653733646334363632 Nov 1 00:13:38.913000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.913000 audit[2552]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2430 pid=2552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:38.913000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161663632386336313538306231613335646562653733646334363632 Nov 1 00:13:38.913000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.913000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.913000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.913000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.913000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.913000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.913000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.913000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.913000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.913000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.913000 audit: BPF prog-id=75 op=LOAD Nov 1 00:13:38.913000 audit[2552]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2430 pid=2552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:38.913000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161663632386336313538306231613335646562653733646334363632 Nov 1 00:13:38.913000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.913000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.913000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.913000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.913000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.913000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.913000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.913000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.913000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.913000 audit: BPF prog-id=76 op=LOAD Nov 1 00:13:38.913000 audit[2552]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2430 pid=2552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:38.913000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161663632386336313538306231613335646562653733646334363632 Nov 1 00:13:38.913000 audit: BPF prog-id=76 op=UNLOAD Nov 1 00:13:38.913000 audit: BPF prog-id=75 op=UNLOAD Nov 1 00:13:38.913000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.913000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.913000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.913000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.913000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.913000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.913000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.913000 audit[2552]: AVC avc: denied { perfmon } for pid=2552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.913000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.913000 audit[2552]: AVC avc: denied { bpf } for pid=2552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.913000 audit: BPF prog-id=77 op=LOAD Nov 1 00:13:38.913000 audit[2552]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2430 pid=2552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:38.913000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161663632386336313538306231613335646562653733646334363632 Nov 1 00:13:38.967000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.967000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.967000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.968000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.968000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.968000 audit: BPF prog-id=78 op=LOAD Nov 1 00:13:38.978000 audit[2571]: AVC avc: denied { bpf } for pid=2571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.978000 audit[2571]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2456 pid=2571 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:38.978000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431386238643130353537373166383737343639353464386261653634 Nov 1 00:13:38.978000 audit[2571]: AVC avc: denied { perfmon } for pid=2571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.978000 audit[2571]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2456 pid=2571 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:38.978000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431386238643130353537373166383737343639353464386261653634 Nov 1 00:13:38.980808 env[1824]: time="2025-11-01T00:13:38.979611731Z" level=info msg="StartContainer for \"aaf628c61580b1a35debe73dc46620b17edaffa8c1af68f55bbe7c2e9e18f0ab\" returns successfully" Nov 1 00:13:38.980000 audit[2571]: AVC avc: denied { bpf } for pid=2571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.980000 audit[2571]: AVC avc: denied { bpf } for pid=2571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.980000 audit[2571]: AVC avc: denied { bpf } for pid=2571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.980000 audit[2571]: AVC avc: denied { perfmon } for pid=2571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.980000 audit[2571]: AVC avc: denied { perfmon } for pid=2571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.980000 audit[2571]: AVC avc: denied { perfmon } for pid=2571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.980000 audit[2571]: AVC avc: denied { perfmon } for pid=2571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.980000 audit[2571]: AVC avc: denied { perfmon } for pid=2571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.980000 audit[2571]: AVC avc: denied { bpf } for pid=2571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.980000 audit[2571]: AVC avc: denied { bpf } for pid=2571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.980000 audit: BPF prog-id=79 op=LOAD Nov 1 00:13:38.980000 audit[2571]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2456 pid=2571 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:38.980000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431386238643130353537373166383737343639353464386261653634 Nov 1 00:13:38.981000 audit[2571]: AVC avc: denied { bpf } for pid=2571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.981000 audit[2571]: AVC avc: denied { bpf } for pid=2571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.981000 audit[2571]: AVC avc: denied { perfmon } for pid=2571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.981000 audit[2571]: AVC avc: denied { perfmon } for pid=2571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.981000 audit[2571]: AVC avc: denied { perfmon } for pid=2571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.981000 audit[2571]: AVC avc: denied { perfmon } for pid=2571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.981000 audit[2571]: AVC avc: denied { perfmon } for pid=2571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.981000 audit[2571]: AVC avc: denied { bpf } for pid=2571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.981000 audit[2571]: AVC avc: denied { bpf } for pid=2571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.981000 audit: BPF prog-id=80 op=LOAD Nov 1 00:13:38.981000 audit[2571]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2456 pid=2571 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:38.981000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431386238643130353537373166383737343639353464386261653634 Nov 1 00:13:38.981000 audit: BPF prog-id=80 op=UNLOAD Nov 1 00:13:38.981000 audit: BPF prog-id=79 op=UNLOAD Nov 1 00:13:38.981000 audit[2571]: AVC avc: denied { bpf } for pid=2571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.981000 audit[2571]: AVC avc: denied { bpf } for pid=2571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.981000 audit[2571]: AVC avc: denied { bpf } for pid=2571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.981000 audit[2571]: AVC avc: denied { perfmon } for pid=2571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.981000 audit[2571]: AVC avc: denied { perfmon } for pid=2571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.981000 audit[2571]: AVC avc: denied { perfmon } for pid=2571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.981000 audit[2571]: AVC avc: denied { perfmon } for pid=2571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.981000 audit[2571]: AVC avc: denied { perfmon } for pid=2571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.981000 audit[2571]: AVC avc: denied { bpf } for pid=2571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.981000 audit[2571]: AVC avc: denied { bpf } for pid=2571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:38.981000 audit: BPF prog-id=81 op=LOAD Nov 1 00:13:38.981000 audit[2571]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2456 pid=2571 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:38.981000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431386238643130353537373166383737343639353464386261653634 Nov 1 00:13:38.997789 kubelet[2371]: I1101 00:13:38.997625 2371 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-27-146" Nov 1 00:13:38.998470 kubelet[2371]: E1101 00:13:38.998393 2371 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://172.31.27.146:6443/api/v1/nodes\": dial tcp 172.31.27.146:6443: connect: connection refused" node="ip-172-31-27-146" Nov 1 00:13:39.008460 env[1824]: time="2025-11-01T00:13:39.008395465Z" level=info msg="StartContainer for \"16f05e0f7163d2682c3fce0129181c6d2bb4303ee7933eed51fc08de25524c66\" returns successfully" Nov 1 00:13:39.077440 env[1824]: time="2025-11-01T00:13:39.077375154Z" level=info msg="StartContainer for \"418b8d1055771f87746954d8bae649e4e9fd1fb6283202b98340ceb5eef867bb\" returns successfully" Nov 1 00:13:39.439866 kubelet[2371]: E1101 00:13:39.439803 2371 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-27-146\" not found" node="ip-172-31-27-146" Nov 1 00:13:39.448417 kubelet[2371]: E1101 00:13:39.448378 2371 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-27-146\" not found" node="ip-172-31-27-146" Nov 1 00:13:39.453002 kubelet[2371]: E1101 00:13:39.452967 2371 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-27-146\" not found" node="ip-172-31-27-146" Nov 1 00:13:40.454856 kubelet[2371]: E1101 00:13:40.454820 2371 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-27-146\" not found" node="ip-172-31-27-146" Nov 1 00:13:40.456018 kubelet[2371]: E1101 00:13:40.455984 2371 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-27-146\" not found" node="ip-172-31-27-146" Nov 1 00:13:40.600739 kubelet[2371]: I1101 00:13:40.600703 2371 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-27-146" Nov 1 00:13:42.167180 kernel: kauditd_printk_skb: 559 callbacks suppressed Nov 1 00:13:42.167347 kernel: audit: type=1400 audit(1761956022.156:553): avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7160 scontext=system_u:system_r:svirt_lxc_net_t:s0:c567,c697 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:13:42.156000 audit[2573]: AVC avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7160 scontext=system_u:system_r:svirt_lxc_net_t:s0:c567,c697 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:13:42.156000 audit[2573]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=40004ca8a0 a2=fc6 a3=0 items=0 ppid=2411 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c567,c697 key=(null) Nov 1 00:13:42.183696 kernel: audit: type=1300 audit(1761956022.156:553): arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=40004ca8a0 a2=fc6 a3=0 items=0 ppid=2411 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c567,c697 key=(null) Nov 1 00:13:42.156000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:13:42.198668 kernel: audit: type=1327 audit(1761956022.156:553): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:13:42.158000 audit[2573]: AVC avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=5907 scontext=system_u:system_r:svirt_lxc_net_t:s0:c567,c697 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:13:42.213724 kernel: audit: type=1400 audit(1761956022.158:554): avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=5907 scontext=system_u:system_r:svirt_lxc_net_t:s0:c567,c697 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:13:42.158000 audit[2573]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=40006042c0 a2=fc6 a3=0 items=0 ppid=2411 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c567,c697 key=(null) Nov 1 00:13:42.230763 kernel: audit: type=1300 audit(1761956022.158:554): arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=40006042c0 a2=fc6 a3=0 items=0 ppid=2411 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c567,c697 key=(null) Nov 1 00:13:42.158000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:13:42.245614 kernel: audit: type=1327 audit(1761956022.158:554): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:13:42.366257 kubelet[2371]: E1101 00:13:42.366220 2371 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-27-146\" not found" node="ip-172-31-27-146" Nov 1 00:13:42.576000 audit[2585]: AVC avc: denied { watch } for pid=2585 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7160 scontext=system_u:system_r:svirt_lxc_net_t:s0:c230,c788 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:13:42.576000 audit[2585]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=3f a1=4007041ad0 a2=fc6 a3=0 items=0 ppid=2430 pid=2585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c230,c788 key=(null) Nov 1 00:13:42.600354 kernel: audit: type=1400 audit(1761956022.576:555): avc: denied { watch } for pid=2585 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7160 scontext=system_u:system_r:svirt_lxc_net_t:s0:c230,c788 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:13:42.600425 kernel: audit: type=1300 audit(1761956022.576:555): arch=c00000b7 syscall=27 success=no exit=-13 a0=3f a1=4007041ad0 a2=fc6 a3=0 items=0 ppid=2430 pid=2585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c230,c788 key=(null) Nov 1 00:13:42.576000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313436002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Nov 1 00:13:42.611583 kernel: audit: type=1327 audit(1761956022.576:555): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313436002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Nov 1 00:13:42.586000 audit[2585]: AVC avc: denied { watch } for pid=2585 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=5907 scontext=system_u:system_r:svirt_lxc_net_t:s0:c230,c788 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:13:42.621348 kernel: audit: type=1400 audit(1761956022.586:556): avc: denied { watch } for pid=2585 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=5907 scontext=system_u:system_r:svirt_lxc_net_t:s0:c230,c788 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:13:42.586000 audit[2585]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=3f a1=40066e0480 a2=fc6 a3=0 items=0 ppid=2430 pid=2585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c230,c788 key=(null) Nov 1 00:13:42.586000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313436002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Nov 1 00:13:42.615000 audit[2585]: AVC avc: denied { watch } for pid=2585 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=5910 scontext=system_u:system_r:svirt_lxc_net_t:s0:c230,c788 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:13:42.615000 audit[2585]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=400684cc90 a2=fc6 a3=0 items=0 ppid=2430 pid=2585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c230,c788 key=(null) Nov 1 00:13:42.615000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313436002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Nov 1 00:13:42.721000 audit[2585]: AVC avc: denied { watch } for pid=2585 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=7162 scontext=system_u:system_r:svirt_lxc_net_t:s0:c230,c788 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:13:42.721000 audit[2585]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6e a1=4004498660 a2=fc6 a3=0 items=0 ppid=2430 pid=2585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c230,c788 key=(null) Nov 1 00:13:42.721000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313436002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Nov 1 00:13:42.721000 audit[2585]: AVC avc: denied { watch } for pid=2585 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=5907 scontext=system_u:system_r:svirt_lxc_net_t:s0:c230,c788 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:13:42.721000 audit[2585]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6f a1=4003bf9880 a2=fc6 a3=0 items=0 ppid=2430 pid=2585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c230,c788 key=(null) Nov 1 00:13:42.721000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313436002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Nov 1 00:13:42.722000 audit[2585]: AVC avc: denied { watch } for pid=2585 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7160 scontext=system_u:system_r:svirt_lxc_net_t:s0:c230,c788 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:13:42.722000 audit[2585]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6f a1=4002fc5470 a2=fc6 a3=0 items=0 ppid=2430 pid=2585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c230,c788 key=(null) Nov 1 00:13:42.722000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313436002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Nov 1 00:13:42.913680 kubelet[2371]: E1101 00:13:42.913506 2371 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ip-172-31-27-146\" not found" node="ip-172-31-27-146" Nov 1 00:13:43.063540 kubelet[2371]: I1101 00:13:43.063479 2371 kubelet_node_status.go:78] "Successfully registered node" node="ip-172-31-27-146" Nov 1 00:13:43.069284 kubelet[2371]: I1101 00:13:43.069225 2371 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ip-172-31-27-146" Nov 1 00:13:43.173876 kubelet[2371]: E1101 00:13:43.173734 2371 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-controller-manager-ip-172-31-27-146\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-ip-172-31-27-146" Nov 1 00:13:43.174144 kubelet[2371]: I1101 00:13:43.174091 2371 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ip-172-31-27-146" Nov 1 00:13:43.180157 kubelet[2371]: E1101 00:13:43.180075 2371 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-scheduler-ip-172-31-27-146\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-ip-172-31-27-146" Nov 1 00:13:43.180157 kubelet[2371]: I1101 00:13:43.180144 2371 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ip-172-31-27-146" Nov 1 00:13:43.184430 kubelet[2371]: E1101 00:13:43.184361 2371 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-apiserver-ip-172-31-27-146\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-ip-172-31-27-146" Nov 1 00:13:43.326438 kubelet[2371]: I1101 00:13:43.326383 2371 apiserver.go:52] "Watching apiserver" Nov 1 00:13:43.369178 kubelet[2371]: I1101 00:13:43.369114 2371 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Nov 1 00:13:43.404262 update_engine[1815]: I1101 00:13:43.404182 1815 update_attempter.cc:509] Updating boot flags... Nov 1 00:13:45.093811 kubelet[2371]: I1101 00:13:45.093762 2371 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ip-172-31-27-146" Nov 1 00:13:45.577059 systemd[1]: Reloading. Nov 1 00:13:45.774610 /usr/lib/systemd/system-generators/torcx-generator[2851]: time="2025-11-01T00:13:45Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Nov 1 00:13:45.774673 /usr/lib/systemd/system-generators/torcx-generator[2851]: time="2025-11-01T00:13:45Z" level=info msg="torcx already run" Nov 1 00:13:45.962021 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Nov 1 00:13:45.962062 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Nov 1 00:13:46.009020 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Nov 1 00:13:46.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.225000 audit: BPF prog-id=82 op=LOAD Nov 1 00:13:46.226000 audit: BPF prog-id=74 op=UNLOAD Nov 1 00:13:46.226000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.226000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.226000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.226000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.226000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.226000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.227000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.227000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.227000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.227000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.227000 audit: BPF prog-id=83 op=LOAD Nov 1 00:13:46.227000 audit: BPF prog-id=43 op=UNLOAD Nov 1 00:13:46.229000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.229000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.229000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.229000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.229000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.229000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.229000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.229000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.229000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.229000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.229000 audit: BPF prog-id=84 op=LOAD Nov 1 00:13:46.229000 audit: BPF prog-id=66 op=UNLOAD Nov 1 00:13:46.232000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.232000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.232000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.232000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.232000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.232000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.232000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.232000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.232000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.232000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.232000 audit: BPF prog-id=85 op=LOAD Nov 1 00:13:46.232000 audit: BPF prog-id=61 op=UNLOAD Nov 1 00:13:46.233000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.233000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.233000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.233000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.233000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.233000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.233000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.233000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.233000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.233000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.233000 audit: BPF prog-id=86 op=LOAD Nov 1 00:13:46.233000 audit: BPF prog-id=44 op=UNLOAD Nov 1 00:13:46.233000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.233000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.234000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.234000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.234000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.234000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.234000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.234000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.234000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.234000 audit: BPF prog-id=87 op=LOAD Nov 1 00:13:46.234000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.234000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.234000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.234000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.234000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.234000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.234000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.234000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.234000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.234000 audit: BPF prog-id=88 op=LOAD Nov 1 00:13:46.234000 audit: BPF prog-id=45 op=UNLOAD Nov 1 00:13:46.234000 audit: BPF prog-id=46 op=UNLOAD Nov 1 00:13:46.234000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.234000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.234000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.234000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.234000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.234000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.234000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.234000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.235000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.235000 audit: BPF prog-id=89 op=LOAD Nov 1 00:13:46.235000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.235000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.235000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.235000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.235000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.235000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.235000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.235000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.235000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.235000 audit: BPF prog-id=90 op=LOAD Nov 1 00:13:46.235000 audit: BPF prog-id=47 op=UNLOAD Nov 1 00:13:46.235000 audit: BPF prog-id=48 op=UNLOAD Nov 1 00:13:46.237000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.237000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.237000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.237000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.237000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.237000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.237000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.237000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.237000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.238000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.238000 audit: BPF prog-id=91 op=LOAD Nov 1 00:13:46.238000 audit: BPF prog-id=49 op=UNLOAD Nov 1 00:13:46.241000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.241000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.241000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.241000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.241000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.241000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.242000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.242000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.242000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.242000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.242000 audit: BPF prog-id=92 op=LOAD Nov 1 00:13:46.242000 audit: BPF prog-id=50 op=UNLOAD Nov 1 00:13:46.243000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.243000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.243000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.243000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.243000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.243000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.243000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.243000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.243000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.243000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.244000 audit: BPF prog-id=93 op=LOAD Nov 1 00:13:46.244000 audit: BPF prog-id=51 op=UNLOAD Nov 1 00:13:46.244000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.244000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.244000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.244000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.244000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.244000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.244000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.244000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.244000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.244000 audit: BPF prog-id=94 op=LOAD Nov 1 00:13:46.244000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.244000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.244000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.244000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.244000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.244000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.244000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.244000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.244000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.244000 audit: BPF prog-id=95 op=LOAD Nov 1 00:13:46.244000 audit: BPF prog-id=52 op=UNLOAD Nov 1 00:13:46.244000 audit: BPF prog-id=53 op=UNLOAD Nov 1 00:13:46.247000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.247000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.247000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.247000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.247000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.247000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.247000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.247000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.247000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.248000 audit: BPF prog-id=96 op=LOAD Nov 1 00:13:46.248000 audit: BPF prog-id=54 op=UNLOAD Nov 1 00:13:46.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.248000 audit: BPF prog-id=97 op=LOAD Nov 1 00:13:46.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.248000 audit: BPF prog-id=98 op=LOAD Nov 1 00:13:46.248000 audit: BPF prog-id=55 op=UNLOAD Nov 1 00:13:46.248000 audit: BPF prog-id=56 op=UNLOAD Nov 1 00:13:46.250000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.250000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.250000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.250000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.250000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.250000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.250000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.250000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.250000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.250000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.250000 audit: BPF prog-id=99 op=LOAD Nov 1 00:13:46.250000 audit: BPF prog-id=70 op=UNLOAD Nov 1 00:13:46.251000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.251000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.251000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.251000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.251000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.251000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.251000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.251000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.251000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.251000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.251000 audit: BPF prog-id=100 op=LOAD Nov 1 00:13:46.251000 audit: BPF prog-id=78 op=UNLOAD Nov 1 00:13:46.253000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.253000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.253000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.253000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.253000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.253000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.253000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.253000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.253000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.253000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.253000 audit: BPF prog-id=101 op=LOAD Nov 1 00:13:46.253000 audit: BPF prog-id=58 op=UNLOAD Nov 1 00:13:46.258000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.258000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.258000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.258000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.258000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.258000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.258000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.258000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.258000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.258000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.258000 audit: BPF prog-id=102 op=LOAD Nov 1 00:13:46.258000 audit: BPF prog-id=57 op=UNLOAD Nov 1 00:13:46.299676 systemd[1]: Stopping kubelet.service... Nov 1 00:13:46.325785 systemd[1]: kubelet.service: Deactivated successfully. Nov 1 00:13:46.326206 systemd[1]: Stopped kubelet.service. Nov 1 00:13:46.325000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:46.326314 systemd[1]: kubelet.service: Consumed 2.515s CPU time. Nov 1 00:13:46.330923 systemd[1]: Starting kubelet.service... Nov 1 00:13:46.648000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:46.647697 systemd[1]: Started kubelet.service. Nov 1 00:13:46.764141 kubelet[2905]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Nov 1 00:13:46.764796 kubelet[2905]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Nov 1 00:13:46.764900 kubelet[2905]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Nov 1 00:13:46.765262 kubelet[2905]: I1101 00:13:46.765200 2905 server.go:215] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Nov 1 00:13:46.783029 kubelet[2905]: I1101 00:13:46.781876 2905 server.go:520] "Kubelet version" kubeletVersion="v1.32.4" Nov 1 00:13:46.783029 kubelet[2905]: I1101 00:13:46.781952 2905 server.go:522] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Nov 1 00:13:46.783029 kubelet[2905]: I1101 00:13:46.782741 2905 server.go:954] "Client rotation is on, will bootstrap in background" Nov 1 00:13:46.794234 kubelet[2905]: I1101 00:13:46.793285 2905 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Nov 1 00:13:46.797772 kubelet[2905]: I1101 00:13:46.797731 2905 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Nov 1 00:13:46.811913 kubelet[2905]: E1101 00:13:46.811822 2905 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Nov 1 00:13:46.811913 kubelet[2905]: I1101 00:13:46.811898 2905 server.go:1421] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Nov 1 00:13:46.817633 kubelet[2905]: I1101 00:13:46.817571 2905 server.go:772] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Nov 1 00:13:46.819266 kubelet[2905]: I1101 00:13:46.818065 2905 container_manager_linux.go:268] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Nov 1 00:13:46.819266 kubelet[2905]: I1101 00:13:46.818138 2905 container_manager_linux.go:273] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ip-172-31-27-146","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Nov 1 00:13:46.819266 kubelet[2905]: I1101 00:13:46.818455 2905 topology_manager.go:138] "Creating topology manager with none policy" Nov 1 00:13:46.819266 kubelet[2905]: I1101 00:13:46.818476 2905 container_manager_linux.go:304] "Creating device plugin manager" Nov 1 00:13:46.819783 kubelet[2905]: I1101 00:13:46.818552 2905 state_mem.go:36] "Initialized new in-memory state store" Nov 1 00:13:46.819783 kubelet[2905]: I1101 00:13:46.818762 2905 kubelet.go:446] "Attempting to sync node with API server" Nov 1 00:13:46.819783 kubelet[2905]: I1101 00:13:46.818784 2905 kubelet.go:341] "Adding static pod path" path="/etc/kubernetes/manifests" Nov 1 00:13:46.819783 kubelet[2905]: I1101 00:13:46.819738 2905 kubelet.go:352] "Adding apiserver pod source" Nov 1 00:13:46.826420 kubelet[2905]: I1101 00:13:46.826179 2905 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Nov 1 00:13:46.836876 kubelet[2905]: I1101 00:13:46.836831 2905 kuberuntime_manager.go:269] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Nov 1 00:13:46.837688 kubelet[2905]: I1101 00:13:46.837647 2905 kubelet.go:890] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Nov 1 00:13:46.841654 kubelet[2905]: I1101 00:13:46.841609 2905 watchdog_linux.go:99] "Systemd watchdog is not enabled" Nov 1 00:13:46.841793 kubelet[2905]: I1101 00:13:46.841681 2905 server.go:1287] "Started kubelet" Nov 1 00:13:46.851000 audit[2905]: AVC avc: denied { mac_admin } for pid=2905 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.853094 kubelet[2905]: I1101 00:13:46.852997 2905 kubelet.go:1507] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Nov 1 00:13:46.853094 kubelet[2905]: I1101 00:13:46.853069 2905 kubelet.go:1511] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Nov 1 00:13:46.853308 kubelet[2905]: I1101 00:13:46.853147 2905 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Nov 1 00:13:46.851000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:13:46.851000 audit[2905]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000944bd0 a1=400094d908 a2=4000944ba0 a3=25 items=0 ppid=1 pid=2905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:46.851000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:13:46.851000 audit[2905]: AVC avc: denied { mac_admin } for pid=2905 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:46.851000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:13:46.851000 audit[2905]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40006c4fc0 a1=400094d920 a2=4000944c60 a3=25 items=0 ppid=1 pid=2905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:46.851000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:13:46.868620 kubelet[2905]: I1101 00:13:46.868529 2905 server.go:169] "Starting to listen" address="0.0.0.0" port=10250 Nov 1 00:13:46.875990 kubelet[2905]: I1101 00:13:46.875054 2905 server.go:479] "Adding debug handlers to kubelet server" Nov 1 00:13:46.881074 kubelet[2905]: I1101 00:13:46.870509 2905 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Nov 1 00:13:46.905688 kubelet[2905]: I1101 00:13:46.905550 2905 factory.go:221] Registration of the systemd container factory successfully Nov 1 00:13:46.906010 kubelet[2905]: I1101 00:13:46.905974 2905 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Nov 1 00:13:46.908790 kubelet[2905]: I1101 00:13:46.881790 2905 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Nov 1 00:13:46.908964 kubelet[2905]: I1101 00:13:46.870046 2905 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Nov 1 00:13:46.910453 kubelet[2905]: I1101 00:13:46.910417 2905 server.go:243] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Nov 1 00:13:46.910671 kubelet[2905]: I1101 00:13:46.881570 2905 volume_manager.go:297] "Starting Kubelet Volume Manager" Nov 1 00:13:46.910902 kubelet[2905]: E1101 00:13:46.882147 2905 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-27-146\" not found" Nov 1 00:13:46.912615 kubelet[2905]: I1101 00:13:46.912562 2905 reconciler.go:26] "Reconciler: start to sync state" Nov 1 00:13:46.931017 kubelet[2905]: I1101 00:13:46.930531 2905 factory.go:221] Registration of the containerd container factory successfully Nov 1 00:13:46.943739 kubelet[2905]: I1101 00:13:46.943662 2905 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Nov 1 00:13:46.949661 kubelet[2905]: E1101 00:13:46.949600 2905 kubelet.go:1555] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Nov 1 00:13:46.958880 kubelet[2905]: I1101 00:13:46.958817 2905 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Nov 1 00:13:46.958880 kubelet[2905]: I1101 00:13:46.958870 2905 status_manager.go:227] "Starting to sync pod status with apiserver" Nov 1 00:13:46.959109 kubelet[2905]: I1101 00:13:46.958908 2905 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Nov 1 00:13:46.959109 kubelet[2905]: I1101 00:13:46.958925 2905 kubelet.go:2382] "Starting kubelet main sync loop" Nov 1 00:13:46.959109 kubelet[2905]: E1101 00:13:46.959015 2905 kubelet.go:2406] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Nov 1 00:13:47.061196 kubelet[2905]: E1101 00:13:47.060448 2905 kubelet.go:2406] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Nov 1 00:13:47.092269 kubelet[2905]: I1101 00:13:47.092219 2905 cpu_manager.go:221] "Starting CPU manager" policy="none" Nov 1 00:13:47.092428 kubelet[2905]: I1101 00:13:47.092342 2905 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Nov 1 00:13:47.092428 kubelet[2905]: I1101 00:13:47.092381 2905 state_mem.go:36] "Initialized new in-memory state store" Nov 1 00:13:47.092760 kubelet[2905]: I1101 00:13:47.092711 2905 state_mem.go:88] "Updated default CPUSet" cpuSet="" Nov 1 00:13:47.092840 kubelet[2905]: I1101 00:13:47.092746 2905 state_mem.go:96] "Updated CPUSet assignments" assignments={} Nov 1 00:13:47.092840 kubelet[2905]: I1101 00:13:47.092783 2905 policy_none.go:49] "None policy: Start" Nov 1 00:13:47.092840 kubelet[2905]: I1101 00:13:47.092803 2905 memory_manager.go:186] "Starting memorymanager" policy="None" Nov 1 00:13:47.092840 kubelet[2905]: I1101 00:13:47.092824 2905 state_mem.go:35] "Initializing new in-memory state store" Nov 1 00:13:47.093051 kubelet[2905]: I1101 00:13:47.093006 2905 state_mem.go:75] "Updated machine memory state" Nov 1 00:13:47.101411 kubelet[2905]: I1101 00:13:47.101364 2905 manager.go:519] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Nov 1 00:13:47.101596 kubelet[2905]: I1101 00:13:47.101484 2905 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" Nov 1 00:13:47.100000 audit[2905]: AVC avc: denied { mac_admin } for pid=2905 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:47.100000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:13:47.100000 audit[2905]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000945b30 a1=4000f4eb28 a2=4000945b00 a3=25 items=0 ppid=1 pid=2905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:47.100000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:13:47.102021 kubelet[2905]: I1101 00:13:47.101746 2905 eviction_manager.go:189] "Eviction manager: starting control loop" Nov 1 00:13:47.102021 kubelet[2905]: I1101 00:13:47.101779 2905 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Nov 1 00:13:47.104248 kubelet[2905]: I1101 00:13:47.104184 2905 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Nov 1 00:13:47.110315 kubelet[2905]: E1101 00:13:47.110255 2905 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Nov 1 00:13:47.233510 kubelet[2905]: I1101 00:13:47.233348 2905 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-27-146" Nov 1 00:13:47.261915 kubelet[2905]: I1101 00:13:47.261878 2905 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ip-172-31-27-146" Nov 1 00:13:47.262999 kubelet[2905]: I1101 00:13:47.262957 2905 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ip-172-31-27-146" Nov 1 00:13:47.264050 kubelet[2905]: I1101 00:13:47.264009 2905 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ip-172-31-27-146" Nov 1 00:13:47.280057 kubelet[2905]: E1101 00:13:47.280002 2905 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-scheduler-ip-172-31-27-146\" already exists" pod="kube-system/kube-scheduler-ip-172-31-27-146" Nov 1 00:13:47.287204 kubelet[2905]: I1101 00:13:47.287164 2905 kubelet_node_status.go:124] "Node was previously registered" node="ip-172-31-27-146" Nov 1 00:13:47.287520 kubelet[2905]: I1101 00:13:47.287499 2905 kubelet_node_status.go:78] "Successfully registered node" node="ip-172-31-27-146" Nov 1 00:13:47.315602 kubelet[2905]: I1101 00:13:47.315552 2905 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/5c3bd5ffd2c89c752284d3b7d4b71ff4-k8s-certs\") pod \"kube-apiserver-ip-172-31-27-146\" (UID: \"5c3bd5ffd2c89c752284d3b7d4b71ff4\") " pod="kube-system/kube-apiserver-ip-172-31-27-146" Nov 1 00:13:47.315897 kubelet[2905]: I1101 00:13:47.315844 2905 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/5c3bd5ffd2c89c752284d3b7d4b71ff4-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-27-146\" (UID: \"5c3bd5ffd2c89c752284d3b7d4b71ff4\") " pod="kube-system/kube-apiserver-ip-172-31-27-146" Nov 1 00:13:47.316048 kubelet[2905]: I1101 00:13:47.316022 2905 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/7d2582130ec47b9024f3ea9e77062b13-kubeconfig\") pod \"kube-scheduler-ip-172-31-27-146\" (UID: \"7d2582130ec47b9024f3ea9e77062b13\") " pod="kube-system/kube-scheduler-ip-172-31-27-146" Nov 1 00:13:47.316265 kubelet[2905]: I1101 00:13:47.316226 2905 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/5c3bd5ffd2c89c752284d3b7d4b71ff4-ca-certs\") pod \"kube-apiserver-ip-172-31-27-146\" (UID: \"5c3bd5ffd2c89c752284d3b7d4b71ff4\") " pod="kube-system/kube-apiserver-ip-172-31-27-146" Nov 1 00:13:47.316411 kubelet[2905]: I1101 00:13:47.316387 2905 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/3f371552a05e78133c953bed90464198-ca-certs\") pod \"kube-controller-manager-ip-172-31-27-146\" (UID: \"3f371552a05e78133c953bed90464198\") " pod="kube-system/kube-controller-manager-ip-172-31-27-146" Nov 1 00:13:47.316569 kubelet[2905]: I1101 00:13:47.316545 2905 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/3f371552a05e78133c953bed90464198-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-27-146\" (UID: \"3f371552a05e78133c953bed90464198\") " pod="kube-system/kube-controller-manager-ip-172-31-27-146" Nov 1 00:13:47.316794 kubelet[2905]: I1101 00:13:47.316753 2905 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/3f371552a05e78133c953bed90464198-k8s-certs\") pod \"kube-controller-manager-ip-172-31-27-146\" (UID: \"3f371552a05e78133c953bed90464198\") " pod="kube-system/kube-controller-manager-ip-172-31-27-146" Nov 1 00:13:47.316938 kubelet[2905]: I1101 00:13:47.316914 2905 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/3f371552a05e78133c953bed90464198-kubeconfig\") pod \"kube-controller-manager-ip-172-31-27-146\" (UID: \"3f371552a05e78133c953bed90464198\") " pod="kube-system/kube-controller-manager-ip-172-31-27-146" Nov 1 00:13:47.317096 kubelet[2905]: I1101 00:13:47.317068 2905 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/3f371552a05e78133c953bed90464198-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-27-146\" (UID: \"3f371552a05e78133c953bed90464198\") " pod="kube-system/kube-controller-manager-ip-172-31-27-146" Nov 1 00:13:47.777096 kernel: kauditd_printk_skb: 272 callbacks suppressed Nov 1 00:13:47.777245 kernel: audit: type=1400 audit(1761956027.770:810): avc: denied { watch } for pid=2573 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=7187 scontext=system_u:system_r:svirt_lxc_net_t:s0:c567,c697 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Nov 1 00:13:47.770000 audit[2573]: AVC avc: denied { watch } for pid=2573 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=7187 scontext=system_u:system_r:svirt_lxc_net_t:s0:c567,c697 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Nov 1 00:13:47.770000 audit[2573]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=400117c840 a2=fc6 a3=0 items=0 ppid=2411 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c567,c697 key=(null) Nov 1 00:13:47.796954 kernel: audit: type=1300 audit(1761956027.770:810): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=400117c840 a2=fc6 a3=0 items=0 ppid=2411 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c567,c697 key=(null) Nov 1 00:13:47.797092 kernel: audit: type=1327 audit(1761956027.770:810): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:13:47.770000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:13:47.826966 kubelet[2905]: I1101 00:13:47.826898 2905 apiserver.go:52] "Watching apiserver" Nov 1 00:13:47.900646 kubelet[2905]: I1101 00:13:47.900560 2905 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-ip-172-31-27-146" podStartSLOduration=2.900536577 podStartE2EDuration="2.900536577s" podCreationTimestamp="2025-11-01 00:13:45 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:13:47.883444998 +0000 UTC m=+1.220524544" watchObservedRunningTime="2025-11-01 00:13:47.900536577 +0000 UTC m=+1.237616099" Nov 1 00:13:47.909604 kubelet[2905]: I1101 00:13:47.909544 2905 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Nov 1 00:13:47.958658 kubelet[2905]: I1101 00:13:47.958576 2905 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-ip-172-31-27-146" podStartSLOduration=0.958552392 podStartE2EDuration="958.552392ms" podCreationTimestamp="2025-11-01 00:13:47 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:13:47.901480676 +0000 UTC m=+1.238560234" watchObservedRunningTime="2025-11-01 00:13:47.958552392 +0000 UTC m=+1.295631926" Nov 1 00:13:48.016617 kubelet[2905]: I1101 00:13:48.016564 2905 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ip-172-31-27-146" Nov 1 00:13:48.017354 kubelet[2905]: I1101 00:13:48.017312 2905 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ip-172-31-27-146" Nov 1 00:13:48.049575 kubelet[2905]: E1101 00:13:48.049422 2905 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-scheduler-ip-172-31-27-146\" already exists" pod="kube-system/kube-scheduler-ip-172-31-27-146" Nov 1 00:13:48.060579 kubelet[2905]: E1101 00:13:48.060525 2905 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-apiserver-ip-172-31-27-146\" already exists" pod="kube-system/kube-apiserver-ip-172-31-27-146" Nov 1 00:13:48.076340 kubelet[2905]: I1101 00:13:48.076247 2905 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ip-172-31-27-146" podStartSLOduration=1.07622786 podStartE2EDuration="1.07622786s" podCreationTimestamp="2025-11-01 00:13:47 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:13:47.959729323 +0000 UTC m=+1.296808857" watchObservedRunningTime="2025-11-01 00:13:48.07622786 +0000 UTC m=+1.413307418" Nov 1 00:13:48.716000 audit[2573]: AVC avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=5907 scontext=system_u:system_r:svirt_lxc_net_t:s0:c567,c697 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:13:48.716000 audit[2573]: AVC avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=5907 scontext=system_u:system_r:svirt_lxc_net_t:s0:c567,c697 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:13:48.736883 kernel: audit: type=1400 audit(1761956028.716:811): avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=5907 scontext=system_u:system_r:svirt_lxc_net_t:s0:c567,c697 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:13:48.736986 kernel: audit: type=1400 audit(1761956028.716:812): avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=5907 scontext=system_u:system_r:svirt_lxc_net_t:s0:c567,c697 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:13:48.737040 kernel: audit: type=1300 audit(1761956028.716:812): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40013744a0 a2=fc6 a3=0 items=0 ppid=2411 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c567,c697 key=(null) Nov 1 00:13:48.716000 audit[2573]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40013744a0 a2=fc6 a3=0 items=0 ppid=2411 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c567,c697 key=(null) Nov 1 00:13:48.716000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:13:48.760261 kernel: audit: type=1327 audit(1761956028.716:812): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:13:48.760421 kernel: audit: type=1400 audit(1761956028.717:813): avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=5907 scontext=system_u:system_r:svirt_lxc_net_t:s0:c567,c697 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:13:48.717000 audit[2573]: AVC avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=5907 scontext=system_u:system_r:svirt_lxc_net_t:s0:c567,c697 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:13:48.717000 audit[2573]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40013744e0 a2=fc6 a3=0 items=0 ppid=2411 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c567,c697 key=(null) Nov 1 00:13:48.783722 kernel: audit: type=1300 audit(1761956028.717:813): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40013744e0 a2=fc6 a3=0 items=0 ppid=2411 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c567,c697 key=(null) Nov 1 00:13:48.717000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:13:48.794696 kernel: audit: type=1327 audit(1761956028.717:813): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:13:48.718000 audit[2573]: AVC avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=5907 scontext=system_u:system_r:svirt_lxc_net_t:s0:c567,c697 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:13:48.718000 audit[2573]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001374820 a2=fc6 a3=0 items=0 ppid=2411 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c567,c697 key=(null) Nov 1 00:13:48.718000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:13:48.716000 audit[2573]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000bfb320 a2=fc6 a3=0 items=0 ppid=2411 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c567,c697 key=(null) Nov 1 00:13:48.716000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:13:49.796529 amazon-ssm-agent[1799]: 2025-11-01 00:13:49 INFO [MessagingDeliveryService] [Association] Schedule manager refreshed with 0 associations, 0 new associations associated Nov 1 00:13:51.979066 kubelet[2905]: I1101 00:13:51.979029 2905 kuberuntime_manager.go:1702] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Nov 1 00:13:51.980328 env[1824]: time="2025-11-01T00:13:51.980266501Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Nov 1 00:13:51.980893 kubelet[2905]: I1101 00:13:51.980588 2905 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Nov 1 00:13:52.754259 systemd[1]: Created slice kubepods-besteffort-pode2eff275_a85e_4dd3_b27d_0f6aabb285e0.slice. Nov 1 00:13:52.761253 kubelet[2905]: I1101 00:13:52.761103 2905 status_manager.go:890] "Failed to get status for pod" podUID="e2eff275-a85e-4dd3-b27d-0f6aabb285e0" pod="kube-system/kube-proxy-xbctz" err="pods \"kube-proxy-xbctz\" is forbidden: User \"system:node:ip-172-31-27-146\" cannot get resource \"pods\" in API group \"\" in the namespace \"kube-system\": no relationship found between node 'ip-172-31-27-146' and this object" Nov 1 00:13:52.856095 kubelet[2905]: I1101 00:13:52.856024 2905 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-pvblv\" (UniqueName: \"kubernetes.io/projected/e2eff275-a85e-4dd3-b27d-0f6aabb285e0-kube-api-access-pvblv\") pod \"kube-proxy-xbctz\" (UID: \"e2eff275-a85e-4dd3-b27d-0f6aabb285e0\") " pod="kube-system/kube-proxy-xbctz" Nov 1 00:13:52.856403 kubelet[2905]: I1101 00:13:52.856353 2905 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/e2eff275-a85e-4dd3-b27d-0f6aabb285e0-xtables-lock\") pod \"kube-proxy-xbctz\" (UID: \"e2eff275-a85e-4dd3-b27d-0f6aabb285e0\") " pod="kube-system/kube-proxy-xbctz" Nov 1 00:13:52.856635 kubelet[2905]: I1101 00:13:52.856589 2905 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/e2eff275-a85e-4dd3-b27d-0f6aabb285e0-kube-proxy\") pod \"kube-proxy-xbctz\" (UID: \"e2eff275-a85e-4dd3-b27d-0f6aabb285e0\") " pod="kube-system/kube-proxy-xbctz" Nov 1 00:13:52.856816 kubelet[2905]: I1101 00:13:52.856779 2905 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/e2eff275-a85e-4dd3-b27d-0f6aabb285e0-lib-modules\") pod \"kube-proxy-xbctz\" (UID: \"e2eff275-a85e-4dd3-b27d-0f6aabb285e0\") " pod="kube-system/kube-proxy-xbctz" Nov 1 00:13:52.984230 kubelet[2905]: I1101 00:13:52.984175 2905 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Nov 1 00:13:53.058077 systemd[1]: Created slice kubepods-besteffort-pod98d395f3_cb32_400f_be6d_01ae7d2f7675.slice. Nov 1 00:13:53.069533 env[1824]: time="2025-11-01T00:13:53.069469793Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-xbctz,Uid:e2eff275-a85e-4dd3-b27d-0f6aabb285e0,Namespace:kube-system,Attempt:0,}" Nov 1 00:13:53.119976 env[1824]: time="2025-11-01T00:13:53.119775402Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:13:53.119976 env[1824]: time="2025-11-01T00:13:53.119877193Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:13:53.120486 env[1824]: time="2025-11-01T00:13:53.120321535Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:13:53.124748 env[1824]: time="2025-11-01T00:13:53.124630892Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/07015511c5535264aedf482e273f32cc5e09e99dfefd1a113cab7a874599d484 pid=2959 runtime=io.containerd.runc.v2 Nov 1 00:13:53.158441 kubelet[2905]: I1101 00:13:53.158233 2905 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/98d395f3-cb32-400f-be6d-01ae7d2f7675-var-lib-calico\") pod \"tigera-operator-7dcd859c48-9sxlz\" (UID: \"98d395f3-cb32-400f-be6d-01ae7d2f7675\") " pod="tigera-operator/tigera-operator-7dcd859c48-9sxlz" Nov 1 00:13:53.158441 kubelet[2905]: I1101 00:13:53.158322 2905 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-jn596\" (UniqueName: \"kubernetes.io/projected/98d395f3-cb32-400f-be6d-01ae7d2f7675-kube-api-access-jn596\") pod \"tigera-operator-7dcd859c48-9sxlz\" (UID: \"98d395f3-cb32-400f-be6d-01ae7d2f7675\") " pod="tigera-operator/tigera-operator-7dcd859c48-9sxlz" Nov 1 00:13:53.160658 systemd[1]: Started cri-containerd-07015511c5535264aedf482e273f32cc5e09e99dfefd1a113cab7a874599d484.scope. Nov 1 00:13:53.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.208336 kernel: kauditd_printk_skb: 5 callbacks suppressed Nov 1 00:13:53.208454 kernel: audit: type=1400 audit(1761956033.205:815): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.223915 kernel: audit: type=1400 audit(1761956033.205:816): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.224053 kernel: audit: type=1400 audit(1761956033.205:817): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.244605 kernel: audit: type=1400 audit(1761956033.205:818): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.253553 kernel: audit: type=1400 audit(1761956033.205:819): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.262832 kernel: audit: type=1400 audit(1761956033.205:820): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.263046 kernel: audit: type=1400 audit(1761956033.205:821): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.282002 kernel: audit: type=1400 audit(1761956033.205:822): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.294078 kernel: audit: type=1400 audit(1761956033.205:823): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.294258 kernel: audit: type=1400 audit(1761956033.205:824): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.205000 audit: BPF prog-id=103 op=LOAD Nov 1 00:13:53.206000 audit[2969]: AVC avc: denied { bpf } for pid=2969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.206000 audit[2969]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400019db38 a2=10 a3=0 items=0 ppid=2959 pid=2969 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:53.206000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037303135353131633535333532363461656466343832653237336633 Nov 1 00:13:53.206000 audit[2969]: AVC avc: denied { perfmon } for pid=2969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.206000 audit[2969]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=400019d5a0 a2=3c a3=0 items=0 ppid=2959 pid=2969 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:53.206000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037303135353131633535333532363461656466343832653237336633 Nov 1 00:13:53.206000 audit[2969]: AVC avc: denied { bpf } for pid=2969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.206000 audit[2969]: AVC avc: denied { bpf } for pid=2969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.206000 audit[2969]: AVC avc: denied { bpf } for pid=2969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.206000 audit[2969]: AVC avc: denied { perfmon } for pid=2969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.206000 audit[2969]: AVC avc: denied { perfmon } for pid=2969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.206000 audit[2969]: AVC avc: denied { perfmon } for pid=2969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.206000 audit[2969]: AVC avc: denied { perfmon } for pid=2969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.206000 audit[2969]: AVC avc: denied { perfmon } for pid=2969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.206000 audit[2969]: AVC avc: denied { bpf } for pid=2969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.206000 audit[2969]: AVC avc: denied { bpf } for pid=2969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.206000 audit: BPF prog-id=104 op=LOAD Nov 1 00:13:53.206000 audit[2969]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400019d8e0 a2=78 a3=0 items=0 ppid=2959 pid=2969 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:53.206000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037303135353131633535333532363461656466343832653237336633 Nov 1 00:13:53.208000 audit[2969]: AVC avc: denied { bpf } for pid=2969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.208000 audit[2969]: AVC avc: denied { bpf } for pid=2969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.208000 audit[2969]: AVC avc: denied { perfmon } for pid=2969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.208000 audit[2969]: AVC avc: denied { perfmon } for pid=2969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.208000 audit[2969]: AVC avc: denied { perfmon } for pid=2969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.208000 audit[2969]: AVC avc: denied { perfmon } for pid=2969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.208000 audit[2969]: AVC avc: denied { perfmon } for pid=2969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.208000 audit[2969]: AVC avc: denied { bpf } for pid=2969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.208000 audit[2969]: AVC avc: denied { bpf } for pid=2969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.208000 audit: BPF prog-id=105 op=LOAD Nov 1 00:13:53.208000 audit[2969]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=400019d670 a2=78 a3=0 items=0 ppid=2959 pid=2969 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:53.208000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037303135353131633535333532363461656466343832653237336633 Nov 1 00:13:53.215000 audit: BPF prog-id=105 op=UNLOAD Nov 1 00:13:53.215000 audit: BPF prog-id=104 op=UNLOAD Nov 1 00:13:53.216000 audit[2969]: AVC avc: denied { bpf } for pid=2969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.216000 audit[2969]: AVC avc: denied { bpf } for pid=2969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.216000 audit[2969]: AVC avc: denied { bpf } for pid=2969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.216000 audit[2969]: AVC avc: denied { perfmon } for pid=2969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.216000 audit[2969]: AVC avc: denied { perfmon } for pid=2969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.216000 audit[2969]: AVC avc: denied { perfmon } for pid=2969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.216000 audit[2969]: AVC avc: denied { perfmon } for pid=2969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.216000 audit[2969]: AVC avc: denied { perfmon } for pid=2969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.216000 audit[2969]: AVC avc: denied { bpf } for pid=2969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.216000 audit[2969]: AVC avc: denied { bpf } for pid=2969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.216000 audit: BPF prog-id=106 op=LOAD Nov 1 00:13:53.216000 audit[2969]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400019db40 a2=78 a3=0 items=0 ppid=2959 pid=2969 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:53.216000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037303135353131633535333532363461656466343832653237336633 Nov 1 00:13:53.312214 env[1824]: time="2025-11-01T00:13:53.310728150Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-xbctz,Uid:e2eff275-a85e-4dd3-b27d-0f6aabb285e0,Namespace:kube-system,Attempt:0,} returns sandbox id \"07015511c5535264aedf482e273f32cc5e09e99dfefd1a113cab7a874599d484\"" Nov 1 00:13:53.320847 env[1824]: time="2025-11-01T00:13:53.320783924Z" level=info msg="CreateContainer within sandbox \"07015511c5535264aedf482e273f32cc5e09e99dfefd1a113cab7a874599d484\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Nov 1 00:13:53.353062 env[1824]: time="2025-11-01T00:13:53.352963794Z" level=info msg="CreateContainer within sandbox \"07015511c5535264aedf482e273f32cc5e09e99dfefd1a113cab7a874599d484\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"c69ac97e6dd4d063e7678644d7aa8ef5f192db5a8b19161773bbd62528b0645f\"" Nov 1 00:13:53.354394 env[1824]: time="2025-11-01T00:13:53.354337262Z" level=info msg="StartContainer for \"c69ac97e6dd4d063e7678644d7aa8ef5f192db5a8b19161773bbd62528b0645f\"" Nov 1 00:13:53.366597 env[1824]: time="2025-11-01T00:13:53.366521319Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-7dcd859c48-9sxlz,Uid:98d395f3-cb32-400f-be6d-01ae7d2f7675,Namespace:tigera-operator,Attempt:0,}" Nov 1 00:13:53.387738 systemd[1]: Started cri-containerd-c69ac97e6dd4d063e7678644d7aa8ef5f192db5a8b19161773bbd62528b0645f.scope. Nov 1 00:13:53.415921 env[1824]: time="2025-11-01T00:13:53.415689383Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:13:53.415921 env[1824]: time="2025-11-01T00:13:53.415842238Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:13:53.416182 env[1824]: time="2025-11-01T00:13:53.415906754Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:13:53.416406 env[1824]: time="2025-11-01T00:13:53.416329590Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1def874f0562b182e405c50131408a89d440a60d9ad22050bf0ffa302d22940f pid=3017 runtime=io.containerd.runc.v2 Nov 1 00:13:53.450806 systemd[1]: Started cri-containerd-1def874f0562b182e405c50131408a89d440a60d9ad22050bf0ffa302d22940f.scope. Nov 1 00:13:53.479000 audit[3001]: AVC avc: denied { perfmon } for pid=3001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.479000 audit[3001]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=2959 pid=3001 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:53.479000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336396163393765366464346430363365373637383634346437616138 Nov 1 00:13:53.479000 audit[3001]: AVC avc: denied { bpf } for pid=3001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.479000 audit[3001]: AVC avc: denied { bpf } for pid=3001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.479000 audit[3001]: AVC avc: denied { bpf } for pid=3001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.479000 audit[3001]: AVC avc: denied { perfmon } for pid=3001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.479000 audit[3001]: AVC avc: denied { perfmon } for pid=3001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.479000 audit[3001]: AVC avc: denied { perfmon } for pid=3001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.479000 audit[3001]: AVC avc: denied { perfmon } for pid=3001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.479000 audit[3001]: AVC avc: denied { perfmon } for pid=3001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.479000 audit[3001]: AVC avc: denied { bpf } for pid=3001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.479000 audit[3001]: AVC avc: denied { bpf } for pid=3001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.479000 audit: BPF prog-id=107 op=LOAD Nov 1 00:13:53.479000 audit[3001]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=2959 pid=3001 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:53.479000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336396163393765366464346430363365373637383634346437616138 Nov 1 00:13:53.480000 audit[3001]: AVC avc: denied { bpf } for pid=3001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.480000 audit[3001]: AVC avc: denied { bpf } for pid=3001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.480000 audit[3001]: AVC avc: denied { perfmon } for pid=3001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.480000 audit[3001]: AVC avc: denied { perfmon } for pid=3001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.480000 audit[3001]: AVC avc: denied { perfmon } for pid=3001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.480000 audit[3001]: AVC avc: denied { perfmon } for pid=3001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.480000 audit[3001]: AVC avc: denied { perfmon } for pid=3001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.480000 audit[3001]: AVC avc: denied { bpf } for pid=3001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.480000 audit[3001]: AVC avc: denied { bpf } for pid=3001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.480000 audit: BPF prog-id=108 op=LOAD Nov 1 00:13:53.480000 audit[3001]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=2959 pid=3001 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:53.480000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336396163393765366464346430363365373637383634346437616138 Nov 1 00:13:53.480000 audit: BPF prog-id=108 op=UNLOAD Nov 1 00:13:53.480000 audit: BPF prog-id=107 op=UNLOAD Nov 1 00:13:53.480000 audit[3001]: AVC avc: denied { bpf } for pid=3001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.480000 audit[3001]: AVC avc: denied { bpf } for pid=3001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.480000 audit[3001]: AVC avc: denied { bpf } for pid=3001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.480000 audit[3001]: AVC avc: denied { perfmon } for pid=3001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.480000 audit[3001]: AVC avc: denied { perfmon } for pid=3001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.480000 audit[3001]: AVC avc: denied { perfmon } for pid=3001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.480000 audit[3001]: AVC avc: denied { perfmon } for pid=3001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.480000 audit[3001]: AVC avc: denied { perfmon } for pid=3001 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.480000 audit[3001]: AVC avc: denied { bpf } for pid=3001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.480000 audit[3001]: AVC avc: denied { bpf } for pid=3001 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.480000 audit: BPF prog-id=109 op=LOAD Nov 1 00:13:53.480000 audit[3001]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=2959 pid=3001 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:53.480000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336396163393765366464346430363365373637383634346437616138 Nov 1 00:13:53.506000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.506000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.506000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.506000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.506000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.506000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.506000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.506000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.506000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.506000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.506000 audit: BPF prog-id=110 op=LOAD Nov 1 00:13:53.507000 audit[3028]: AVC avc: denied { bpf } for pid=3028 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.507000 audit[3028]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3017 pid=3028 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:53.507000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164656638373466303536326231383265343035633530313331343038 Nov 1 00:13:53.507000 audit[3028]: AVC avc: denied { perfmon } for pid=3028 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.507000 audit[3028]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3017 pid=3028 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:53.507000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164656638373466303536326231383265343035633530313331343038 Nov 1 00:13:53.507000 audit[3028]: AVC avc: denied { bpf } for pid=3028 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.507000 audit[3028]: AVC avc: denied { bpf } for pid=3028 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.507000 audit[3028]: AVC avc: denied { bpf } for pid=3028 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.507000 audit[3028]: AVC avc: denied { perfmon } for pid=3028 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.507000 audit[3028]: AVC avc: denied { perfmon } for pid=3028 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.507000 audit[3028]: AVC avc: denied { perfmon } for pid=3028 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.507000 audit[3028]: AVC avc: denied { perfmon } for pid=3028 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.507000 audit[3028]: AVC avc: denied { perfmon } for pid=3028 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.507000 audit[3028]: AVC avc: denied { bpf } for pid=3028 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.507000 audit[3028]: AVC avc: denied { bpf } for pid=3028 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.507000 audit: BPF prog-id=111 op=LOAD Nov 1 00:13:53.507000 audit[3028]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3017 pid=3028 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:53.507000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164656638373466303536326231383265343035633530313331343038 Nov 1 00:13:53.508000 audit[3028]: AVC avc: denied { bpf } for pid=3028 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.508000 audit[3028]: AVC avc: denied { bpf } for pid=3028 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.508000 audit[3028]: AVC avc: denied { perfmon } for pid=3028 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.508000 audit[3028]: AVC avc: denied { perfmon } for pid=3028 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.508000 audit[3028]: AVC avc: denied { perfmon } for pid=3028 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.508000 audit[3028]: AVC avc: denied { perfmon } for pid=3028 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.508000 audit[3028]: AVC avc: denied { perfmon } for pid=3028 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.508000 audit[3028]: AVC avc: denied { bpf } for pid=3028 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.508000 audit[3028]: AVC avc: denied { bpf } for pid=3028 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.508000 audit: BPF prog-id=112 op=LOAD Nov 1 00:13:53.508000 audit[3028]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3017 pid=3028 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:53.508000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164656638373466303536326231383265343035633530313331343038 Nov 1 00:13:53.508000 audit: BPF prog-id=112 op=UNLOAD Nov 1 00:13:53.508000 audit: BPF prog-id=111 op=UNLOAD Nov 1 00:13:53.508000 audit[3028]: AVC avc: denied { bpf } for pid=3028 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.508000 audit[3028]: AVC avc: denied { bpf } for pid=3028 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.508000 audit[3028]: AVC avc: denied { bpf } for pid=3028 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.508000 audit[3028]: AVC avc: denied { perfmon } for pid=3028 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.508000 audit[3028]: AVC avc: denied { perfmon } for pid=3028 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.508000 audit[3028]: AVC avc: denied { perfmon } for pid=3028 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.508000 audit[3028]: AVC avc: denied { perfmon } for pid=3028 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.508000 audit[3028]: AVC avc: denied { perfmon } for pid=3028 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.508000 audit[3028]: AVC avc: denied { bpf } for pid=3028 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.508000 audit[3028]: AVC avc: denied { bpf } for pid=3028 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:53.508000 audit: BPF prog-id=113 op=LOAD Nov 1 00:13:53.508000 audit[3028]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3017 pid=3028 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:53.508000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164656638373466303536326231383265343035633530313331343038 Nov 1 00:13:53.527093 env[1824]: time="2025-11-01T00:13:53.527006459Z" level=info msg="StartContainer for \"c69ac97e6dd4d063e7678644d7aa8ef5f192db5a8b19161773bbd62528b0645f\" returns successfully" Nov 1 00:13:53.566678 env[1824]: time="2025-11-01T00:13:53.566526885Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-7dcd859c48-9sxlz,Uid:98d395f3-cb32-400f-be6d-01ae7d2f7675,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"1def874f0562b182e405c50131408a89d440a60d9ad22050bf0ffa302d22940f\"" Nov 1 00:13:53.573475 env[1824]: time="2025-11-01T00:13:53.573406862Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.7\"" Nov 1 00:13:53.820000 audit[3104]: NETFILTER_CFG table=mangle:38 family=10 entries=1 op=nft_register_chain pid=3104 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:13:53.820000 audit[3104]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff4c264d0 a2=0 a3=1 items=0 ppid=3030 pid=3104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:53.820000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Nov 1 00:13:53.824000 audit[3105]: NETFILTER_CFG table=nat:39 family=10 entries=1 op=nft_register_chain pid=3105 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:13:53.824000 audit[3105]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffde060b50 a2=0 a3=1 items=0 ppid=3030 pid=3105 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:53.824000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Nov 1 00:13:53.826000 audit[3103]: NETFILTER_CFG table=mangle:40 family=2 entries=1 op=nft_register_chain pid=3103 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:13:53.826000 audit[3103]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe19ae520 a2=0 a3=1 items=0 ppid=3030 pid=3103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:53.826000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Nov 1 00:13:53.828000 audit[3106]: NETFILTER_CFG table=filter:41 family=10 entries=1 op=nft_register_chain pid=3106 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:13:53.828000 audit[3106]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd439e800 a2=0 a3=1 items=0 ppid=3030 pid=3106 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:53.828000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Nov 1 00:13:53.831000 audit[3107]: NETFILTER_CFG table=nat:42 family=2 entries=1 op=nft_register_chain pid=3107 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:13:53.831000 audit[3107]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff92fe4b0 a2=0 a3=1 items=0 ppid=3030 pid=3107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:53.831000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Nov 1 00:13:53.833000 audit[3108]: NETFILTER_CFG table=filter:43 family=2 entries=1 op=nft_register_chain pid=3108 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:13:53.833000 audit[3108]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffda2cab10 a2=0 a3=1 items=0 ppid=3030 pid=3108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:53.833000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Nov 1 00:13:53.915000 audit[3109]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=3109 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:13:53.915000 audit[3109]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffe3b8cfb0 a2=0 a3=1 items=0 ppid=3030 pid=3109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:53.915000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Nov 1 00:13:53.921000 audit[3111]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=3111 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:13:53.921000 audit[3111]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffe92ab6b0 a2=0 a3=1 items=0 ppid=3030 pid=3111 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:53.921000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Nov 1 00:13:53.928000 audit[3114]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=3114 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:13:53.928000 audit[3114]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffd8a89d20 a2=0 a3=1 items=0 ppid=3030 pid=3114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:53.928000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Nov 1 00:13:53.931000 audit[3115]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=3115 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:13:53.931000 audit[3115]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffea53f860 a2=0 a3=1 items=0 ppid=3030 pid=3115 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:53.931000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Nov 1 00:13:53.936000 audit[3117]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=3117 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:13:53.936000 audit[3117]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc0116d90 a2=0 a3=1 items=0 ppid=3030 pid=3117 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:53.936000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Nov 1 00:13:53.939000 audit[3118]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=3118 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:13:53.939000 audit[3118]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffca1b2160 a2=0 a3=1 items=0 ppid=3030 pid=3118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:53.939000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Nov 1 00:13:53.949000 audit[3120]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=3120 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:13:53.949000 audit[3120]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=fffff741abf0 a2=0 a3=1 items=0 ppid=3030 pid=3120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:53.949000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Nov 1 00:13:53.958000 audit[3123]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=3123 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:13:53.958000 audit[3123]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffef90cb70 a2=0 a3=1 items=0 ppid=3030 pid=3123 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:53.958000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Nov 1 00:13:53.963000 audit[3124]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=3124 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:13:53.963000 audit[3124]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe8441b60 a2=0 a3=1 items=0 ppid=3030 pid=3124 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:53.963000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Nov 1 00:13:53.969000 audit[3126]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=3126 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:13:53.969000 audit[3126]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffff21f73c0 a2=0 a3=1 items=0 ppid=3030 pid=3126 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:53.969000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Nov 1 00:13:53.972000 audit[3127]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=3127 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:13:53.972000 audit[3127]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc487c5f0 a2=0 a3=1 items=0 ppid=3030 pid=3127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:53.972000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Nov 1 00:13:53.978000 audit[3129]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=3129 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:13:53.978000 audit[3129]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc010b730 a2=0 a3=1 items=0 ppid=3030 pid=3129 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:53.978000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Nov 1 00:13:53.986000 audit[3132]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=3132 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:13:53.986000 audit[3132]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffcba53d70 a2=0 a3=1 items=0 ppid=3030 pid=3132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:53.986000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Nov 1 00:13:54.008000 audit[3135]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=3135 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:13:54.008000 audit[3135]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff355aaa0 a2=0 a3=1 items=0 ppid=3030 pid=3135 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:54.008000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Nov 1 00:13:54.010000 audit[3136]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=3136 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:13:54.010000 audit[3136]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffd9ec4f40 a2=0 a3=1 items=0 ppid=3030 pid=3136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:54.010000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Nov 1 00:13:54.016000 audit[3138]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=3138 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:13:54.016000 audit[3138]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffc7be4260 a2=0 a3=1 items=0 ppid=3030 pid=3138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:54.016000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Nov 1 00:13:54.023000 audit[3141]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=3141 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:13:54.023000 audit[3141]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd72b6b00 a2=0 a3=1 items=0 ppid=3030 pid=3141 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:54.023000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Nov 1 00:13:54.025000 audit[3142]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=3142 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:13:54.025000 audit[3142]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffef031fc0 a2=0 a3=1 items=0 ppid=3030 pid=3142 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:54.025000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Nov 1 00:13:54.039000 audit[3144]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=3144 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:13:54.039000 audit[3144]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffe56033f0 a2=0 a3=1 items=0 ppid=3030 pid=3144 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:54.039000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Nov 1 00:13:54.098000 audit[3151]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=3151 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:13:54.098000 audit[3151]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffdc90e9f0 a2=0 a3=1 items=0 ppid=3030 pid=3151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:54.098000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:13:54.116000 audit[3151]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=3151 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:13:54.116000 audit[3151]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5508 a0=3 a1=ffffdc90e9f0 a2=0 a3=1 items=0 ppid=3030 pid=3151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:54.116000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:13:54.118000 audit[3156]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=3156 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:13:54.118000 audit[3156]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffc06bb2b0 a2=0 a3=1 items=0 ppid=3030 pid=3156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:54.118000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Nov 1 00:13:54.128000 audit[3158]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=3158 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:13:54.128000 audit[3158]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=fffff7f20160 a2=0 a3=1 items=0 ppid=3030 pid=3158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:54.128000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Nov 1 00:13:54.143000 audit[3161]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=3161 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:13:54.143000 audit[3161]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=fffffba097b0 a2=0 a3=1 items=0 ppid=3030 pid=3161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:54.143000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Nov 1 00:13:54.146000 audit[3162]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=3162 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:13:54.146000 audit[3162]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd0129700 a2=0 a3=1 items=0 ppid=3030 pid=3162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:54.146000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Nov 1 00:13:54.151000 audit[3164]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=3164 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:13:54.151000 audit[3164]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffff414ae0 a2=0 a3=1 items=0 ppid=3030 pid=3164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:54.151000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Nov 1 00:13:54.155735 kubelet[2905]: I1101 00:13:54.155645 2905 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-xbctz" podStartSLOduration=2.155621235 podStartE2EDuration="2.155621235s" podCreationTimestamp="2025-11-01 00:13:52 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:13:54.059502076 +0000 UTC m=+7.396581610" watchObservedRunningTime="2025-11-01 00:13:54.155621235 +0000 UTC m=+7.492700781" Nov 1 00:13:54.157000 audit[3165]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=3165 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:13:54.157000 audit[3165]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd227eb70 a2=0 a3=1 items=0 ppid=3030 pid=3165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:54.157000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Nov 1 00:13:54.169000 audit[3167]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=3167 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:13:54.169000 audit[3167]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffe7998980 a2=0 a3=1 items=0 ppid=3030 pid=3167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:54.169000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Nov 1 00:13:54.176000 audit[3170]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=3170 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:13:54.176000 audit[3170]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=ffffc86d6d10 a2=0 a3=1 items=0 ppid=3030 pid=3170 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:54.176000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Nov 1 00:13:54.178000 audit[3171]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=3171 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:13:54.178000 audit[3171]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffea958530 a2=0 a3=1 items=0 ppid=3030 pid=3171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:54.178000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Nov 1 00:13:54.183000 audit[3173]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=3173 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:13:54.183000 audit[3173]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffeab678b0 a2=0 a3=1 items=0 ppid=3030 pid=3173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:54.183000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Nov 1 00:13:54.186000 audit[3174]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=3174 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:13:54.186000 audit[3174]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffdde6e9b0 a2=0 a3=1 items=0 ppid=3030 pid=3174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:54.186000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Nov 1 00:13:54.191000 audit[3176]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=3176 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:13:54.191000 audit[3176]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffddbc4c60 a2=0 a3=1 items=0 ppid=3030 pid=3176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:54.191000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Nov 1 00:13:54.200000 audit[3179]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=3179 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:13:54.200000 audit[3179]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe1c35250 a2=0 a3=1 items=0 ppid=3030 pid=3179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:54.200000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Nov 1 00:13:54.208000 audit[3182]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=3182 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:13:54.208000 audit[3182]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc6560510 a2=0 a3=1 items=0 ppid=3030 pid=3182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:54.208000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Nov 1 00:13:54.211000 audit[3183]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=3183 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:13:54.211000 audit[3183]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffc080cdf0 a2=0 a3=1 items=0 ppid=3030 pid=3183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:54.211000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Nov 1 00:13:54.216000 audit[3185]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=3185 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:13:54.216000 audit[3185]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffc57790a0 a2=0 a3=1 items=0 ppid=3030 pid=3185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:54.216000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Nov 1 00:13:54.224000 audit[3188]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=3188 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:13:54.224000 audit[3188]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffcb0b8060 a2=0 a3=1 items=0 ppid=3030 pid=3188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:54.224000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Nov 1 00:13:54.227000 audit[3189]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=3189 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:13:54.227000 audit[3189]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd6b19ed0 a2=0 a3=1 items=0 ppid=3030 pid=3189 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:54.227000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Nov 1 00:13:54.232000 audit[3191]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=3191 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:13:54.232000 audit[3191]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffc62cbad0 a2=0 a3=1 items=0 ppid=3030 pid=3191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:54.232000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Nov 1 00:13:54.234000 audit[3192]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=3192 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:13:54.234000 audit[3192]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdd34c780 a2=0 a3=1 items=0 ppid=3030 pid=3192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:54.234000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Nov 1 00:13:54.239000 audit[3194]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=3194 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:13:54.239000 audit[3194]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff3194110 a2=0 a3=1 items=0 ppid=3030 pid=3194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:54.239000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Nov 1 00:13:54.246000 audit[3197]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=3197 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:13:54.246000 audit[3197]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd3b174b0 a2=0 a3=1 items=0 ppid=3030 pid=3197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:54.246000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Nov 1 00:13:54.252000 audit[3199]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=3199 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Nov 1 00:13:54.252000 audit[3199]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2088 a0=3 a1=ffffe879d510 a2=0 a3=1 items=0 ppid=3030 pid=3199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:54.252000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:13:54.253000 audit[3199]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=3199 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Nov 1 00:13:54.253000 audit[3199]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2056 a0=3 a1=ffffe879d510 a2=0 a3=1 items=0 ppid=3030 pid=3199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:54.253000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:13:55.063069 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount870652946.mount: Deactivated successfully. Nov 1 00:13:56.184676 env[1824]: time="2025-11-01T00:13:56.184589726Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:13:56.188493 env[1824]: time="2025-11-01T00:13:56.188424601Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:19f52e4b7ea471a91d4186e9701288b905145dc20d4928cbbf2eac8d9dfce54b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:13:56.192090 env[1824]: time="2025-11-01T00:13:56.192025066Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:13:56.195433 env[1824]: time="2025-11-01T00:13:56.195371705Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:1b629a1403f5b6d7243f7dd523d04b8a50352a33c1d4d6970b6002a8733acf2e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:13:56.196698 env[1824]: time="2025-11-01T00:13:56.196649036Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.7\" returns image reference \"sha256:19f52e4b7ea471a91d4186e9701288b905145dc20d4928cbbf2eac8d9dfce54b\"" Nov 1 00:13:56.204344 env[1824]: time="2025-11-01T00:13:56.204290333Z" level=info msg="CreateContainer within sandbox \"1def874f0562b182e405c50131408a89d440a60d9ad22050bf0ffa302d22940f\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Nov 1 00:13:56.226337 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3937394627.mount: Deactivated successfully. Nov 1 00:13:56.239466 env[1824]: time="2025-11-01T00:13:56.239402638Z" level=info msg="CreateContainer within sandbox \"1def874f0562b182e405c50131408a89d440a60d9ad22050bf0ffa302d22940f\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"5a09e5d3da8e3f03d18d504281c235962b3c7aaeaeda6fee4f0355b84e1b6d15\"" Nov 1 00:13:56.242836 env[1824]: time="2025-11-01T00:13:56.241547310Z" level=info msg="StartContainer for \"5a09e5d3da8e3f03d18d504281c235962b3c7aaeaeda6fee4f0355b84e1b6d15\"" Nov 1 00:13:56.279993 systemd[1]: Started cri-containerd-5a09e5d3da8e3f03d18d504281c235962b3c7aaeaeda6fee4f0355b84e1b6d15.scope. Nov 1 00:13:56.323000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:56.323000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:56.323000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:56.323000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:56.323000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:56.323000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:56.323000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:56.323000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:56.323000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:56.324000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:56.324000 audit: BPF prog-id=114 op=LOAD Nov 1 00:13:56.324000 audit[3207]: AVC avc: denied { bpf } for pid=3207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:56.324000 audit[3207]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3017 pid=3207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:56.324000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561303965356433646138653366303364313864353034323831633233 Nov 1 00:13:56.325000 audit[3207]: AVC avc: denied { perfmon } for pid=3207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:56.325000 audit[3207]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3017 pid=3207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:56.325000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561303965356433646138653366303364313864353034323831633233 Nov 1 00:13:56.325000 audit[3207]: AVC avc: denied { bpf } for pid=3207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:56.325000 audit[3207]: AVC avc: denied { bpf } for pid=3207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:56.325000 audit[3207]: AVC avc: denied { bpf } for pid=3207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:56.325000 audit[3207]: AVC avc: denied { perfmon } for pid=3207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:56.325000 audit[3207]: AVC avc: denied { perfmon } for pid=3207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:56.325000 audit[3207]: AVC avc: denied { perfmon } for pid=3207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:56.325000 audit[3207]: AVC avc: denied { perfmon } for pid=3207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:56.325000 audit[3207]: AVC avc: denied { perfmon } for pid=3207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:56.325000 audit[3207]: AVC avc: denied { bpf } for pid=3207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:56.325000 audit[3207]: AVC avc: denied { bpf } for pid=3207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:56.325000 audit: BPF prog-id=115 op=LOAD Nov 1 00:13:56.325000 audit[3207]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3017 pid=3207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:56.325000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561303965356433646138653366303364313864353034323831633233 Nov 1 00:13:56.327000 audit[3207]: AVC avc: denied { bpf } for pid=3207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:56.327000 audit[3207]: AVC avc: denied { bpf } for pid=3207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:56.327000 audit[3207]: AVC avc: denied { perfmon } for pid=3207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:56.327000 audit[3207]: AVC avc: denied { perfmon } for pid=3207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:56.327000 audit[3207]: AVC avc: denied { perfmon } for pid=3207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:56.327000 audit[3207]: AVC avc: denied { perfmon } for pid=3207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:56.327000 audit[3207]: AVC avc: denied { perfmon } for pid=3207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:56.327000 audit[3207]: AVC avc: denied { bpf } for pid=3207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:56.327000 audit[3207]: AVC avc: denied { bpf } for pid=3207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:56.327000 audit: BPF prog-id=116 op=LOAD Nov 1 00:13:56.327000 audit[3207]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3017 pid=3207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:56.327000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561303965356433646138653366303364313864353034323831633233 Nov 1 00:13:56.328000 audit: BPF prog-id=116 op=UNLOAD Nov 1 00:13:56.328000 audit: BPF prog-id=115 op=UNLOAD Nov 1 00:13:56.328000 audit[3207]: AVC avc: denied { bpf } for pid=3207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:56.328000 audit[3207]: AVC avc: denied { bpf } for pid=3207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:56.328000 audit[3207]: AVC avc: denied { bpf } for pid=3207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:56.328000 audit[3207]: AVC avc: denied { perfmon } for pid=3207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:56.328000 audit[3207]: AVC avc: denied { perfmon } for pid=3207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:56.328000 audit[3207]: AVC avc: denied { perfmon } for pid=3207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:56.328000 audit[3207]: AVC avc: denied { perfmon } for pid=3207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:56.328000 audit[3207]: AVC avc: denied { perfmon } for pid=3207 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:56.328000 audit[3207]: AVC avc: denied { bpf } for pid=3207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:56.328000 audit[3207]: AVC avc: denied { bpf } for pid=3207 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:56.328000 audit: BPF prog-id=117 op=LOAD Nov 1 00:13:56.328000 audit[3207]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3017 pid=3207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:56.328000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561303965356433646138653366303364313864353034323831633233 Nov 1 00:13:56.355182 env[1824]: time="2025-11-01T00:13:56.355104712Z" level=info msg="StartContainer for \"5a09e5d3da8e3f03d18d504281c235962b3c7aaeaeda6fee4f0355b84e1b6d15\" returns successfully" Nov 1 00:14:04.882000 audit[2095]: USER_END pid=2095 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:14:04.883487 sudo[2095]: pam_unix(sudo:session): session closed for user root Nov 1 00:14:04.885714 kernel: kauditd_printk_skb: 357 callbacks suppressed Nov 1 00:14:04.885802 kernel: audit: type=1106 audit(1761956044.882:926): pid=2095 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:14:04.882000 audit[2095]: CRED_DISP pid=2095 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:14:04.906719 kernel: audit: type=1104 audit(1761956044.882:927): pid=2095 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:14:04.917528 sshd[2092]: pam_unix(sshd:session): session closed for user core Nov 1 00:14:04.919000 audit[2092]: USER_END pid=2092 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:04.933101 systemd[1]: sshd@6-172.31.27.146:22-147.75.109.163:44588.service: Deactivated successfully. Nov 1 00:14:04.934404 systemd[1]: session-7.scope: Deactivated successfully. Nov 1 00:14:04.934726 systemd[1]: session-7.scope: Consumed 9.751s CPU time. Nov 1 00:14:04.936633 systemd-logind[1813]: Session 7 logged out. Waiting for processes to exit. Nov 1 00:14:04.938776 systemd-logind[1813]: Removed session 7. Nov 1 00:14:04.919000 audit[2092]: CRED_DISP pid=2092 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:04.954773 kernel: audit: type=1106 audit(1761956044.919:928): pid=2092 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:04.954896 kernel: audit: type=1104 audit(1761956044.919:929): pid=2092 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:04.932000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.27.146:22-147.75.109.163:44588 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:04.969610 kernel: audit: type=1131 audit(1761956044.932:930): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.27.146:22-147.75.109.163:44588 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:07.587000 audit[3283]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=3283 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:14:07.587000 audit[3283]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffeba2e3c0 a2=0 a3=1 items=0 ppid=3030 pid=3283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:07.607367 kernel: audit: type=1325 audit(1761956047.587:931): table=filter:89 family=2 entries=15 op=nft_register_rule pid=3283 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:14:07.607490 kernel: audit: type=1300 audit(1761956047.587:931): arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffeba2e3c0 a2=0 a3=1 items=0 ppid=3030 pid=3283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:07.587000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:14:07.616584 kernel: audit: type=1327 audit(1761956047.587:931): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:14:07.612000 audit[3283]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=3283 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:14:07.623076 kernel: audit: type=1325 audit(1761956047.612:932): table=nat:90 family=2 entries=12 op=nft_register_rule pid=3283 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:14:07.612000 audit[3283]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffeba2e3c0 a2=0 a3=1 items=0 ppid=3030 pid=3283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:07.636887 kernel: audit: type=1300 audit(1761956047.612:932): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffeba2e3c0 a2=0 a3=1 items=0 ppid=3030 pid=3283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:07.612000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:14:07.664000 audit[3285]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=3285 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:14:07.664000 audit[3285]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffdc60e280 a2=0 a3=1 items=0 ppid=3030 pid=3285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:07.664000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:14:07.671000 audit[3285]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=3285 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:14:07.671000 audit[3285]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffdc60e280 a2=0 a3=1 items=0 ppid=3030 pid=3285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:07.671000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:14:15.630000 audit[3291]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=3291 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:14:15.633916 kernel: kauditd_printk_skb: 7 callbacks suppressed Nov 1 00:14:15.634045 kernel: audit: type=1325 audit(1761956055.630:935): table=filter:93 family=2 entries=17 op=nft_register_rule pid=3291 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:14:15.630000 audit[3291]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffde4e24a0 a2=0 a3=1 items=0 ppid=3030 pid=3291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:15.654051 kernel: audit: type=1300 audit(1761956055.630:935): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffde4e24a0 a2=0 a3=1 items=0 ppid=3030 pid=3291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:15.630000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:14:15.666114 kernel: audit: type=1327 audit(1761956055.630:935): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:14:15.645000 audit[3291]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=3291 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:14:15.676205 kernel: audit: type=1325 audit(1761956055.645:936): table=nat:94 family=2 entries=12 op=nft_register_rule pid=3291 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:14:15.645000 audit[3291]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffde4e24a0 a2=0 a3=1 items=0 ppid=3030 pid=3291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:15.689881 kernel: audit: type=1300 audit(1761956055.645:936): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffde4e24a0 a2=0 a3=1 items=0 ppid=3030 pid=3291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:15.645000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:14:15.696240 kernel: audit: type=1327 audit(1761956055.645:936): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:14:15.699000 audit[3293]: NETFILTER_CFG table=filter:95 family=2 entries=18 op=nft_register_rule pid=3293 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:14:15.699000 audit[3293]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=fffff20fa310 a2=0 a3=1 items=0 ppid=3030 pid=3293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:15.719872 kernel: audit: type=1325 audit(1761956055.699:937): table=filter:95 family=2 entries=18 op=nft_register_rule pid=3293 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:14:15.719998 kernel: audit: type=1300 audit(1761956055.699:937): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=fffff20fa310 a2=0 a3=1 items=0 ppid=3030 pid=3293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:15.699000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:14:15.728063 kernel: audit: type=1327 audit(1761956055.699:937): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:14:15.731000 audit[3293]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=3293 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:14:15.740163 kernel: audit: type=1325 audit(1761956055.731:938): table=nat:96 family=2 entries=12 op=nft_register_rule pid=3293 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:14:15.731000 audit[3293]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffff20fa310 a2=0 a3=1 items=0 ppid=3030 pid=3293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:15.731000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:14:16.783000 audit[3295]: NETFILTER_CFG table=filter:97 family=2 entries=19 op=nft_register_rule pid=3295 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:14:16.783000 audit[3295]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffd8d5d3d0 a2=0 a3=1 items=0 ppid=3030 pid=3295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:16.783000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:14:16.794000 audit[3295]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=3295 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:14:16.794000 audit[3295]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffd8d5d3d0 a2=0 a3=1 items=0 ppid=3030 pid=3295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:16.794000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:14:19.578000 audit[3297]: NETFILTER_CFG table=filter:99 family=2 entries=21 op=nft_register_rule pid=3297 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:14:19.578000 audit[3297]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=fffffa51b510 a2=0 a3=1 items=0 ppid=3030 pid=3297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:19.578000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:14:19.585000 audit[3297]: NETFILTER_CFG table=nat:100 family=2 entries=12 op=nft_register_rule pid=3297 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:14:19.585000 audit[3297]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffffa51b510 a2=0 a3=1 items=0 ppid=3030 pid=3297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:19.585000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:14:19.636047 kubelet[2905]: I1101 00:14:19.635878 2905 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-7dcd859c48-9sxlz" podStartSLOduration=25.008406678 podStartE2EDuration="27.635832478s" podCreationTimestamp="2025-11-01 00:13:52 +0000 UTC" firstStartedPulling="2025-11-01 00:13:53.572097455 +0000 UTC m=+6.909176989" lastFinishedPulling="2025-11-01 00:13:56.199523255 +0000 UTC m=+9.536602789" observedRunningTime="2025-11-01 00:13:57.097401591 +0000 UTC m=+10.434481137" watchObservedRunningTime="2025-11-01 00:14:19.635832478 +0000 UTC m=+32.972912024" Nov 1 00:14:19.648578 systemd[1]: Created slice kubepods-besteffort-podcb8b541c_40c7_42ec_b24c_b61228a88f85.slice. Nov 1 00:14:19.746000 audit[3299]: NETFILTER_CFG table=filter:101 family=2 entries=22 op=nft_register_rule pid=3299 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:14:19.746000 audit[3299]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=ffffe5c40310 a2=0 a3=1 items=0 ppid=3030 pid=3299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:19.746000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:14:19.754000 audit[3299]: NETFILTER_CFG table=nat:102 family=2 entries=12 op=nft_register_rule pid=3299 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:14:19.754000 audit[3299]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffe5c40310 a2=0 a3=1 items=0 ppid=3030 pid=3299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:19.754000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:14:19.756313 kubelet[2905]: I1101 00:14:19.756250 2905 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/cb8b541c-40c7-42ec-b24c-b61228a88f85-tigera-ca-bundle\") pod \"calico-typha-78555757fd-zl6sp\" (UID: \"cb8b541c-40c7-42ec-b24c-b61228a88f85\") " pod="calico-system/calico-typha-78555757fd-zl6sp" Nov 1 00:14:19.756443 kubelet[2905]: I1101 00:14:19.756360 2905 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-jhl4v\" (UniqueName: \"kubernetes.io/projected/cb8b541c-40c7-42ec-b24c-b61228a88f85-kube-api-access-jhl4v\") pod \"calico-typha-78555757fd-zl6sp\" (UID: \"cb8b541c-40c7-42ec-b24c-b61228a88f85\") " pod="calico-system/calico-typha-78555757fd-zl6sp" Nov 1 00:14:19.756443 kubelet[2905]: I1101 00:14:19.756429 2905 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/cb8b541c-40c7-42ec-b24c-b61228a88f85-typha-certs\") pod \"calico-typha-78555757fd-zl6sp\" (UID: \"cb8b541c-40c7-42ec-b24c-b61228a88f85\") " pod="calico-system/calico-typha-78555757fd-zl6sp" Nov 1 00:14:19.881294 kubelet[2905]: W1101 00:14:19.881248 2905 reflector.go:569] object-"calico-system"/"cni-config": failed to list *v1.ConfigMap: configmaps "cni-config" is forbidden: User "system:node:ip-172-31-27-146" cannot list resource "configmaps" in API group "" in the namespace "calico-system": no relationship found between node 'ip-172-31-27-146' and this object Nov 1 00:14:19.881586 kubelet[2905]: E1101 00:14:19.881549 2905 reflector.go:166] "Unhandled Error" err="object-\"calico-system\"/\"cni-config\": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps \"cni-config\" is forbidden: User \"system:node:ip-172-31-27-146\" cannot list resource \"configmaps\" in API group \"\" in the namespace \"calico-system\": no relationship found between node 'ip-172-31-27-146' and this object" logger="UnhandledError" Nov 1 00:14:19.884332 systemd[1]: Created slice kubepods-besteffort-pod0ac9667d_b5d6_4a94_a0ed_69d6ae0ae9f1.slice. Nov 1 00:14:19.956065 env[1824]: time="2025-11-01T00:14:19.955482594Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-78555757fd-zl6sp,Uid:cb8b541c-40c7-42ec-b24c-b61228a88f85,Namespace:calico-system,Attempt:0,}" Nov 1 00:14:19.957090 kubelet[2905]: I1101 00:14:19.956999 2905 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/0ac9667d-b5d6-4a94-a0ed-69d6ae0ae9f1-cni-bin-dir\") pod \"calico-node-rbtls\" (UID: \"0ac9667d-b5d6-4a94-a0ed-69d6ae0ae9f1\") " pod="calico-system/calico-node-rbtls" Nov 1 00:14:19.957261 kubelet[2905]: I1101 00:14:19.957098 2905 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/0ac9667d-b5d6-4a94-a0ed-69d6ae0ae9f1-var-run-calico\") pod \"calico-node-rbtls\" (UID: \"0ac9667d-b5d6-4a94-a0ed-69d6ae0ae9f1\") " pod="calico-system/calico-node-rbtls" Nov 1 00:14:19.957261 kubelet[2905]: I1101 00:14:19.957209 2905 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-j2hc9\" (UniqueName: \"kubernetes.io/projected/0ac9667d-b5d6-4a94-a0ed-69d6ae0ae9f1-kube-api-access-j2hc9\") pod \"calico-node-rbtls\" (UID: \"0ac9667d-b5d6-4a94-a0ed-69d6ae0ae9f1\") " pod="calico-system/calico-node-rbtls" Nov 1 00:14:19.957399 kubelet[2905]: I1101 00:14:19.957290 2905 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/0ac9667d-b5d6-4a94-a0ed-69d6ae0ae9f1-cni-net-dir\") pod \"calico-node-rbtls\" (UID: \"0ac9667d-b5d6-4a94-a0ed-69d6ae0ae9f1\") " pod="calico-system/calico-node-rbtls" Nov 1 00:14:19.957399 kubelet[2905]: I1101 00:14:19.957364 2905 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/0ac9667d-b5d6-4a94-a0ed-69d6ae0ae9f1-tigera-ca-bundle\") pod \"calico-node-rbtls\" (UID: \"0ac9667d-b5d6-4a94-a0ed-69d6ae0ae9f1\") " pod="calico-system/calico-node-rbtls" Nov 1 00:14:19.957559 kubelet[2905]: I1101 00:14:19.957471 2905 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/0ac9667d-b5d6-4a94-a0ed-69d6ae0ae9f1-var-lib-calico\") pod \"calico-node-rbtls\" (UID: \"0ac9667d-b5d6-4a94-a0ed-69d6ae0ae9f1\") " pod="calico-system/calico-node-rbtls" Nov 1 00:14:19.957629 kubelet[2905]: I1101 00:14:19.957573 2905 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/0ac9667d-b5d6-4a94-a0ed-69d6ae0ae9f1-node-certs\") pod \"calico-node-rbtls\" (UID: \"0ac9667d-b5d6-4a94-a0ed-69d6ae0ae9f1\") " pod="calico-system/calico-node-rbtls" Nov 1 00:14:19.957701 kubelet[2905]: I1101 00:14:19.957645 2905 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/0ac9667d-b5d6-4a94-a0ed-69d6ae0ae9f1-policysync\") pod \"calico-node-rbtls\" (UID: \"0ac9667d-b5d6-4a94-a0ed-69d6ae0ae9f1\") " pod="calico-system/calico-node-rbtls" Nov 1 00:14:19.957770 kubelet[2905]: I1101 00:14:19.957724 2905 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/0ac9667d-b5d6-4a94-a0ed-69d6ae0ae9f1-xtables-lock\") pod \"calico-node-rbtls\" (UID: \"0ac9667d-b5d6-4a94-a0ed-69d6ae0ae9f1\") " pod="calico-system/calico-node-rbtls" Nov 1 00:14:19.958649 kubelet[2905]: I1101 00:14:19.957764 2905 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/0ac9667d-b5d6-4a94-a0ed-69d6ae0ae9f1-flexvol-driver-host\") pod \"calico-node-rbtls\" (UID: \"0ac9667d-b5d6-4a94-a0ed-69d6ae0ae9f1\") " pod="calico-system/calico-node-rbtls" Nov 1 00:14:19.958649 kubelet[2905]: I1101 00:14:19.958040 2905 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/0ac9667d-b5d6-4a94-a0ed-69d6ae0ae9f1-cni-log-dir\") pod \"calico-node-rbtls\" (UID: \"0ac9667d-b5d6-4a94-a0ed-69d6ae0ae9f1\") " pod="calico-system/calico-node-rbtls" Nov 1 00:14:19.958649 kubelet[2905]: I1101 00:14:19.958178 2905 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/0ac9667d-b5d6-4a94-a0ed-69d6ae0ae9f1-lib-modules\") pod \"calico-node-rbtls\" (UID: \"0ac9667d-b5d6-4a94-a0ed-69d6ae0ae9f1\") " pod="calico-system/calico-node-rbtls" Nov 1 00:14:20.003751 env[1824]: time="2025-11-01T00:14:20.003560996Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:14:20.003751 env[1824]: time="2025-11-01T00:14:20.003646511Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:14:20.004015 env[1824]: time="2025-11-01T00:14:20.003716245Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:14:20.005253 env[1824]: time="2025-11-01T00:14:20.004407286Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e9204c34c7e16066f4ddbd0260692fc06100cfcdbd60d8c90ad41bb3da519b7a pid=3308 runtime=io.containerd.runc.v2 Nov 1 00:14:20.035468 kubelet[2905]: E1101 00:14:20.035054 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-89sjk" podUID="7a8f56d2-ec05-443a-b8e9-9b53fb320745" Nov 1 00:14:20.060167 systemd[1]: Started cri-containerd-e9204c34c7e16066f4ddbd0260692fc06100cfcdbd60d8c90ad41bb3da519b7a.scope. Nov 1 00:14:20.066871 kubelet[2905]: E1101 00:14:20.066787 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.066871 kubelet[2905]: W1101 00:14:20.066854 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.067104 kubelet[2905]: E1101 00:14:20.066893 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.088065 kubelet[2905]: E1101 00:14:20.088006 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.088065 kubelet[2905]: W1101 00:14:20.088059 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.089422 kubelet[2905]: E1101 00:14:20.088094 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.102360 kubelet[2905]: E1101 00:14:20.102297 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.102360 kubelet[2905]: W1101 00:14:20.102348 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.102630 kubelet[2905]: E1101 00:14:20.102385 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.133471 kubelet[2905]: E1101 00:14:20.133327 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.133471 kubelet[2905]: W1101 00:14:20.133366 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.133471 kubelet[2905]: E1101 00:14:20.133400 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.136437 kubelet[2905]: E1101 00:14:20.136393 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.136609 kubelet[2905]: W1101 00:14:20.136462 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.136609 kubelet[2905]: E1101 00:14:20.136587 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.139192 kubelet[2905]: E1101 00:14:20.139054 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.139192 kubelet[2905]: W1101 00:14:20.139090 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.139192 kubelet[2905]: E1101 00:14:20.139187 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.140069 kubelet[2905]: E1101 00:14:20.139906 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.140069 kubelet[2905]: W1101 00:14:20.139940 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.140069 kubelet[2905]: E1101 00:14:20.139969 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.141173 kubelet[2905]: E1101 00:14:20.140691 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.141173 kubelet[2905]: W1101 00:14:20.140723 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.141173 kubelet[2905]: E1101 00:14:20.140755 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.141173 kubelet[2905]: E1101 00:14:20.141083 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.141173 kubelet[2905]: W1101 00:14:20.141099 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.141173 kubelet[2905]: E1101 00:14:20.141150 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.141580 kubelet[2905]: E1101 00:14:20.141451 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.141580 kubelet[2905]: W1101 00:14:20.141468 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.141580 kubelet[2905]: E1101 00:14:20.141487 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.143206 kubelet[2905]: E1101 00:14:20.141766 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.143206 kubelet[2905]: W1101 00:14:20.141796 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.143206 kubelet[2905]: E1101 00:14:20.141819 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.143206 kubelet[2905]: E1101 00:14:20.142478 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.143206 kubelet[2905]: W1101 00:14:20.142501 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.143206 kubelet[2905]: E1101 00:14:20.142525 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.143206 kubelet[2905]: E1101 00:14:20.142848 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.143206 kubelet[2905]: W1101 00:14:20.142868 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.143206 kubelet[2905]: E1101 00:14:20.142890 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.143814 kubelet[2905]: E1101 00:14:20.143308 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.143814 kubelet[2905]: W1101 00:14:20.143329 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.143814 kubelet[2905]: E1101 00:14:20.143355 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.143814 kubelet[2905]: E1101 00:14:20.143776 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.143814 kubelet[2905]: W1101 00:14:20.143794 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.143814 kubelet[2905]: E1101 00:14:20.143815 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.144233 kubelet[2905]: E1101 00:14:20.144180 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.144233 kubelet[2905]: W1101 00:14:20.144199 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.144233 kubelet[2905]: E1101 00:14:20.144225 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.144728 kubelet[2905]: E1101 00:14:20.144687 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.144819 kubelet[2905]: W1101 00:14:20.144744 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.144819 kubelet[2905]: E1101 00:14:20.144771 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.146267 kubelet[2905]: E1101 00:14:20.145258 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.146267 kubelet[2905]: W1101 00:14:20.145291 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.146267 kubelet[2905]: E1101 00:14:20.145343 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.146267 kubelet[2905]: E1101 00:14:20.145904 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.146267 kubelet[2905]: W1101 00:14:20.145928 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.146267 kubelet[2905]: E1101 00:14:20.145990 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.146801 kubelet[2905]: E1101 00:14:20.146758 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.146801 kubelet[2905]: W1101 00:14:20.146794 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.146953 kubelet[2905]: E1101 00:14:20.146849 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.149910 kubelet[2905]: E1101 00:14:20.147358 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.149910 kubelet[2905]: W1101 00:14:20.147422 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.149910 kubelet[2905]: E1101 00:14:20.147451 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.149910 kubelet[2905]: E1101 00:14:20.147996 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.149910 kubelet[2905]: W1101 00:14:20.148068 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.149910 kubelet[2905]: E1101 00:14:20.148100 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.149910 kubelet[2905]: E1101 00:14:20.148784 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.149910 kubelet[2905]: W1101 00:14:20.148809 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.149910 kubelet[2905]: E1101 00:14:20.148867 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.161428 kubelet[2905]: E1101 00:14:20.161370 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.161428 kubelet[2905]: W1101 00:14:20.161412 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.161630 kubelet[2905]: E1101 00:14:20.161445 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.161630 kubelet[2905]: I1101 00:14:20.161495 2905 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/7a8f56d2-ec05-443a-b8e9-9b53fb320745-kubelet-dir\") pod \"csi-node-driver-89sjk\" (UID: \"7a8f56d2-ec05-443a-b8e9-9b53fb320745\") " pod="calico-system/csi-node-driver-89sjk" Nov 1 00:14:20.161964 kubelet[2905]: E1101 00:14:20.161913 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.161964 kubelet[2905]: W1101 00:14:20.161949 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.162207 kubelet[2905]: E1101 00:14:20.161984 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.162207 kubelet[2905]: I1101 00:14:20.162023 2905 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/7a8f56d2-ec05-443a-b8e9-9b53fb320745-socket-dir\") pod \"csi-node-driver-89sjk\" (UID: \"7a8f56d2-ec05-443a-b8e9-9b53fb320745\") " pod="calico-system/csi-node-driver-89sjk" Nov 1 00:14:20.162537 kubelet[2905]: E1101 00:14:20.162481 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.162651 kubelet[2905]: W1101 00:14:20.162537 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.162651 kubelet[2905]: E1101 00:14:20.162575 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.162651 kubelet[2905]: I1101 00:14:20.162619 2905 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-b66ts\" (UniqueName: \"kubernetes.io/projected/7a8f56d2-ec05-443a-b8e9-9b53fb320745-kube-api-access-b66ts\") pod \"csi-node-driver-89sjk\" (UID: \"7a8f56d2-ec05-443a-b8e9-9b53fb320745\") " pod="calico-system/csi-node-driver-89sjk" Nov 1 00:14:20.163080 kubelet[2905]: E1101 00:14:20.163025 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.163080 kubelet[2905]: W1101 00:14:20.163061 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.163409 kubelet[2905]: E1101 00:14:20.163313 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.163409 kubelet[2905]: I1101 00:14:20.163373 2905 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/7a8f56d2-ec05-443a-b8e9-9b53fb320745-registration-dir\") pod \"csi-node-driver-89sjk\" (UID: \"7a8f56d2-ec05-443a-b8e9-9b53fb320745\") " pod="calico-system/csi-node-driver-89sjk" Nov 1 00:14:20.163687 kubelet[2905]: E1101 00:14:20.163644 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.163687 kubelet[2905]: W1101 00:14:20.163672 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.163860 kubelet[2905]: E1101 00:14:20.163834 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.164091 kubelet[2905]: E1101 00:14:20.164043 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.164091 kubelet[2905]: W1101 00:14:20.164073 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.164265 kubelet[2905]: E1101 00:14:20.164249 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.164705 kubelet[2905]: E1101 00:14:20.164495 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.164705 kubelet[2905]: W1101 00:14:20.164527 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.164705 kubelet[2905]: E1101 00:14:20.164695 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.167635 kubelet[2905]: E1101 00:14:20.167530 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.167635 kubelet[2905]: W1101 00:14:20.167604 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.167864 kubelet[2905]: E1101 00:14:20.167762 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.167864 kubelet[2905]: I1101 00:14:20.167840 2905 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/7a8f56d2-ec05-443a-b8e9-9b53fb320745-varrun\") pod \"csi-node-driver-89sjk\" (UID: \"7a8f56d2-ec05-443a-b8e9-9b53fb320745\") " pod="calico-system/csi-node-driver-89sjk" Nov 1 00:14:20.168650 kubelet[2905]: E1101 00:14:20.168374 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.168650 kubelet[2905]: W1101 00:14:20.168438 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.168650 kubelet[2905]: E1101 00:14:20.168547 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.169197 kubelet[2905]: E1101 00:14:20.169109 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.169197 kubelet[2905]: W1101 00:14:20.169176 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.169348 kubelet[2905]: E1101 00:14:20.169208 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.170089 kubelet[2905]: E1101 00:14:20.170008 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.170089 kubelet[2905]: W1101 00:14:20.170076 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.170378 kubelet[2905]: E1101 00:14:20.170161 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.171553 kubelet[2905]: E1101 00:14:20.170719 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.171553 kubelet[2905]: W1101 00:14:20.170782 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.171553 kubelet[2905]: E1101 00:14:20.170811 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.171553 kubelet[2905]: E1101 00:14:20.171490 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.171553 kubelet[2905]: W1101 00:14:20.171549 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.172041 kubelet[2905]: E1101 00:14:20.171579 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.172184 kubelet[2905]: E1101 00:14:20.172108 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.172184 kubelet[2905]: W1101 00:14:20.172178 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.172344 kubelet[2905]: E1101 00:14:20.172204 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.172829 kubelet[2905]: E1101 00:14:20.172604 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.172829 kubelet[2905]: W1101 00:14:20.172641 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.172829 kubelet[2905]: E1101 00:14:20.172670 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.193000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.193000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.193000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.193000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.193000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.193000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.193000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.193000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.193000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.193000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.193000 audit: BPF prog-id=118 op=LOAD Nov 1 00:14:20.194000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.194000 audit[3318]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3308 pid=3318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:20.194000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539323034633334633765313630363666346464626430323630363932 Nov 1 00:14:20.194000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.194000 audit[3318]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3308 pid=3318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:20.194000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539323034633334633765313630363666346464626430323630363932 Nov 1 00:14:20.194000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.194000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.194000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.194000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.194000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.194000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.194000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.194000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.194000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.194000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.194000 audit: BPF prog-id=119 op=LOAD Nov 1 00:14:20.194000 audit[3318]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3308 pid=3318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:20.194000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539323034633334633765313630363666346464626430323630363932 Nov 1 00:14:20.194000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.194000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.194000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.194000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.194000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.194000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.194000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.194000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.194000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.194000 audit: BPF prog-id=120 op=LOAD Nov 1 00:14:20.194000 audit[3318]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3308 pid=3318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:20.194000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539323034633334633765313630363666346464626430323630363932 Nov 1 00:14:20.194000 audit: BPF prog-id=120 op=UNLOAD Nov 1 00:14:20.194000 audit: BPF prog-id=119 op=UNLOAD Nov 1 00:14:20.195000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.195000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.195000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.195000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.195000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.195000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.195000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.195000 audit[3318]: AVC avc: denied { perfmon } for pid=3318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.195000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.195000 audit[3318]: AVC avc: denied { bpf } for pid=3318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.195000 audit: BPF prog-id=121 op=LOAD Nov 1 00:14:20.195000 audit[3318]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3308 pid=3318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:20.195000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539323034633334633765313630363666346464626430323630363932 Nov 1 00:14:20.199683 env[1824]: time="2025-11-01T00:14:20.195584043Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-rbtls,Uid:0ac9667d-b5d6-4a94-a0ed-69d6ae0ae9f1,Namespace:calico-system,Attempt:0,}" Nov 1 00:14:20.232757 env[1824]: time="2025-11-01T00:14:20.232645617Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:14:20.233080 env[1824]: time="2025-11-01T00:14:20.232994876Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:14:20.233879 env[1824]: time="2025-11-01T00:14:20.233762587Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:14:20.235272 env[1824]: time="2025-11-01T00:14:20.235092948Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/096e691154dfbf01af44667e423b168d383525cf55381ce7c6223473be55ffac pid=3381 runtime=io.containerd.runc.v2 Nov 1 00:14:20.274559 kubelet[2905]: E1101 00:14:20.269878 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.274559 kubelet[2905]: W1101 00:14:20.269927 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.274559 kubelet[2905]: E1101 00:14:20.269958 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.274559 kubelet[2905]: E1101 00:14:20.270351 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.274559 kubelet[2905]: W1101 00:14:20.270374 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.274559 kubelet[2905]: E1101 00:14:20.270399 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.274559 kubelet[2905]: E1101 00:14:20.270730 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.274559 kubelet[2905]: W1101 00:14:20.270747 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.274559 kubelet[2905]: E1101 00:14:20.270769 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.270694 systemd[1]: Started cri-containerd-096e691154dfbf01af44667e423b168d383525cf55381ce7c6223473be55ffac.scope. Nov 1 00:14:20.280175 kubelet[2905]: E1101 00:14:20.277561 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.280175 kubelet[2905]: W1101 00:14:20.277606 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.280175 kubelet[2905]: E1101 00:14:20.277650 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.280175 kubelet[2905]: E1101 00:14:20.278394 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.280175 kubelet[2905]: W1101 00:14:20.278422 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.280175 kubelet[2905]: E1101 00:14:20.278604 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.280845 kubelet[2905]: E1101 00:14:20.280800 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.280845 kubelet[2905]: W1101 00:14:20.280839 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.281075 kubelet[2905]: E1101 00:14:20.281035 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.282517 kubelet[2905]: E1101 00:14:20.281363 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.282517 kubelet[2905]: W1101 00:14:20.281384 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.282517 kubelet[2905]: E1101 00:14:20.281557 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.282923 kubelet[2905]: E1101 00:14:20.282867 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.282923 kubelet[2905]: W1101 00:14:20.282905 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.283149 kubelet[2905]: E1101 00:14:20.283074 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.283464 kubelet[2905]: E1101 00:14:20.283418 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.283464 kubelet[2905]: W1101 00:14:20.283456 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.286194 kubelet[2905]: E1101 00:14:20.283633 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.291277 kubelet[2905]: E1101 00:14:20.288928 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.291277 kubelet[2905]: W1101 00:14:20.288971 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.296192 kubelet[2905]: E1101 00:14:20.293815 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.299033 kubelet[2905]: E1101 00:14:20.298806 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.299033 kubelet[2905]: W1101 00:14:20.298876 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.307377 kubelet[2905]: E1101 00:14:20.307330 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.307377 kubelet[2905]: W1101 00:14:20.307370 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.307840 kubelet[2905]: E1101 00:14:20.307808 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.307926 kubelet[2905]: W1101 00:14:20.307838 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.309214 kubelet[2905]: E1101 00:14:20.308204 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.309214 kubelet[2905]: W1101 00:14:20.308235 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.313173 kubelet[2905]: E1101 00:14:20.313043 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.313173 kubelet[2905]: E1101 00:14:20.313105 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.313173 kubelet[2905]: E1101 00:14:20.313162 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.313173 kubelet[2905]: E1101 00:14:20.313187 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.317599 kubelet[2905]: E1101 00:14:20.314700 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.317599 kubelet[2905]: W1101 00:14:20.314735 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.317599 kubelet[2905]: E1101 00:14:20.314787 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.322948 env[1824]: time="2025-11-01T00:14:20.322049972Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-78555757fd-zl6sp,Uid:cb8b541c-40c7-42ec-b24c-b61228a88f85,Namespace:calico-system,Attempt:0,} returns sandbox id \"e9204c34c7e16066f4ddbd0260692fc06100cfcdbd60d8c90ad41bb3da519b7a\"" Nov 1 00:14:20.327443 env[1824]: time="2025-11-01T00:14:20.326982567Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.4\"" Nov 1 00:14:20.329931 kubelet[2905]: E1101 00:14:20.329872 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.329931 kubelet[2905]: W1101 00:14:20.329915 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.330352 kubelet[2905]: E1101 00:14:20.330197 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.331689 kubelet[2905]: E1101 00:14:20.331300 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.331689 kubelet[2905]: W1101 00:14:20.331331 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.331689 kubelet[2905]: E1101 00:14:20.331516 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.332176 kubelet[2905]: E1101 00:14:20.332139 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.332466 kubelet[2905]: W1101 00:14:20.332271 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.332622 kubelet[2905]: E1101 00:14:20.332572 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.332862 kubelet[2905]: E1101 00:14:20.332841 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.332983 kubelet[2905]: W1101 00:14:20.332957 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.334179 kubelet[2905]: E1101 00:14:20.333582 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.334492 kubelet[2905]: E1101 00:14:20.334463 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.334614 kubelet[2905]: W1101 00:14:20.334588 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.334961 kubelet[2905]: E1101 00:14:20.334934 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.335271 kubelet[2905]: E1101 00:14:20.335250 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.335395 kubelet[2905]: W1101 00:14:20.335371 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.335583 kubelet[2905]: E1101 00:14:20.335546 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.336280 kubelet[2905]: E1101 00:14:20.336251 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.336432 kubelet[2905]: W1101 00:14:20.336406 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.336601 kubelet[2905]: E1101 00:14:20.336551 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.337410 kubelet[2905]: E1101 00:14:20.337381 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.337564 kubelet[2905]: W1101 00:14:20.337537 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.337766 kubelet[2905]: E1101 00:14:20.337727 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.339472 kubelet[2905]: E1101 00:14:20.339438 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.339817 kubelet[2905]: W1101 00:14:20.339770 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.341194 kubelet[2905]: E1101 00:14:20.341000 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.342000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.342000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.342000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.342000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.342000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.342000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.342000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.342000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.342000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.343000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.343000 audit: BPF prog-id=122 op=LOAD Nov 1 00:14:20.343000 audit[3389]: AVC avc: denied { bpf } for pid=3389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.343000 audit[3389]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3381 pid=3389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:20.343000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039366536393131353464666266303161663434363637653432336231 Nov 1 00:14:20.343000 audit[3389]: AVC avc: denied { perfmon } for pid=3389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.343000 audit[3389]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3381 pid=3389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:20.343000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039366536393131353464666266303161663434363637653432336231 Nov 1 00:14:20.343000 audit[3389]: AVC avc: denied { bpf } for pid=3389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.343000 audit[3389]: AVC avc: denied { bpf } for pid=3389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.343000 audit[3389]: AVC avc: denied { bpf } for pid=3389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.343000 audit[3389]: AVC avc: denied { perfmon } for pid=3389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.343000 audit[3389]: AVC avc: denied { perfmon } for pid=3389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.343000 audit[3389]: AVC avc: denied { perfmon } for pid=3389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.343000 audit[3389]: AVC avc: denied { perfmon } for pid=3389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.343000 audit[3389]: AVC avc: denied { perfmon } for pid=3389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.343000 audit[3389]: AVC avc: denied { bpf } for pid=3389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.343000 audit[3389]: AVC avc: denied { bpf } for pid=3389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.343000 audit: BPF prog-id=123 op=LOAD Nov 1 00:14:20.343000 audit[3389]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3381 pid=3389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:20.343000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039366536393131353464666266303161663434363637653432336231 Nov 1 00:14:20.343000 audit[3389]: AVC avc: denied { bpf } for pid=3389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.343000 audit[3389]: AVC avc: denied { bpf } for pid=3389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.343000 audit[3389]: AVC avc: denied { perfmon } for pid=3389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.343000 audit[3389]: AVC avc: denied { perfmon } for pid=3389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.343000 audit[3389]: AVC avc: denied { perfmon } for pid=3389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.343000 audit[3389]: AVC avc: denied { perfmon } for pid=3389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.343000 audit[3389]: AVC avc: denied { perfmon } for pid=3389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.343000 audit[3389]: AVC avc: denied { bpf } for pid=3389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.343000 audit[3389]: AVC avc: denied { bpf } for pid=3389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.343000 audit: BPF prog-id=124 op=LOAD Nov 1 00:14:20.343000 audit[3389]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3381 pid=3389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:20.343000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039366536393131353464666266303161663434363637653432336231 Nov 1 00:14:20.345000 audit: BPF prog-id=124 op=UNLOAD Nov 1 00:14:20.345000 audit: BPF prog-id=123 op=UNLOAD Nov 1 00:14:20.345000 audit[3389]: AVC avc: denied { bpf } for pid=3389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.345000 audit[3389]: AVC avc: denied { bpf } for pid=3389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.345000 audit[3389]: AVC avc: denied { bpf } for pid=3389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.345000 audit[3389]: AVC avc: denied { perfmon } for pid=3389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.345000 audit[3389]: AVC avc: denied { perfmon } for pid=3389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.345000 audit[3389]: AVC avc: denied { perfmon } for pid=3389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.345000 audit[3389]: AVC avc: denied { perfmon } for pid=3389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.345000 audit[3389]: AVC avc: denied { perfmon } for pid=3389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.345000 audit[3389]: AVC avc: denied { bpf } for pid=3389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.345000 audit[3389]: AVC avc: denied { bpf } for pid=3389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:20.345000 audit: BPF prog-id=125 op=LOAD Nov 1 00:14:20.345000 audit[3389]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3381 pid=3389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:20.345000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039366536393131353464666266303161663434363637653432336231 Nov 1 00:14:20.351265 kubelet[2905]: W1101 00:14:20.349055 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.351265 kubelet[2905]: E1101 00:14:20.349110 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.351265 kubelet[2905]: E1101 00:14:20.341302 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.376552 kubelet[2905]: E1101 00:14:20.376498 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:20.376552 kubelet[2905]: W1101 00:14:20.376541 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:20.376755 kubelet[2905]: E1101 00:14:20.376575 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:20.388883 env[1824]: time="2025-11-01T00:14:20.388718672Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-rbtls,Uid:0ac9667d-b5d6-4a94-a0ed-69d6ae0ae9f1,Namespace:calico-system,Attempt:0,} returns sandbox id \"096e691154dfbf01af44667e423b168d383525cf55381ce7c6223473be55ffac\"" Nov 1 00:14:20.773000 audit[3448]: NETFILTER_CFG table=filter:103 family=2 entries=22 op=nft_register_rule pid=3448 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:14:20.777326 kernel: kauditd_printk_skb: 134 callbacks suppressed Nov 1 00:14:20.777411 kernel: audit: type=1325 audit(1761956060.773:981): table=filter:103 family=2 entries=22 op=nft_register_rule pid=3448 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:14:20.773000 audit[3448]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=ffffd06b6eb0 a2=0 a3=1 items=0 ppid=3030 pid=3448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:20.799199 kernel: audit: type=1300 audit(1761956060.773:981): arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=ffffd06b6eb0 a2=0 a3=1 items=0 ppid=3030 pid=3448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:20.773000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:14:20.805336 kernel: audit: type=1327 audit(1761956060.773:981): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:14:20.805395 kernel: audit: type=1325 audit(1761956060.785:982): table=nat:104 family=2 entries=12 op=nft_register_rule pid=3448 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:14:20.785000 audit[3448]: NETFILTER_CFG table=nat:104 family=2 entries=12 op=nft_register_rule pid=3448 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:14:20.785000 audit[3448]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffd06b6eb0 a2=0 a3=1 items=0 ppid=3030 pid=3448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:20.823579 kernel: audit: type=1300 audit(1761956060.785:982): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffd06b6eb0 a2=0 a3=1 items=0 ppid=3030 pid=3448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:20.785000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:14:20.830023 kernel: audit: type=1327 audit(1761956060.785:982): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:14:20.875806 systemd[1]: run-containerd-runc-k8s.io-e9204c34c7e16066f4ddbd0260692fc06100cfcdbd60d8c90ad41bb3da519b7a-runc.bsBns4.mount: Deactivated successfully. Nov 1 00:14:21.536532 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2341370653.mount: Deactivated successfully. Nov 1 00:14:21.960738 kubelet[2905]: E1101 00:14:21.959702 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-89sjk" podUID="7a8f56d2-ec05-443a-b8e9-9b53fb320745" Nov 1 00:14:22.737562 env[1824]: time="2025-11-01T00:14:22.737479903Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:14:22.747156 env[1824]: time="2025-11-01T00:14:22.743401874Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5fe38d12a54098df5aaf5ec7228dc2f976f60cb4f434d7256f03126b004fdc5b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:14:22.762076 env[1824]: time="2025-11-01T00:14:22.762002330Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:14:22.763572 env[1824]: time="2025-11-01T00:14:22.763513787Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:6f437220b5b3c627fb4a0fc8dc323363101f3c22a8f337612c2a1ddfb73b810c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:14:22.764748 env[1824]: time="2025-11-01T00:14:22.764700778Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.4\" returns image reference \"sha256:5fe38d12a54098df5aaf5ec7228dc2f976f60cb4f434d7256f03126b004fdc5b\"" Nov 1 00:14:22.769842 env[1824]: time="2025-11-01T00:14:22.769298018Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4\"" Nov 1 00:14:22.800727 env[1824]: time="2025-11-01T00:14:22.800616679Z" level=info msg="CreateContainer within sandbox \"e9204c34c7e16066f4ddbd0260692fc06100cfcdbd60d8c90ad41bb3da519b7a\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Nov 1 00:14:22.829910 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2509760302.mount: Deactivated successfully. Nov 1 00:14:22.844075 env[1824]: time="2025-11-01T00:14:22.843997726Z" level=info msg="CreateContainer within sandbox \"e9204c34c7e16066f4ddbd0260692fc06100cfcdbd60d8c90ad41bb3da519b7a\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"69e8f7fd1e5c3076bf58067ff0be2be113fe035b138aedf50c08771b5ee11709\"" Nov 1 00:14:22.845558 env[1824]: time="2025-11-01T00:14:22.845484510Z" level=info msg="StartContainer for \"69e8f7fd1e5c3076bf58067ff0be2be113fe035b138aedf50c08771b5ee11709\"" Nov 1 00:14:22.883627 systemd[1]: Started cri-containerd-69e8f7fd1e5c3076bf58067ff0be2be113fe035b138aedf50c08771b5ee11709.scope. Nov 1 00:14:22.927000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:22.927000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:22.944686 kernel: audit: type=1400 audit(1761956062.927:983): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:22.944811 kernel: audit: type=1400 audit(1761956062.927:984): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:22.945170 kernel: audit: type=1400 audit(1761956062.927:985): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:22.927000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:22.927000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:22.961028 kernel: audit: type=1400 audit(1761956062.927:986): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:22.927000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:22.927000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:22.927000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:22.927000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:22.927000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:22.936000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:22.936000 audit: BPF prog-id=126 op=LOAD Nov 1 00:14:22.944000 audit[3459]: AVC avc: denied { bpf } for pid=3459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:22.944000 audit[3459]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3308 pid=3459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:22.944000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639653866376664316535633330373662663538303637666630626532 Nov 1 00:14:22.944000 audit[3459]: AVC avc: denied { perfmon } for pid=3459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:22.944000 audit[3459]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3308 pid=3459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:22.944000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639653866376664316535633330373662663538303637666630626532 Nov 1 00:14:22.944000 audit[3459]: AVC avc: denied { bpf } for pid=3459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:22.944000 audit[3459]: AVC avc: denied { bpf } for pid=3459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:22.944000 audit[3459]: AVC avc: denied { bpf } for pid=3459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:22.944000 audit[3459]: AVC avc: denied { perfmon } for pid=3459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:22.944000 audit[3459]: AVC avc: denied { perfmon } for pid=3459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:22.944000 audit[3459]: AVC avc: denied { perfmon } for pid=3459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:22.944000 audit[3459]: AVC avc: denied { perfmon } for pid=3459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:22.944000 audit[3459]: AVC avc: denied { perfmon } for pid=3459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:22.944000 audit[3459]: AVC avc: denied { bpf } for pid=3459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:22.944000 audit[3459]: AVC avc: denied { bpf } for pid=3459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:22.944000 audit: BPF prog-id=127 op=LOAD Nov 1 00:14:22.944000 audit[3459]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3308 pid=3459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:22.944000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639653866376664316535633330373662663538303637666630626532 Nov 1 00:14:22.952000 audit[3459]: AVC avc: denied { bpf } for pid=3459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:22.952000 audit[3459]: AVC avc: denied { bpf } for pid=3459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:22.952000 audit[3459]: AVC avc: denied { perfmon } for pid=3459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:22.952000 audit[3459]: AVC avc: denied { perfmon } for pid=3459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:22.952000 audit[3459]: AVC avc: denied { perfmon } for pid=3459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:22.952000 audit[3459]: AVC avc: denied { perfmon } for pid=3459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:22.952000 audit[3459]: AVC avc: denied { perfmon } for pid=3459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:22.952000 audit[3459]: AVC avc: denied { bpf } for pid=3459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:22.952000 audit[3459]: AVC avc: denied { bpf } for pid=3459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:22.952000 audit: BPF prog-id=128 op=LOAD Nov 1 00:14:22.952000 audit[3459]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3308 pid=3459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:22.952000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639653866376664316535633330373662663538303637666630626532 Nov 1 00:14:22.966000 audit: BPF prog-id=128 op=UNLOAD Nov 1 00:14:22.966000 audit: BPF prog-id=127 op=UNLOAD Nov 1 00:14:22.966000 audit[3459]: AVC avc: denied { bpf } for pid=3459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:22.966000 audit[3459]: AVC avc: denied { bpf } for pid=3459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:22.966000 audit[3459]: AVC avc: denied { bpf } for pid=3459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:22.966000 audit[3459]: AVC avc: denied { perfmon } for pid=3459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:22.966000 audit[3459]: AVC avc: denied { perfmon } for pid=3459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:22.966000 audit[3459]: AVC avc: denied { perfmon } for pid=3459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:22.966000 audit[3459]: AVC avc: denied { perfmon } for pid=3459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:22.966000 audit[3459]: AVC avc: denied { perfmon } for pid=3459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:22.966000 audit[3459]: AVC avc: denied { bpf } for pid=3459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:22.966000 audit[3459]: AVC avc: denied { bpf } for pid=3459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:22.966000 audit: BPF prog-id=129 op=LOAD Nov 1 00:14:22.966000 audit[3459]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3308 pid=3459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:22.966000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639653866376664316535633330373662663538303637666630626532 Nov 1 00:14:23.017307 env[1824]: time="2025-11-01T00:14:23.017166371Z" level=info msg="StartContainer for \"69e8f7fd1e5c3076bf58067ff0be2be113fe035b138aedf50c08771b5ee11709\" returns successfully" Nov 1 00:14:23.150987 kubelet[2905]: I1101 00:14:23.150190 2905 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-78555757fd-zl6sp" podStartSLOduration=1.70921184 podStartE2EDuration="4.150150958s" podCreationTimestamp="2025-11-01 00:14:19 +0000 UTC" firstStartedPulling="2025-11-01 00:14:20.326377425 +0000 UTC m=+33.663456947" lastFinishedPulling="2025-11-01 00:14:22.767316447 +0000 UTC m=+36.104396065" observedRunningTime="2025-11-01 00:14:23.148603057 +0000 UTC m=+36.485682615" watchObservedRunningTime="2025-11-01 00:14:23.150150958 +0000 UTC m=+36.487230516" Nov 1 00:14:23.181681 kubelet[2905]: E1101 00:14:23.181398 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:23.181681 kubelet[2905]: W1101 00:14:23.181432 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:23.181681 kubelet[2905]: E1101 00:14:23.181468 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:23.182383 kubelet[2905]: E1101 00:14:23.182062 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:23.182383 kubelet[2905]: W1101 00:14:23.182091 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:23.182383 kubelet[2905]: E1101 00:14:23.182206 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:23.182735 kubelet[2905]: E1101 00:14:23.182707 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:23.183134 kubelet[2905]: W1101 00:14:23.182868 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:23.183134 kubelet[2905]: E1101 00:14:23.182908 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:23.183430 kubelet[2905]: E1101 00:14:23.183405 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:23.183624 kubelet[2905]: W1101 00:14:23.183526 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:23.183755 kubelet[2905]: E1101 00:14:23.183728 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:23.184981 kubelet[2905]: E1101 00:14:23.184941 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:23.185294 kubelet[2905]: W1101 00:14:23.185242 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:23.185442 kubelet[2905]: E1101 00:14:23.185415 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:23.186059 kubelet[2905]: E1101 00:14:23.186029 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:23.186278 kubelet[2905]: W1101 00:14:23.186249 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:23.186421 kubelet[2905]: E1101 00:14:23.186394 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:23.186946 kubelet[2905]: E1101 00:14:23.186918 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:23.187098 kubelet[2905]: W1101 00:14:23.187071 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:23.187248 kubelet[2905]: E1101 00:14:23.187223 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:23.187997 kubelet[2905]: E1101 00:14:23.187965 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:23.188203 kubelet[2905]: W1101 00:14:23.188175 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:23.188336 kubelet[2905]: E1101 00:14:23.188309 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:23.188937 kubelet[2905]: E1101 00:14:23.188905 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:23.190345 kubelet[2905]: W1101 00:14:23.190306 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:23.190570 kubelet[2905]: E1101 00:14:23.190542 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:23.192503 kubelet[2905]: E1101 00:14:23.192472 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:23.192858 kubelet[2905]: W1101 00:14:23.192827 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:23.193041 kubelet[2905]: E1101 00:14:23.193015 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:23.193728 kubelet[2905]: E1101 00:14:23.193698 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:23.193901 kubelet[2905]: W1101 00:14:23.193875 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:23.194026 kubelet[2905]: E1101 00:14:23.194000 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:23.194608 kubelet[2905]: E1101 00:14:23.194579 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:23.194801 kubelet[2905]: W1101 00:14:23.194772 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:23.194943 kubelet[2905]: E1101 00:14:23.194917 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:23.195697 kubelet[2905]: E1101 00:14:23.195664 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:23.195880 kubelet[2905]: W1101 00:14:23.195850 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:23.196049 kubelet[2905]: E1101 00:14:23.196022 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:23.196657 kubelet[2905]: E1101 00:14:23.196627 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:23.196851 kubelet[2905]: W1101 00:14:23.196824 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:23.196980 kubelet[2905]: E1101 00:14:23.196955 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:23.197578 kubelet[2905]: E1101 00:14:23.197548 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:23.197755 kubelet[2905]: W1101 00:14:23.197725 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:23.197884 kubelet[2905]: E1101 00:14:23.197858 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:23.203104 kubelet[2905]: E1101 00:14:23.203060 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:23.203383 kubelet[2905]: W1101 00:14:23.203348 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:23.203525 kubelet[2905]: E1101 00:14:23.203498 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:23.206085 kubelet[2905]: E1101 00:14:23.206034 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:23.206350 kubelet[2905]: W1101 00:14:23.206317 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:23.206511 kubelet[2905]: E1101 00:14:23.206485 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:23.207234 kubelet[2905]: E1101 00:14:23.207201 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:23.207456 kubelet[2905]: W1101 00:14:23.207425 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:23.207598 kubelet[2905]: E1101 00:14:23.207572 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:23.209076 kubelet[2905]: E1101 00:14:23.209038 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:23.209324 kubelet[2905]: W1101 00:14:23.209292 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:23.209478 kubelet[2905]: E1101 00:14:23.209452 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:23.210174 kubelet[2905]: E1101 00:14:23.210114 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:23.210540 kubelet[2905]: W1101 00:14:23.210511 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:23.210675 kubelet[2905]: E1101 00:14:23.210650 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:23.211900 kubelet[2905]: E1101 00:14:23.211862 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:23.212103 kubelet[2905]: W1101 00:14:23.212073 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:23.212313 kubelet[2905]: E1101 00:14:23.212286 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:23.214391 kubelet[2905]: E1101 00:14:23.214351 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:23.214635 kubelet[2905]: W1101 00:14:23.214604 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:23.214793 kubelet[2905]: E1101 00:14:23.214765 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:23.215411 kubelet[2905]: E1101 00:14:23.215378 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:23.215597 kubelet[2905]: W1101 00:14:23.215569 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:23.215735 kubelet[2905]: E1101 00:14:23.215709 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:23.216308 kubelet[2905]: E1101 00:14:23.216278 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:23.216530 kubelet[2905]: W1101 00:14:23.216498 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:23.216708 kubelet[2905]: E1101 00:14:23.216681 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:23.218717 kubelet[2905]: E1101 00:14:23.218678 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:23.218922 kubelet[2905]: W1101 00:14:23.218893 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:23.219085 kubelet[2905]: E1101 00:14:23.219059 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:23.219683 kubelet[2905]: E1101 00:14:23.219653 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:23.219876 kubelet[2905]: W1101 00:14:23.219848 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:23.220013 kubelet[2905]: E1101 00:14:23.219988 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:23.223103 kubelet[2905]: E1101 00:14:23.223063 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:23.223347 kubelet[2905]: W1101 00:14:23.223316 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:23.223489 kubelet[2905]: E1101 00:14:23.223463 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:23.224313 kubelet[2905]: E1101 00:14:23.224280 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:23.224529 kubelet[2905]: W1101 00:14:23.224500 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:23.224668 kubelet[2905]: E1101 00:14:23.224642 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:23.227725 kubelet[2905]: E1101 00:14:23.227686 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:23.227947 kubelet[2905]: W1101 00:14:23.227917 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:23.228099 kubelet[2905]: E1101 00:14:23.228072 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:23.229191 kubelet[2905]: E1101 00:14:23.229094 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:23.229485 kubelet[2905]: W1101 00:14:23.229454 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:23.229650 kubelet[2905]: E1101 00:14:23.229623 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:23.232659 kubelet[2905]: E1101 00:14:23.232602 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:23.232886 kubelet[2905]: W1101 00:14:23.232852 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:23.233069 kubelet[2905]: E1101 00:14:23.233042 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:23.234025 kubelet[2905]: E1101 00:14:23.233991 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:23.234321 kubelet[2905]: W1101 00:14:23.234289 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:23.234466 kubelet[2905]: E1101 00:14:23.234440 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:23.235011 kubelet[2905]: E1101 00:14:23.234984 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:23.235200 kubelet[2905]: W1101 00:14:23.235172 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:23.235331 kubelet[2905]: E1101 00:14:23.235305 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:23.960310 kubelet[2905]: E1101 00:14:23.959805 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-89sjk" podUID="7a8f56d2-ec05-443a-b8e9-9b53fb320745" Nov 1 00:14:23.963682 env[1824]: time="2025-11-01T00:14:23.963599286Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:14:23.969635 env[1824]: time="2025-11-01T00:14:23.969557268Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:90ff755393144dc5a3c05f95ffe1a3ecd2f89b98ecf36d9e4721471b80af4640,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:14:23.974361 env[1824]: time="2025-11-01T00:14:23.974289114Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:14:23.978883 env[1824]: time="2025-11-01T00:14:23.978756725Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:50bdfe370b7308fa9957ed1eaccd094aa4f27f9a4f1dfcfef2f8a7696a1551e1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:14:23.980071 env[1824]: time="2025-11-01T00:14:23.980009921Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4\" returns image reference \"sha256:90ff755393144dc5a3c05f95ffe1a3ecd2f89b98ecf36d9e4721471b80af4640\"" Nov 1 00:14:23.989022 env[1824]: time="2025-11-01T00:14:23.988959687Z" level=info msg="CreateContainer within sandbox \"096e691154dfbf01af44667e423b168d383525cf55381ce7c6223473be55ffac\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Nov 1 00:14:24.018196 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2097143900.mount: Deactivated successfully. Nov 1 00:14:24.031430 env[1824]: time="2025-11-01T00:14:24.031368423Z" level=info msg="CreateContainer within sandbox \"096e691154dfbf01af44667e423b168d383525cf55381ce7c6223473be55ffac\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"8d725c2df8a1572911ac00306c30ff03b03a40690bedf26f7051a3a249df3ac0\"" Nov 1 00:14:24.032400 env[1824]: time="2025-11-01T00:14:24.032346331Z" level=info msg="StartContainer for \"8d725c2df8a1572911ac00306c30ff03b03a40690bedf26f7051a3a249df3ac0\"" Nov 1 00:14:24.083019 systemd[1]: Started cri-containerd-8d725c2df8a1572911ac00306c30ff03b03a40690bedf26f7051a3a249df3ac0.scope. Nov 1 00:14:24.131000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:24.131000 audit[3534]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=3381 pid=3534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:24.131000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864373235633264663861313537323931316163303033303663333066 Nov 1 00:14:24.132000 audit[3534]: AVC avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:24.132000 audit[3534]: AVC avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:24.132000 audit[3534]: AVC avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:24.132000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:24.132000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:24.132000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:24.132000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:24.132000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:24.132000 audit[3534]: AVC avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:24.132000 audit[3534]: AVC avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:24.132000 audit: BPF prog-id=130 op=LOAD Nov 1 00:14:24.132000 audit[3534]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=3381 pid=3534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:24.132000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864373235633264663861313537323931316163303033303663333066 Nov 1 00:14:24.133000 audit[3534]: AVC avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:24.133000 audit[3534]: AVC avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:24.133000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:24.133000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:24.133000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:24.133000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:24.133000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:24.133000 audit[3534]: AVC avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:24.133000 audit[3534]: AVC avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:24.133000 audit: BPF prog-id=131 op=LOAD Nov 1 00:14:24.133000 audit[3534]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=3381 pid=3534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:24.133000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864373235633264663861313537323931316163303033303663333066 Nov 1 00:14:24.135000 audit: BPF prog-id=131 op=UNLOAD Nov 1 00:14:24.135000 audit: BPF prog-id=130 op=UNLOAD Nov 1 00:14:24.135000 audit[3534]: AVC avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:24.135000 audit[3534]: AVC avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:24.135000 audit[3534]: AVC avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:24.135000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:24.135000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:24.135000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:24.135000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:24.135000 audit[3534]: AVC avc: denied { perfmon } for pid=3534 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:24.135000 audit[3534]: AVC avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:24.135000 audit[3534]: AVC avc: denied { bpf } for pid=3534 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:24.135000 audit: BPF prog-id=132 op=LOAD Nov 1 00:14:24.135000 audit[3534]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=3381 pid=3534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:24.135000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864373235633264663861313537323931316163303033303663333066 Nov 1 00:14:24.187332 env[1824]: time="2025-11-01T00:14:24.187269766Z" level=info msg="StartContainer for \"8d725c2df8a1572911ac00306c30ff03b03a40690bedf26f7051a3a249df3ac0\" returns successfully" Nov 1 00:14:24.205893 kubelet[2905]: E1101 00:14:24.205805 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:24.205893 kubelet[2905]: W1101 00:14:24.205870 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:24.206539 kubelet[2905]: E1101 00:14:24.205935 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:24.206539 kubelet[2905]: E1101 00:14:24.206435 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:24.206539 kubelet[2905]: W1101 00:14:24.206485 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:24.206539 kubelet[2905]: E1101 00:14:24.206511 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:24.206994 kubelet[2905]: E1101 00:14:24.206956 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:24.206994 kubelet[2905]: W1101 00:14:24.206987 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:24.207162 kubelet[2905]: E1101 00:14:24.207018 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:24.207997 kubelet[2905]: E1101 00:14:24.207940 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:24.207997 kubelet[2905]: W1101 00:14:24.207982 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:24.208213 kubelet[2905]: E1101 00:14:24.208039 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:24.208646 kubelet[2905]: E1101 00:14:24.208605 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:24.208646 kubelet[2905]: W1101 00:14:24.208639 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:24.208789 kubelet[2905]: E1101 00:14:24.208666 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:24.209332 kubelet[2905]: E1101 00:14:24.209295 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:24.209332 kubelet[2905]: W1101 00:14:24.209329 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:24.209498 kubelet[2905]: E1101 00:14:24.209359 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:24.212766 kubelet[2905]: E1101 00:14:24.212397 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:24.212766 kubelet[2905]: W1101 00:14:24.212433 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:24.212766 kubelet[2905]: E1101 00:14:24.212466 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:24.216028 kubelet[2905]: E1101 00:14:24.215497 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:24.216028 kubelet[2905]: W1101 00:14:24.215532 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:24.216028 kubelet[2905]: E1101 00:14:24.215564 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:24.216682 kubelet[2905]: E1101 00:14:24.216420 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:24.216682 kubelet[2905]: W1101 00:14:24.216454 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:24.216682 kubelet[2905]: E1101 00:14:24.216485 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:24.217497 kubelet[2905]: E1101 00:14:24.217103 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:24.217497 kubelet[2905]: W1101 00:14:24.217151 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:24.217497 kubelet[2905]: E1101 00:14:24.217180 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:24.218048 kubelet[2905]: E1101 00:14:24.217808 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:24.218048 kubelet[2905]: W1101 00:14:24.217835 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:24.218048 kubelet[2905]: E1101 00:14:24.217863 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:24.218917 kubelet[2905]: E1101 00:14:24.218508 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:24.218917 kubelet[2905]: W1101 00:14:24.218543 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:24.218917 kubelet[2905]: E1101 00:14:24.218570 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:24.219491 kubelet[2905]: E1101 00:14:24.219278 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:24.219491 kubelet[2905]: W1101 00:14:24.219304 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:24.219491 kubelet[2905]: E1101 00:14:24.219328 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:24.220041 kubelet[2905]: E1101 00:14:24.219828 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:24.220041 kubelet[2905]: W1101 00:14:24.219853 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:24.220041 kubelet[2905]: E1101 00:14:24.219882 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:24.220415 kubelet[2905]: E1101 00:14:24.220393 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:24.220531 kubelet[2905]: W1101 00:14:24.220506 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:24.220673 kubelet[2905]: E1101 00:14:24.220649 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:24.225684 kubelet[2905]: E1101 00:14:24.225644 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:24.225895 kubelet[2905]: W1101 00:14:24.225864 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:24.226047 kubelet[2905]: E1101 00:14:24.226015 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:24.226733 kubelet[2905]: E1101 00:14:24.226703 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:24.226907 kubelet[2905]: W1101 00:14:24.226880 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:24.227092 kubelet[2905]: E1101 00:14:24.227066 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:24.227512 kubelet[2905]: E1101 00:14:24.227474 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:24.227512 kubelet[2905]: W1101 00:14:24.227506 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:24.227661 kubelet[2905]: E1101 00:14:24.227540 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:24.228397 kubelet[2905]: E1101 00:14:24.228351 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:24.228397 kubelet[2905]: W1101 00:14:24.228387 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:24.226000 audit[3565]: NETFILTER_CFG table=filter:105 family=2 entries=21 op=nft_register_rule pid=3565 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:14:24.226000 audit[3565]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffdcbcbda0 a2=0 a3=1 items=0 ppid=3030 pid=3565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:24.226000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:14:24.228868 kubelet[2905]: E1101 00:14:24.228432 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:24.228868 kubelet[2905]: E1101 00:14:24.228784 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:24.228868 kubelet[2905]: W1101 00:14:24.228802 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:24.228868 kubelet[2905]: E1101 00:14:24.228830 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:24.229248 kubelet[2905]: E1101 00:14:24.229201 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:24.229248 kubelet[2905]: W1101 00:14:24.229221 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:24.229248 kubelet[2905]: E1101 00:14:24.229243 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:24.230349 kubelet[2905]: E1101 00:14:24.230311 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:24.230349 kubelet[2905]: W1101 00:14:24.230345 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:24.230594 kubelet[2905]: E1101 00:14:24.230527 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:24.230800 kubelet[2905]: E1101 00:14:24.230774 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:24.230874 kubelet[2905]: W1101 00:14:24.230800 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:24.231003 kubelet[2905]: E1101 00:14:24.230969 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:24.232372 kubelet[2905]: E1101 00:14:24.232338 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:24.232582 kubelet[2905]: W1101 00:14:24.232552 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:24.232721 kubelet[2905]: E1101 00:14:24.232695 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:24.233445 kubelet[2905]: E1101 00:14:24.233415 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:24.233615 kubelet[2905]: W1101 00:14:24.233586 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:24.233756 kubelet[2905]: E1101 00:14:24.233730 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:24.234000 audit[3565]: NETFILTER_CFG table=nat:106 family=2 entries=19 op=nft_register_chain pid=3565 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:14:24.235806 kubelet[2905]: E1101 00:14:24.234223 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:24.235806 kubelet[2905]: W1101 00:14:24.234258 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:24.235806 kubelet[2905]: E1101 00:14:24.234298 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:24.234000 audit[3565]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=ffffdcbcbda0 a2=0 a3=1 items=0 ppid=3030 pid=3565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:24.234000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:14:24.236872 kubelet[2905]: E1101 00:14:24.236627 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:24.236872 kubelet[2905]: W1101 00:14:24.236656 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:24.236872 kubelet[2905]: E1101 00:14:24.236811 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:24.237634 kubelet[2905]: E1101 00:14:24.237590 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:24.237634 kubelet[2905]: W1101 00:14:24.237625 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:24.238043 kubelet[2905]: E1101 00:14:24.238006 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:24.238043 kubelet[2905]: W1101 00:14:24.238037 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:24.238300 kubelet[2905]: E1101 00:14:24.238064 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:24.240509 kubelet[2905]: E1101 00:14:24.240458 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:24.240509 kubelet[2905]: W1101 00:14:24.240497 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:24.240715 kubelet[2905]: E1101 00:14:24.240547 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:24.240715 kubelet[2905]: E1101 00:14:24.240610 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:24.241023 kubelet[2905]: E1101 00:14:24.240965 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:24.241023 kubelet[2905]: W1101 00:14:24.241014 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:24.241222 kubelet[2905]: E1101 00:14:24.241038 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:24.241483 kubelet[2905]: E1101 00:14:24.241435 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:24.241483 kubelet[2905]: W1101 00:14:24.241466 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:24.241678 kubelet[2905]: E1101 00:14:24.241490 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:24.243365 kubelet[2905]: E1101 00:14:24.243321 2905 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:14:24.243365 kubelet[2905]: W1101 00:14:24.243361 2905 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:14:24.243561 kubelet[2905]: E1101 00:14:24.243400 2905 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:14:24.260332 systemd[1]: cri-containerd-8d725c2df8a1572911ac00306c30ff03b03a40690bedf26f7051a3a249df3ac0.scope: Deactivated successfully. Nov 1 00:14:24.264000 audit: BPF prog-id=132 op=UNLOAD Nov 1 00:14:24.658073 env[1824]: time="2025-11-01T00:14:24.657724407Z" level=info msg="shim disconnected" id=8d725c2df8a1572911ac00306c30ff03b03a40690bedf26f7051a3a249df3ac0 Nov 1 00:14:24.658073 env[1824]: time="2025-11-01T00:14:24.657788213Z" level=warning msg="cleaning up after shim disconnected" id=8d725c2df8a1572911ac00306c30ff03b03a40690bedf26f7051a3a249df3ac0 namespace=k8s.io Nov 1 00:14:24.658073 env[1824]: time="2025-11-01T00:14:24.657808722Z" level=info msg="cleaning up dead shim" Nov 1 00:14:24.672056 env[1824]: time="2025-11-01T00:14:24.671997955Z" level=warning msg="cleanup warnings time=\"2025-11-01T00:14:24Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3607 runtime=io.containerd.runc.v2\n" Nov 1 00:14:24.779391 systemd[1]: run-containerd-runc-k8s.io-8d725c2df8a1572911ac00306c30ff03b03a40690bedf26f7051a3a249df3ac0-runc.WNFxaY.mount: Deactivated successfully. Nov 1 00:14:24.779860 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-8d725c2df8a1572911ac00306c30ff03b03a40690bedf26f7051a3a249df3ac0-rootfs.mount: Deactivated successfully. Nov 1 00:14:25.148601 env[1824]: time="2025-11-01T00:14:25.148508072Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.4\"" Nov 1 00:14:25.960304 kubelet[2905]: E1101 00:14:25.960226 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-89sjk" podUID="7a8f56d2-ec05-443a-b8e9-9b53fb320745" Nov 1 00:14:27.962113 kubelet[2905]: E1101 00:14:27.960185 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-89sjk" podUID="7a8f56d2-ec05-443a-b8e9-9b53fb320745" Nov 1 00:14:28.853710 env[1824]: time="2025-11-01T00:14:28.853624541Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:14:28.858230 env[1824]: time="2025-11-01T00:14:28.858165537Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e60d442b6496497355efdf45eaa3ea72f5a2b28a5187aeab33442933f3c735d2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:14:28.861864 env[1824]: time="2025-11-01T00:14:28.861800905Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:14:28.865528 env[1824]: time="2025-11-01T00:14:28.865460418Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:273501a9cfbd848ade2b6a8452dfafdd3adb4f9bf9aec45c398a5d19b8026627,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:14:28.866816 env[1824]: time="2025-11-01T00:14:28.866768658Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.4\" returns image reference \"sha256:e60d442b6496497355efdf45eaa3ea72f5a2b28a5187aeab33442933f3c735d2\"" Nov 1 00:14:28.886190 env[1824]: time="2025-11-01T00:14:28.885875271Z" level=info msg="CreateContainer within sandbox \"096e691154dfbf01af44667e423b168d383525cf55381ce7c6223473be55ffac\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Nov 1 00:14:28.918635 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2497797058.mount: Deactivated successfully. Nov 1 00:14:28.929302 env[1824]: time="2025-11-01T00:14:28.929219345Z" level=info msg="CreateContainer within sandbox \"096e691154dfbf01af44667e423b168d383525cf55381ce7c6223473be55ffac\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"71e5ec0a00f0bcba1c9356720afa4900d82f3287e91e09c79e6399267df0e522\"" Nov 1 00:14:28.930289 env[1824]: time="2025-11-01T00:14:28.930235905Z" level=info msg="StartContainer for \"71e5ec0a00f0bcba1c9356720afa4900d82f3287e91e09c79e6399267df0e522\"" Nov 1 00:14:28.991790 systemd[1]: run-containerd-runc-k8s.io-71e5ec0a00f0bcba1c9356720afa4900d82f3287e91e09c79e6399267df0e522-runc.f5GZGE.mount: Deactivated successfully. Nov 1 00:14:28.995788 systemd[1]: Started cri-containerd-71e5ec0a00f0bcba1c9356720afa4900d82f3287e91e09c79e6399267df0e522.scope. Nov 1 00:14:29.036000 audit[3634]: AVC avc: denied { perfmon } for pid=3634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:29.039722 kernel: kauditd_printk_skb: 103 callbacks suppressed Nov 1 00:14:29.039835 kernel: audit: type=1400 audit(1761956069.036:1010): avc: denied { perfmon } for pid=3634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:29.036000 audit[3634]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3381 pid=3634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:29.059419 kernel: audit: type=1300 audit(1761956069.036:1010): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3381 pid=3634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:29.059526 kernel: audit: type=1327 audit(1761956069.036:1010): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731653565633061303066306263626131633933353637323061666134 Nov 1 00:14:29.036000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731653565633061303066306263626131633933353637323061666134 Nov 1 00:14:29.036000 audit[3634]: AVC avc: denied { bpf } for pid=3634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:29.078370 kernel: audit: type=1400 audit(1761956069.036:1011): avc: denied { bpf } for pid=3634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:29.078515 kernel: audit: type=1400 audit(1761956069.036:1011): avc: denied { bpf } for pid=3634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:29.036000 audit[3634]: AVC avc: denied { bpf } for pid=3634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:29.036000 audit[3634]: AVC avc: denied { bpf } for pid=3634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:29.093342 kernel: audit: type=1400 audit(1761956069.036:1011): avc: denied { bpf } for pid=3634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:29.036000 audit[3634]: AVC avc: denied { perfmon } for pid=3634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:29.101847 kernel: audit: type=1400 audit(1761956069.036:1011): avc: denied { perfmon } for pid=3634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:29.036000 audit[3634]: AVC avc: denied { perfmon } for pid=3634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:29.112555 kernel: audit: type=1400 audit(1761956069.036:1011): avc: denied { perfmon } for pid=3634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:29.036000 audit[3634]: AVC avc: denied { perfmon } for pid=3634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:29.122628 kernel: audit: type=1400 audit(1761956069.036:1011): avc: denied { perfmon } for pid=3634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:29.036000 audit[3634]: AVC avc: denied { perfmon } for pid=3634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:29.036000 audit[3634]: AVC avc: denied { perfmon } for pid=3634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:29.132243 kernel: audit: type=1400 audit(1761956069.036:1011): avc: denied { perfmon } for pid=3634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:29.036000 audit[3634]: AVC avc: denied { bpf } for pid=3634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:29.036000 audit[3634]: AVC avc: denied { bpf } for pid=3634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:29.036000 audit: BPF prog-id=133 op=LOAD Nov 1 00:14:29.036000 audit[3634]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3381 pid=3634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:29.036000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731653565633061303066306263626131633933353637323061666134 Nov 1 00:14:29.039000 audit[3634]: AVC avc: denied { bpf } for pid=3634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:29.039000 audit[3634]: AVC avc: denied { bpf } for pid=3634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:29.039000 audit[3634]: AVC avc: denied { perfmon } for pid=3634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:29.039000 audit[3634]: AVC avc: denied { perfmon } for pid=3634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:29.039000 audit[3634]: AVC avc: denied { perfmon } for pid=3634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:29.039000 audit[3634]: AVC avc: denied { perfmon } for pid=3634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:29.039000 audit[3634]: AVC avc: denied { perfmon } for pid=3634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:29.039000 audit[3634]: AVC avc: denied { bpf } for pid=3634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:29.039000 audit[3634]: AVC avc: denied { bpf } for pid=3634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:29.039000 audit: BPF prog-id=134 op=LOAD Nov 1 00:14:29.039000 audit[3634]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3381 pid=3634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:29.039000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731653565633061303066306263626131633933353637323061666134 Nov 1 00:14:29.047000 audit: BPF prog-id=134 op=UNLOAD Nov 1 00:14:29.047000 audit: BPF prog-id=133 op=UNLOAD Nov 1 00:14:29.047000 audit[3634]: AVC avc: denied { bpf } for pid=3634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:29.047000 audit[3634]: AVC avc: denied { bpf } for pid=3634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:29.047000 audit[3634]: AVC avc: denied { bpf } for pid=3634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:29.047000 audit[3634]: AVC avc: denied { perfmon } for pid=3634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:29.047000 audit[3634]: AVC avc: denied { perfmon } for pid=3634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:29.047000 audit[3634]: AVC avc: denied { perfmon } for pid=3634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:29.047000 audit[3634]: AVC avc: denied { perfmon } for pid=3634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:29.047000 audit[3634]: AVC avc: denied { perfmon } for pid=3634 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:29.047000 audit[3634]: AVC avc: denied { bpf } for pid=3634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:29.047000 audit[3634]: AVC avc: denied { bpf } for pid=3634 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:29.047000 audit: BPF prog-id=135 op=LOAD Nov 1 00:14:29.047000 audit[3634]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3381 pid=3634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:29.047000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731653565633061303066306263626131633933353637323061666134 Nov 1 00:14:29.135160 env[1824]: time="2025-11-01T00:14:29.132747947Z" level=info msg="StartContainer for \"71e5ec0a00f0bcba1c9356720afa4900d82f3287e91e09c79e6399267df0e522\" returns successfully" Nov 1 00:14:29.959741 kubelet[2905]: E1101 00:14:29.959664 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-89sjk" podUID="7a8f56d2-ec05-443a-b8e9-9b53fb320745" Nov 1 00:14:30.312217 env[1824]: time="2025-11-01T00:14:30.311968489Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Nov 1 00:14:30.317422 systemd[1]: cri-containerd-71e5ec0a00f0bcba1c9356720afa4900d82f3287e91e09c79e6399267df0e522.scope: Deactivated successfully. Nov 1 00:14:30.317865 systemd[1]: cri-containerd-71e5ec0a00f0bcba1c9356720afa4900d82f3287e91e09c79e6399267df0e522.scope: Consumed 1.131s CPU time. Nov 1 00:14:30.321000 audit: BPF prog-id=135 op=UNLOAD Nov 1 00:14:30.356112 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-71e5ec0a00f0bcba1c9356720afa4900d82f3287e91e09c79e6399267df0e522-rootfs.mount: Deactivated successfully. Nov 1 00:14:30.362606 kubelet[2905]: I1101 00:14:30.362048 2905 kubelet_node_status.go:501] "Fast updating node status as it just became ready" Nov 1 00:14:30.434070 systemd[1]: Created slice kubepods-besteffort-pod2dc2411c_b601_4108_813f_eb9901daca29.slice. Nov 1 00:14:30.454621 systemd[1]: Created slice kubepods-besteffort-podd04e8d82_e949_4962_a876_1dbd67173f6c.slice. Nov 1 00:14:30.478182 kubelet[2905]: W1101 00:14:30.476495 2905 reflector.go:569] object-"kube-system"/"coredns": failed to list *v1.ConfigMap: configmaps "coredns" is forbidden: User "system:node:ip-172-31-27-146" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-27-146' and this object Nov 1 00:14:30.478182 kubelet[2905]: E1101 00:14:30.476560 2905 reflector.go:166] "Unhandled Error" err="object-\"kube-system\"/\"coredns\": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps \"coredns\" is forbidden: User \"system:node:ip-172-31-27-146\" cannot list resource \"configmaps\" in API group \"\" in the namespace \"kube-system\": no relationship found between node 'ip-172-31-27-146' and this object" logger="UnhandledError" Nov 1 00:14:30.483308 systemd[1]: Created slice kubepods-burstable-pod4b6be88e_2b28_4afc_b9bf_475fed78cc30.slice. Nov 1 00:14:30.500020 systemd[1]: Created slice kubepods-besteffort-pod7c4dfa77_9d3c_4d7b_9cd8_e90f78821efe.slice. Nov 1 00:14:30.522241 systemd[1]: Created slice kubepods-besteffort-pod2672231a_dbf2_4175_a896_3a2597610669.slice. Nov 1 00:14:30.531547 systemd[1]: Created slice kubepods-besteffort-podd237b083_16fc_4661_b219_6ab46b70c3f4.slice. Nov 1 00:14:30.547146 systemd[1]: Created slice kubepods-burstable-pod81b9363b_5132_4737_acfe_192244e24f20.slice. Nov 1 00:14:30.582757 kubelet[2905]: I1101 00:14:30.581549 2905 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-jpk9f\" (UniqueName: \"kubernetes.io/projected/d04e8d82-e949-4962-a876-1dbd67173f6c-kube-api-access-jpk9f\") pod \"calico-apiserver-6d9db7877d-dphkx\" (UID: \"d04e8d82-e949-4962-a876-1dbd67173f6c\") " pod="calico-apiserver/calico-apiserver-6d9db7877d-dphkx" Nov 1 00:14:30.583320 kubelet[2905]: I1101 00:14:30.583171 2905 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-p6wq4\" (UniqueName: \"kubernetes.io/projected/2672231a-dbf2-4175-a896-3a2597610669-kube-api-access-p6wq4\") pod \"goldmane-666569f655-hp4nw\" (UID: \"2672231a-dbf2-4175-a896-3a2597610669\") " pod="calico-system/goldmane-666569f655-hp4nw" Nov 1 00:14:30.584288 kubelet[2905]: I1101 00:14:30.583535 2905 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/7c4dfa77-9d3c-4d7b-9cd8-e90f78821efe-tigera-ca-bundle\") pod \"calico-kube-controllers-7758fdbbb7-7swhm\" (UID: \"7c4dfa77-9d3c-4d7b-9cd8-e90f78821efe\") " pod="calico-system/calico-kube-controllers-7758fdbbb7-7swhm" Nov 1 00:14:30.584820 kubelet[2905]: I1101 00:14:30.584761 2905 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9wlw4\" (UniqueName: \"kubernetes.io/projected/7c4dfa77-9d3c-4d7b-9cd8-e90f78821efe-kube-api-access-9wlw4\") pod \"calico-kube-controllers-7758fdbbb7-7swhm\" (UID: \"7c4dfa77-9d3c-4d7b-9cd8-e90f78821efe\") " pod="calico-system/calico-kube-controllers-7758fdbbb7-7swhm" Nov 1 00:14:30.585108 kubelet[2905]: I1101 00:14:30.585037 2905 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/d04e8d82-e949-4962-a876-1dbd67173f6c-calico-apiserver-certs\") pod \"calico-apiserver-6d9db7877d-dphkx\" (UID: \"d04e8d82-e949-4962-a876-1dbd67173f6c\") " pod="calico-apiserver/calico-apiserver-6d9db7877d-dphkx" Nov 1 00:14:30.585973 kubelet[2905]: I1101 00:14:30.585891 2905 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/2672231a-dbf2-4175-a896-3a2597610669-goldmane-ca-bundle\") pod \"goldmane-666569f655-hp4nw\" (UID: \"2672231a-dbf2-4175-a896-3a2597610669\") " pod="calico-system/goldmane-666569f655-hp4nw" Nov 1 00:14:30.586164 kubelet[2905]: I1101 00:14:30.585982 2905 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/4b6be88e-2b28-4afc-b9bf-475fed78cc30-config-volume\") pod \"coredns-668d6bf9bc-9pzj4\" (UID: \"4b6be88e-2b28-4afc-b9bf-475fed78cc30\") " pod="kube-system/coredns-668d6bf9bc-9pzj4" Nov 1 00:14:30.586164 kubelet[2905]: I1101 00:14:30.586035 2905 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/2dc2411c-b601-4108-813f-eb9901daca29-whisker-backend-key-pair\") pod \"whisker-57bcdb76fc-mdv8j\" (UID: \"2dc2411c-b601-4108-813f-eb9901daca29\") " pod="calico-system/whisker-57bcdb76fc-mdv8j" Nov 1 00:14:30.586164 kubelet[2905]: I1101 00:14:30.586073 2905 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/2dc2411c-b601-4108-813f-eb9901daca29-whisker-ca-bundle\") pod \"whisker-57bcdb76fc-mdv8j\" (UID: \"2dc2411c-b601-4108-813f-eb9901daca29\") " pod="calico-system/whisker-57bcdb76fc-mdv8j" Nov 1 00:14:30.586164 kubelet[2905]: I1101 00:14:30.586115 2905 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/2672231a-dbf2-4175-a896-3a2597610669-config\") pod \"goldmane-666569f655-hp4nw\" (UID: \"2672231a-dbf2-4175-a896-3a2597610669\") " pod="calico-system/goldmane-666569f655-hp4nw" Nov 1 00:14:30.586476 kubelet[2905]: I1101 00:14:30.586191 2905 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/2672231a-dbf2-4175-a896-3a2597610669-goldmane-key-pair\") pod \"goldmane-666569f655-hp4nw\" (UID: \"2672231a-dbf2-4175-a896-3a2597610669\") " pod="calico-system/goldmane-666569f655-hp4nw" Nov 1 00:14:30.586476 kubelet[2905]: I1101 00:14:30.586230 2905 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-pmp28\" (UniqueName: \"kubernetes.io/projected/d237b083-16fc-4661-b219-6ab46b70c3f4-kube-api-access-pmp28\") pod \"calico-apiserver-6d9db7877d-g6gc4\" (UID: \"d237b083-16fc-4661-b219-6ab46b70c3f4\") " pod="calico-apiserver/calico-apiserver-6d9db7877d-g6gc4" Nov 1 00:14:30.586476 kubelet[2905]: I1101 00:14:30.586280 2905 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-dg4v5\" (UniqueName: \"kubernetes.io/projected/4b6be88e-2b28-4afc-b9bf-475fed78cc30-kube-api-access-dg4v5\") pod \"coredns-668d6bf9bc-9pzj4\" (UID: \"4b6be88e-2b28-4afc-b9bf-475fed78cc30\") " pod="kube-system/coredns-668d6bf9bc-9pzj4" Nov 1 00:14:30.586476 kubelet[2905]: I1101 00:14:30.586324 2905 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-2qrjf\" (UniqueName: \"kubernetes.io/projected/2dc2411c-b601-4108-813f-eb9901daca29-kube-api-access-2qrjf\") pod \"whisker-57bcdb76fc-mdv8j\" (UID: \"2dc2411c-b601-4108-813f-eb9901daca29\") " pod="calico-system/whisker-57bcdb76fc-mdv8j" Nov 1 00:14:30.586476 kubelet[2905]: I1101 00:14:30.586381 2905 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/d237b083-16fc-4661-b219-6ab46b70c3f4-calico-apiserver-certs\") pod \"calico-apiserver-6d9db7877d-g6gc4\" (UID: \"d237b083-16fc-4661-b219-6ab46b70c3f4\") " pod="calico-apiserver/calico-apiserver-6d9db7877d-g6gc4" Nov 1 00:14:30.687238 kubelet[2905]: I1101 00:14:30.687189 2905 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/81b9363b-5132-4737-acfe-192244e24f20-config-volume\") pod \"coredns-668d6bf9bc-57x5z\" (UID: \"81b9363b-5132-4737-acfe-192244e24f20\") " pod="kube-system/coredns-668d6bf9bc-57x5z" Nov 1 00:14:30.687563 kubelet[2905]: I1101 00:14:30.687516 2905 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-kcvkb\" (UniqueName: \"kubernetes.io/projected/81b9363b-5132-4737-acfe-192244e24f20-kube-api-access-kcvkb\") pod \"coredns-668d6bf9bc-57x5z\" (UID: \"81b9363b-5132-4737-acfe-192244e24f20\") " pod="kube-system/coredns-668d6bf9bc-57x5z" Nov 1 00:14:30.778563 env[1824]: time="2025-11-01T00:14:30.778004153Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6d9db7877d-dphkx,Uid:d04e8d82-e949-4962-a876-1dbd67173f6c,Namespace:calico-apiserver,Attempt:0,}" Nov 1 00:14:30.835194 env[1824]: time="2025-11-01T00:14:30.833430549Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-hp4nw,Uid:2672231a-dbf2-4175-a896-3a2597610669,Namespace:calico-system,Attempt:0,}" Nov 1 00:14:30.845047 env[1824]: time="2025-11-01T00:14:30.844972135Z" level=info msg="shim disconnected" id=71e5ec0a00f0bcba1c9356720afa4900d82f3287e91e09c79e6399267df0e522 Nov 1 00:14:30.845047 env[1824]: time="2025-11-01T00:14:30.845042361Z" level=warning msg="cleaning up after shim disconnected" id=71e5ec0a00f0bcba1c9356720afa4900d82f3287e91e09c79e6399267df0e522 namespace=k8s.io Nov 1 00:14:30.845306 env[1824]: time="2025-11-01T00:14:30.845066998Z" level=info msg="cleaning up dead shim" Nov 1 00:14:30.848031 env[1824]: time="2025-11-01T00:14:30.847960132Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6d9db7877d-g6gc4,Uid:d237b083-16fc-4661-b219-6ab46b70c3f4,Namespace:calico-apiserver,Attempt:0,}" Nov 1 00:14:30.877356 env[1824]: time="2025-11-01T00:14:30.877282237Z" level=warning msg="cleanup warnings time=\"2025-11-01T00:14:30Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3689 runtime=io.containerd.runc.v2\n" Nov 1 00:14:31.045051 env[1824]: time="2025-11-01T00:14:31.044963723Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-57bcdb76fc-mdv8j,Uid:2dc2411c-b601-4108-813f-eb9901daca29,Namespace:calico-system,Attempt:0,}" Nov 1 00:14:31.069521 env[1824]: time="2025-11-01T00:14:31.069412527Z" level=error msg="Failed to destroy network for sandbox \"7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:14:31.070172 env[1824]: time="2025-11-01T00:14:31.070077813Z" level=error msg="encountered an error cleaning up failed sandbox \"7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:14:31.070317 env[1824]: time="2025-11-01T00:14:31.070199328Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-hp4nw,Uid:2672231a-dbf2-4175-a896-3a2597610669,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:14:31.071105 kubelet[2905]: E1101 00:14:31.070677 2905 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:14:31.071105 kubelet[2905]: E1101 00:14:31.070842 2905 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-666569f655-hp4nw" Nov 1 00:14:31.071105 kubelet[2905]: E1101 00:14:31.070908 2905 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-666569f655-hp4nw" Nov 1 00:14:31.071890 kubelet[2905]: E1101 00:14:31.071015 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-666569f655-hp4nw_calico-system(2672231a-dbf2-4175-a896-3a2597610669)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-666569f655-hp4nw_calico-system(2672231a-dbf2-4175-a896-3a2597610669)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-666569f655-hp4nw" podUID="2672231a-dbf2-4175-a896-3a2597610669" Nov 1 00:14:31.085071 env[1824]: time="2025-11-01T00:14:31.084990898Z" level=error msg="Failed to destroy network for sandbox \"5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:14:31.087335 env[1824]: time="2025-11-01T00:14:31.087248734Z" level=error msg="encountered an error cleaning up failed sandbox \"5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:14:31.087836 env[1824]: time="2025-11-01T00:14:31.087651225Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6d9db7877d-dphkx,Uid:d04e8d82-e949-4962-a876-1dbd67173f6c,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:14:31.089250 kubelet[2905]: E1101 00:14:31.089155 2905 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:14:31.089458 kubelet[2905]: E1101 00:14:31.089273 2905 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-6d9db7877d-dphkx" Nov 1 00:14:31.089458 kubelet[2905]: E1101 00:14:31.089313 2905 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-6d9db7877d-dphkx" Nov 1 00:14:31.089458 kubelet[2905]: E1101 00:14:31.089393 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-6d9db7877d-dphkx_calico-apiserver(d04e8d82-e949-4962-a876-1dbd67173f6c)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-6d9db7877d-dphkx_calico-apiserver(d04e8d82-e949-4962-a876-1dbd67173f6c)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-6d9db7877d-dphkx" podUID="d04e8d82-e949-4962-a876-1dbd67173f6c" Nov 1 00:14:31.111859 env[1824]: time="2025-11-01T00:14:31.111787013Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7758fdbbb7-7swhm,Uid:7c4dfa77-9d3c-4d7b-9cd8-e90f78821efe,Namespace:calico-system,Attempt:0,}" Nov 1 00:14:31.126758 env[1824]: time="2025-11-01T00:14:31.126676842Z" level=error msg="Failed to destroy network for sandbox \"fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:14:31.128544 env[1824]: time="2025-11-01T00:14:31.128458997Z" level=error msg="encountered an error cleaning up failed sandbox \"fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:14:31.128720 env[1824]: time="2025-11-01T00:14:31.128561336Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6d9db7877d-g6gc4,Uid:d237b083-16fc-4661-b219-6ab46b70c3f4,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:14:31.129090 kubelet[2905]: E1101 00:14:31.129031 2905 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:14:31.129269 kubelet[2905]: E1101 00:14:31.129115 2905 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-6d9db7877d-g6gc4" Nov 1 00:14:31.129269 kubelet[2905]: E1101 00:14:31.129186 2905 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-6d9db7877d-g6gc4" Nov 1 00:14:31.132333 kubelet[2905]: E1101 00:14:31.129288 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-6d9db7877d-g6gc4_calico-apiserver(d237b083-16fc-4661-b219-6ab46b70c3f4)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-6d9db7877d-g6gc4_calico-apiserver(d237b083-16fc-4661-b219-6ab46b70c3f4)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-6d9db7877d-g6gc4" podUID="d237b083-16fc-4661-b219-6ab46b70c3f4" Nov 1 00:14:31.167203 kubelet[2905]: I1101 00:14:31.167111 2905 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d" Nov 1 00:14:31.171632 env[1824]: time="2025-11-01T00:14:31.171551162Z" level=info msg="StopPodSandbox for \"7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d\"" Nov 1 00:14:31.176135 kubelet[2905]: I1101 00:14:31.176053 2905 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee" Nov 1 00:14:31.178626 env[1824]: time="2025-11-01T00:14:31.177705286Z" level=info msg="StopPodSandbox for \"5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee\"" Nov 1 00:14:31.189588 kubelet[2905]: I1101 00:14:31.188481 2905 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339" Nov 1 00:14:31.196898 env[1824]: time="2025-11-01T00:14:31.196821004Z" level=info msg="StopPodSandbox for \"fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339\"" Nov 1 00:14:31.216261 env[1824]: time="2025-11-01T00:14:31.216189016Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.4\"" Nov 1 00:14:31.300897 env[1824]: time="2025-11-01T00:14:31.300807532Z" level=error msg="Failed to destroy network for sandbox \"2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:14:31.301582 env[1824]: time="2025-11-01T00:14:31.301496315Z" level=error msg="encountered an error cleaning up failed sandbox \"2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:14:31.301731 env[1824]: time="2025-11-01T00:14:31.301601953Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-57bcdb76fc-mdv8j,Uid:2dc2411c-b601-4108-813f-eb9901daca29,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:14:31.301939 kubelet[2905]: E1101 00:14:31.301879 2905 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:14:31.302065 kubelet[2905]: E1101 00:14:31.301962 2905 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-57bcdb76fc-mdv8j" Nov 1 00:14:31.302065 kubelet[2905]: E1101 00:14:31.302009 2905 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-57bcdb76fc-mdv8j" Nov 1 00:14:31.302241 kubelet[2905]: E1101 00:14:31.302069 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-57bcdb76fc-mdv8j_calico-system(2dc2411c-b601-4108-813f-eb9901daca29)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-57bcdb76fc-mdv8j_calico-system(2dc2411c-b601-4108-813f-eb9901daca29)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-57bcdb76fc-mdv8j" podUID="2dc2411c-b601-4108-813f-eb9901daca29" Nov 1 00:14:31.334042 env[1824]: time="2025-11-01T00:14:31.333951180Z" level=error msg="StopPodSandbox for \"5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee\" failed" error="failed to destroy network for sandbox \"5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:14:31.334695 kubelet[2905]: E1101 00:14:31.334276 2905 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee" Nov 1 00:14:31.334695 kubelet[2905]: E1101 00:14:31.334360 2905 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee"} Nov 1 00:14:31.334695 kubelet[2905]: E1101 00:14:31.334466 2905 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"d04e8d82-e949-4962-a876-1dbd67173f6c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:14:31.334695 kubelet[2905]: E1101 00:14:31.334506 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"d04e8d82-e949-4962-a876-1dbd67173f6c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-6d9db7877d-dphkx" podUID="d04e8d82-e949-4962-a876-1dbd67173f6c" Nov 1 00:14:31.344158 env[1824]: time="2025-11-01T00:14:31.341568731Z" level=error msg="StopPodSandbox for \"7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d\" failed" error="failed to destroy network for sandbox \"7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:14:31.344346 kubelet[2905]: E1101 00:14:31.341886 2905 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d" Nov 1 00:14:31.344346 kubelet[2905]: E1101 00:14:31.341949 2905 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d"} Nov 1 00:14:31.344346 kubelet[2905]: E1101 00:14:31.342007 2905 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"2672231a-dbf2-4175-a896-3a2597610669\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:14:31.344346 kubelet[2905]: E1101 00:14:31.342046 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"2672231a-dbf2-4175-a896-3a2597610669\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-666569f655-hp4nw" podUID="2672231a-dbf2-4175-a896-3a2597610669" Nov 1 00:14:31.402194 env[1824]: time="2025-11-01T00:14:31.402081724Z" level=error msg="StopPodSandbox for \"fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339\" failed" error="failed to destroy network for sandbox \"fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:14:31.402751 kubelet[2905]: E1101 00:14:31.402685 2905 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339" Nov 1 00:14:31.402880 kubelet[2905]: E1101 00:14:31.402758 2905 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339"} Nov 1 00:14:31.402880 kubelet[2905]: E1101 00:14:31.402815 2905 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"d237b083-16fc-4661-b219-6ab46b70c3f4\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:14:31.403050 kubelet[2905]: E1101 00:14:31.402864 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"d237b083-16fc-4661-b219-6ab46b70c3f4\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-6d9db7877d-g6gc4" podUID="d237b083-16fc-4661-b219-6ab46b70c3f4" Nov 1 00:14:31.406616 env[1824]: time="2025-11-01T00:14:31.406467193Z" level=error msg="Failed to destroy network for sandbox \"a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:14:31.410626 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac-shm.mount: Deactivated successfully. Nov 1 00:14:31.412582 env[1824]: time="2025-11-01T00:14:31.412501674Z" level=error msg="encountered an error cleaning up failed sandbox \"a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:14:31.412728 env[1824]: time="2025-11-01T00:14:31.412611765Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7758fdbbb7-7swhm,Uid:7c4dfa77-9d3c-4d7b-9cd8-e90f78821efe,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:14:31.413173 kubelet[2905]: E1101 00:14:31.413070 2905 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:14:31.413332 kubelet[2905]: E1101 00:14:31.413218 2905 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-7758fdbbb7-7swhm" Nov 1 00:14:31.413332 kubelet[2905]: E1101 00:14:31.413304 2905 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-7758fdbbb7-7swhm" Nov 1 00:14:31.413474 kubelet[2905]: E1101 00:14:31.413375 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-7758fdbbb7-7swhm_calico-system(7c4dfa77-9d3c-4d7b-9cd8-e90f78821efe)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-7758fdbbb7-7swhm_calico-system(7c4dfa77-9d3c-4d7b-9cd8-e90f78821efe)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-7758fdbbb7-7swhm" podUID="7c4dfa77-9d3c-4d7b-9cd8-e90f78821efe" Nov 1 00:14:31.697993 env[1824]: time="2025-11-01T00:14:31.697114499Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-9pzj4,Uid:4b6be88e-2b28-4afc-b9bf-475fed78cc30,Namespace:kube-system,Attempt:0,}" Nov 1 00:14:31.772458 env[1824]: time="2025-11-01T00:14:31.772404710Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-57x5z,Uid:81b9363b-5132-4737-acfe-192244e24f20,Namespace:kube-system,Attempt:0,}" Nov 1 00:14:31.853266 env[1824]: time="2025-11-01T00:14:31.853159639Z" level=error msg="Failed to destroy network for sandbox \"6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:14:31.853855 env[1824]: time="2025-11-01T00:14:31.853795392Z" level=error msg="encountered an error cleaning up failed sandbox \"6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:14:31.853959 env[1824]: time="2025-11-01T00:14:31.853886390Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-9pzj4,Uid:4b6be88e-2b28-4afc-b9bf-475fed78cc30,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:14:31.854907 kubelet[2905]: E1101 00:14:31.854351 2905 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:14:31.854907 kubelet[2905]: E1101 00:14:31.854448 2905 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-9pzj4" Nov 1 00:14:31.854907 kubelet[2905]: E1101 00:14:31.854484 2905 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-9pzj4" Nov 1 00:14:31.855329 kubelet[2905]: E1101 00:14:31.854562 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-668d6bf9bc-9pzj4_kube-system(4b6be88e-2b28-4afc-b9bf-475fed78cc30)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-668d6bf9bc-9pzj4_kube-system(4b6be88e-2b28-4afc-b9bf-475fed78cc30)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-9pzj4" podUID="4b6be88e-2b28-4afc-b9bf-475fed78cc30" Nov 1 00:14:31.937519 env[1824]: time="2025-11-01T00:14:31.937419645Z" level=error msg="Failed to destroy network for sandbox \"7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:14:31.938155 env[1824]: time="2025-11-01T00:14:31.938071623Z" level=error msg="encountered an error cleaning up failed sandbox \"7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:14:31.938310 env[1824]: time="2025-11-01T00:14:31.938201706Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-57x5z,Uid:81b9363b-5132-4737-acfe-192244e24f20,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:14:31.939872 kubelet[2905]: E1101 00:14:31.938564 2905 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:14:31.939872 kubelet[2905]: E1101 00:14:31.938646 2905 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-57x5z" Nov 1 00:14:31.939872 kubelet[2905]: E1101 00:14:31.938681 2905 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-57x5z" Nov 1 00:14:31.940261 kubelet[2905]: E1101 00:14:31.938757 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-668d6bf9bc-57x5z_kube-system(81b9363b-5132-4737-acfe-192244e24f20)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-668d6bf9bc-57x5z_kube-system(81b9363b-5132-4737-acfe-192244e24f20)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-57x5z" podUID="81b9363b-5132-4737-acfe-192244e24f20" Nov 1 00:14:31.969519 systemd[1]: Created slice kubepods-besteffort-pod7a8f56d2_ec05_443a_b8e9_9b53fb320745.slice. Nov 1 00:14:31.975610 env[1824]: time="2025-11-01T00:14:31.975554838Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-89sjk,Uid:7a8f56d2-ec05-443a-b8e9-9b53fb320745,Namespace:calico-system,Attempt:0,}" Nov 1 00:14:32.086177 env[1824]: time="2025-11-01T00:14:32.086054292Z" level=error msg="Failed to destroy network for sandbox \"37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:14:32.086982 env[1824]: time="2025-11-01T00:14:32.086885698Z" level=error msg="encountered an error cleaning up failed sandbox \"37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:14:32.087150 env[1824]: time="2025-11-01T00:14:32.086995573Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-89sjk,Uid:7a8f56d2-ec05-443a-b8e9-9b53fb320745,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:14:32.087522 kubelet[2905]: E1101 00:14:32.087445 2905 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:14:32.088014 kubelet[2905]: E1101 00:14:32.087559 2905 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-89sjk" Nov 1 00:14:32.088014 kubelet[2905]: E1101 00:14:32.087619 2905 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-89sjk" Nov 1 00:14:32.088014 kubelet[2905]: E1101 00:14:32.087683 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-89sjk_calico-system(7a8f56d2-ec05-443a-b8e9-9b53fb320745)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-89sjk_calico-system(7a8f56d2-ec05-443a-b8e9-9b53fb320745)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-89sjk" podUID="7a8f56d2-ec05-443a-b8e9-9b53fb320745" Nov 1 00:14:32.212323 kubelet[2905]: I1101 00:14:32.212246 2905 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf" Nov 1 00:14:32.216014 env[1824]: time="2025-11-01T00:14:32.215099534Z" level=info msg="StopPodSandbox for \"6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf\"" Nov 1 00:14:32.219408 kubelet[2905]: I1101 00:14:32.219213 2905 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac" Nov 1 00:14:32.223887 env[1824]: time="2025-11-01T00:14:32.220334900Z" level=info msg="StopPodSandbox for \"a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac\"" Nov 1 00:14:32.230781 kubelet[2905]: I1101 00:14:32.230716 2905 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e" Nov 1 00:14:32.232473 env[1824]: time="2025-11-01T00:14:32.232386963Z" level=info msg="StopPodSandbox for \"37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e\"" Nov 1 00:14:32.242139 kubelet[2905]: I1101 00:14:32.242067 2905 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654" Nov 1 00:14:32.247145 env[1824]: time="2025-11-01T00:14:32.243249758Z" level=info msg="StopPodSandbox for \"2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654\"" Nov 1 00:14:32.247314 kubelet[2905]: I1101 00:14:32.245674 2905 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e" Nov 1 00:14:32.247396 env[1824]: time="2025-11-01T00:14:32.247353662Z" level=info msg="StopPodSandbox for \"7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e\"" Nov 1 00:14:32.335208 env[1824]: time="2025-11-01T00:14:32.335079268Z" level=error msg="StopPodSandbox for \"a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac\" failed" error="failed to destroy network for sandbox \"a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:14:32.335816 kubelet[2905]: E1101 00:14:32.335431 2905 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac" Nov 1 00:14:32.335816 kubelet[2905]: E1101 00:14:32.335501 2905 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac"} Nov 1 00:14:32.335816 kubelet[2905]: E1101 00:14:32.335559 2905 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"7c4dfa77-9d3c-4d7b-9cd8-e90f78821efe\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:14:32.335816 kubelet[2905]: E1101 00:14:32.335603 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"7c4dfa77-9d3c-4d7b-9cd8-e90f78821efe\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-7758fdbbb7-7swhm" podUID="7c4dfa77-9d3c-4d7b-9cd8-e90f78821efe" Nov 1 00:14:32.358369 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e-shm.mount: Deactivated successfully. Nov 1 00:14:32.358558 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf-shm.mount: Deactivated successfully. Nov 1 00:14:32.433558 env[1824]: time="2025-11-01T00:14:32.433390690Z" level=error msg="StopPodSandbox for \"7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e\" failed" error="failed to destroy network for sandbox \"7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:14:32.434603 kubelet[2905]: E1101 00:14:32.434270 2905 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e" Nov 1 00:14:32.434603 kubelet[2905]: E1101 00:14:32.434366 2905 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e"} Nov 1 00:14:32.434603 kubelet[2905]: E1101 00:14:32.434472 2905 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"81b9363b-5132-4737-acfe-192244e24f20\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:14:32.434603 kubelet[2905]: E1101 00:14:32.434539 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"81b9363b-5132-4737-acfe-192244e24f20\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-57x5z" podUID="81b9363b-5132-4737-acfe-192244e24f20" Nov 1 00:14:32.447718 env[1824]: time="2025-11-01T00:14:32.446311468Z" level=error msg="StopPodSandbox for \"6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf\" failed" error="failed to destroy network for sandbox \"6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:14:32.450171 kubelet[2905]: E1101 00:14:32.450055 2905 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf" Nov 1 00:14:32.450171 kubelet[2905]: E1101 00:14:32.450159 2905 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf"} Nov 1 00:14:32.450448 kubelet[2905]: E1101 00:14:32.450220 2905 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"4b6be88e-2b28-4afc-b9bf-475fed78cc30\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:14:32.450448 kubelet[2905]: E1101 00:14:32.450260 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"4b6be88e-2b28-4afc-b9bf-475fed78cc30\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-9pzj4" podUID="4b6be88e-2b28-4afc-b9bf-475fed78cc30" Nov 1 00:14:32.465553 env[1824]: time="2025-11-01T00:14:32.465444677Z" level=error msg="StopPodSandbox for \"37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e\" failed" error="failed to destroy network for sandbox \"37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:14:32.466991 kubelet[2905]: E1101 00:14:32.466675 2905 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e" Nov 1 00:14:32.466991 kubelet[2905]: E1101 00:14:32.466796 2905 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e"} Nov 1 00:14:32.466991 kubelet[2905]: E1101 00:14:32.466854 2905 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"7a8f56d2-ec05-443a-b8e9-9b53fb320745\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:14:32.466991 kubelet[2905]: E1101 00:14:32.466919 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"7a8f56d2-ec05-443a-b8e9-9b53fb320745\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-89sjk" podUID="7a8f56d2-ec05-443a-b8e9-9b53fb320745" Nov 1 00:14:32.468463 env[1824]: time="2025-11-01T00:14:32.468371686Z" level=error msg="StopPodSandbox for \"2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654\" failed" error="failed to destroy network for sandbox \"2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:14:32.468769 kubelet[2905]: E1101 00:14:32.468680 2905 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654" Nov 1 00:14:32.468886 kubelet[2905]: E1101 00:14:32.468758 2905 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654"} Nov 1 00:14:32.468886 kubelet[2905]: E1101 00:14:32.468813 2905 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"2dc2411c-b601-4108-813f-eb9901daca29\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:14:32.468886 kubelet[2905]: E1101 00:14:32.468852 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"2dc2411c-b601-4108-813f-eb9901daca29\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-57bcdb76fc-mdv8j" podUID="2dc2411c-b601-4108-813f-eb9901daca29" Nov 1 00:14:39.396604 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3810859635.mount: Deactivated successfully. Nov 1 00:14:39.451861 env[1824]: time="2025-11-01T00:14:39.451801260Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:14:39.453998 env[1824]: time="2025-11-01T00:14:39.453947865Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:43a5290057a103af76996c108856f92ed902f34573d7a864f55f15b8aaf4683b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:14:39.456334 env[1824]: time="2025-11-01T00:14:39.456288278Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:14:39.458368 env[1824]: time="2025-11-01T00:14:39.458288942Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e92cca333202c87d07bf57f38182fd68f0779f912ef55305eda1fccc9f33667c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:14:39.459573 env[1824]: time="2025-11-01T00:14:39.459528789Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.4\" returns image reference \"sha256:43a5290057a103af76996c108856f92ed902f34573d7a864f55f15b8aaf4683b\"" Nov 1 00:14:39.491844 env[1824]: time="2025-11-01T00:14:39.491789808Z" level=info msg="CreateContainer within sandbox \"096e691154dfbf01af44667e423b168d383525cf55381ce7c6223473be55ffac\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Nov 1 00:14:39.521711 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount214195870.mount: Deactivated successfully. Nov 1 00:14:39.528286 env[1824]: time="2025-11-01T00:14:39.528215568Z" level=info msg="CreateContainer within sandbox \"096e691154dfbf01af44667e423b168d383525cf55381ce7c6223473be55ffac\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"3fe994d432b892068922190cf6b1b03544f272d39b07330d9e465c7b6dbec6cf\"" Nov 1 00:14:39.529021 env[1824]: time="2025-11-01T00:14:39.528962886Z" level=info msg="StartContainer for \"3fe994d432b892068922190cf6b1b03544f272d39b07330d9e465c7b6dbec6cf\"" Nov 1 00:14:39.581067 systemd[1]: Started cri-containerd-3fe994d432b892068922190cf6b1b03544f272d39b07330d9e465c7b6dbec6cf.scope. Nov 1 00:14:39.653567 kernel: kauditd_printk_skb: 34 callbacks suppressed Nov 1 00:14:39.653747 kernel: audit: type=1400 audit(1761956079.642:1017): avc: denied { perfmon } for pid=4052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.642000 audit[4052]: AVC avc: denied { perfmon } for pid=4052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.642000 audit[4052]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3381 pid=4052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:39.642000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366653939346434333262383932303638393232313930636636623162 Nov 1 00:14:39.682016 kernel: audit: type=1300 audit(1761956079.642:1017): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3381 pid=4052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:39.682158 kernel: audit: type=1327 audit(1761956079.642:1017): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366653939346434333262383932303638393232313930636636623162 Nov 1 00:14:39.642000 audit[4052]: AVC avc: denied { bpf } for pid=4052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.691835 kernel: audit: type=1400 audit(1761956079.642:1018): avc: denied { bpf } for pid=4052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.642000 audit[4052]: AVC avc: denied { bpf } for pid=4052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.700514 kernel: audit: type=1400 audit(1761956079.642:1018): avc: denied { bpf } for pid=4052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.642000 audit[4052]: AVC avc: denied { bpf } for pid=4052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.642000 audit[4052]: AVC avc: denied { perfmon } for pid=4052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.720383 kernel: audit: type=1400 audit(1761956079.642:1018): avc: denied { bpf } for pid=4052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.720501 kernel: audit: type=1400 audit(1761956079.642:1018): avc: denied { perfmon } for pid=4052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.642000 audit[4052]: AVC avc: denied { perfmon } for pid=4052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.728685 kernel: audit: type=1400 audit(1761956079.642:1018): avc: denied { perfmon } for pid=4052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.642000 audit[4052]: AVC avc: denied { perfmon } for pid=4052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.642000 audit[4052]: AVC avc: denied { perfmon } for pid=4052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.746696 kernel: audit: type=1400 audit(1761956079.642:1018): avc: denied { perfmon } for pid=4052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.746831 kernel: audit: type=1400 audit(1761956079.642:1018): avc: denied { perfmon } for pid=4052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.642000 audit[4052]: AVC avc: denied { perfmon } for pid=4052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.642000 audit[4052]: AVC avc: denied { bpf } for pid=4052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.642000 audit[4052]: AVC avc: denied { bpf } for pid=4052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.642000 audit: BPF prog-id=136 op=LOAD Nov 1 00:14:39.642000 audit[4052]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3381 pid=4052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:39.750146 env[1824]: time="2025-11-01T00:14:39.749997993Z" level=info msg="StartContainer for \"3fe994d432b892068922190cf6b1b03544f272d39b07330d9e465c7b6dbec6cf\" returns successfully" Nov 1 00:14:39.642000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366653939346434333262383932303638393232313930636636623162 Nov 1 00:14:39.645000 audit[4052]: AVC avc: denied { bpf } for pid=4052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.645000 audit[4052]: AVC avc: denied { bpf } for pid=4052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.645000 audit[4052]: AVC avc: denied { perfmon } for pid=4052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.645000 audit[4052]: AVC avc: denied { perfmon } for pid=4052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.645000 audit[4052]: AVC avc: denied { perfmon } for pid=4052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.645000 audit[4052]: AVC avc: denied { perfmon } for pid=4052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.645000 audit[4052]: AVC avc: denied { perfmon } for pid=4052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.645000 audit[4052]: AVC avc: denied { bpf } for pid=4052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.645000 audit[4052]: AVC avc: denied { bpf } for pid=4052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.645000 audit: BPF prog-id=137 op=LOAD Nov 1 00:14:39.645000 audit[4052]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3381 pid=4052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:39.645000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366653939346434333262383932303638393232313930636636623162 Nov 1 00:14:39.653000 audit: BPF prog-id=137 op=UNLOAD Nov 1 00:14:39.653000 audit: BPF prog-id=136 op=UNLOAD Nov 1 00:14:39.653000 audit[4052]: AVC avc: denied { bpf } for pid=4052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.653000 audit[4052]: AVC avc: denied { bpf } for pid=4052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.653000 audit[4052]: AVC avc: denied { bpf } for pid=4052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.653000 audit[4052]: AVC avc: denied { perfmon } for pid=4052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.653000 audit[4052]: AVC avc: denied { perfmon } for pid=4052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.653000 audit[4052]: AVC avc: denied { perfmon } for pid=4052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.653000 audit[4052]: AVC avc: denied { perfmon } for pid=4052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.653000 audit[4052]: AVC avc: denied { perfmon } for pid=4052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.653000 audit[4052]: AVC avc: denied { bpf } for pid=4052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.653000 audit[4052]: AVC avc: denied { bpf } for pid=4052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.653000 audit: BPF prog-id=138 op=LOAD Nov 1 00:14:39.653000 audit[4052]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3381 pid=4052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:39.653000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366653939346434333262383932303638393232313930636636623162 Nov 1 00:14:40.004742 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Nov 1 00:14:40.004931 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Nov 1 00:14:40.224908 env[1824]: time="2025-11-01T00:14:40.224855157Z" level=info msg="StopPodSandbox for \"2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654\"" Nov 1 00:14:40.482684 kubelet[2905]: I1101 00:14:40.482466 2905 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-rbtls" podStartSLOduration=2.421059537 podStartE2EDuration="21.482441269s" podCreationTimestamp="2025-11-01 00:14:19 +0000 UTC" firstStartedPulling="2025-11-01 00:14:20.400297106 +0000 UTC m=+33.737376640" lastFinishedPulling="2025-11-01 00:14:39.46167885 +0000 UTC m=+52.798758372" observedRunningTime="2025-11-01 00:14:40.369983789 +0000 UTC m=+53.707063323" watchObservedRunningTime="2025-11-01 00:14:40.482441269 +0000 UTC m=+53.819520803" Nov 1 00:14:40.624775 env[1824]: 2025-11-01 00:14:40.485 [INFO][4104] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654" Nov 1 00:14:40.624775 env[1824]: 2025-11-01 00:14:40.499 [INFO][4104] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654" iface="eth0" netns="/var/run/netns/cni-eaf7e62c-e83b-56b7-6ef6-877bde9d6f3a" Nov 1 00:14:40.624775 env[1824]: 2025-11-01 00:14:40.499 [INFO][4104] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654" iface="eth0" netns="/var/run/netns/cni-eaf7e62c-e83b-56b7-6ef6-877bde9d6f3a" Nov 1 00:14:40.624775 env[1824]: 2025-11-01 00:14:40.501 [INFO][4104] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654" iface="eth0" netns="/var/run/netns/cni-eaf7e62c-e83b-56b7-6ef6-877bde9d6f3a" Nov 1 00:14:40.624775 env[1824]: 2025-11-01 00:14:40.501 [INFO][4104] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654" Nov 1 00:14:40.624775 env[1824]: 2025-11-01 00:14:40.501 [INFO][4104] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654" Nov 1 00:14:40.624775 env[1824]: 2025-11-01 00:14:40.594 [INFO][4127] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654" HandleID="k8s-pod-network.2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654" Workload="ip--172--31--27--146-k8s-whisker--57bcdb76fc--mdv8j-eth0" Nov 1 00:14:40.624775 env[1824]: 2025-11-01 00:14:40.594 [INFO][4127] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:14:40.624775 env[1824]: 2025-11-01 00:14:40.594 [INFO][4127] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:14:40.624775 env[1824]: 2025-11-01 00:14:40.611 [WARNING][4127] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654" HandleID="k8s-pod-network.2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654" Workload="ip--172--31--27--146-k8s-whisker--57bcdb76fc--mdv8j-eth0" Nov 1 00:14:40.624775 env[1824]: 2025-11-01 00:14:40.611 [INFO][4127] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654" HandleID="k8s-pod-network.2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654" Workload="ip--172--31--27--146-k8s-whisker--57bcdb76fc--mdv8j-eth0" Nov 1 00:14:40.624775 env[1824]: 2025-11-01 00:14:40.614 [INFO][4127] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:14:40.624775 env[1824]: 2025-11-01 00:14:40.621 [INFO][4104] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654" Nov 1 00:14:40.635701 env[1824]: time="2025-11-01T00:14:40.631282665Z" level=info msg="TearDown network for sandbox \"2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654\" successfully" Nov 1 00:14:40.635701 env[1824]: time="2025-11-01T00:14:40.631350800Z" level=info msg="StopPodSandbox for \"2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654\" returns successfully" Nov 1 00:14:40.631947 systemd[1]: run-netns-cni\x2deaf7e62c\x2de83b\x2d56b7\x2d6ef6\x2d877bde9d6f3a.mount: Deactivated successfully. Nov 1 00:14:40.677610 kubelet[2905]: I1101 00:14:40.677544 2905 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-2qrjf\" (UniqueName: \"kubernetes.io/projected/2dc2411c-b601-4108-813f-eb9901daca29-kube-api-access-2qrjf\") pod \"2dc2411c-b601-4108-813f-eb9901daca29\" (UID: \"2dc2411c-b601-4108-813f-eb9901daca29\") " Nov 1 00:14:40.678064 kubelet[2905]: I1101 00:14:40.677659 2905 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/2dc2411c-b601-4108-813f-eb9901daca29-whisker-ca-bundle\") pod \"2dc2411c-b601-4108-813f-eb9901daca29\" (UID: \"2dc2411c-b601-4108-813f-eb9901daca29\") " Nov 1 00:14:40.679046 kubelet[2905]: I1101 00:14:40.678216 2905 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/2dc2411c-b601-4108-813f-eb9901daca29-whisker-backend-key-pair\") pod \"2dc2411c-b601-4108-813f-eb9901daca29\" (UID: \"2dc2411c-b601-4108-813f-eb9901daca29\") " Nov 1 00:14:40.679802 kubelet[2905]: I1101 00:14:40.678638 2905 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/2dc2411c-b601-4108-813f-eb9901daca29-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "2dc2411c-b601-4108-813f-eb9901daca29" (UID: "2dc2411c-b601-4108-813f-eb9901daca29"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGIDValue "" Nov 1 00:14:40.692595 systemd[1]: var-lib-kubelet-pods-2dc2411c\x2db601\x2d4108\x2d813f\x2deb9901daca29-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d2qrjf.mount: Deactivated successfully. Nov 1 00:14:40.707245 kubelet[2905]: I1101 00:14:40.702482 2905 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/2dc2411c-b601-4108-813f-eb9901daca29-kube-api-access-2qrjf" (OuterVolumeSpecName: "kube-api-access-2qrjf") pod "2dc2411c-b601-4108-813f-eb9901daca29" (UID: "2dc2411c-b601-4108-813f-eb9901daca29"). InnerVolumeSpecName "kube-api-access-2qrjf". PluginName "kubernetes.io/projected", VolumeGIDValue "" Nov 1 00:14:40.708769 systemd[1]: var-lib-kubelet-pods-2dc2411c\x2db601\x2d4108\x2d813f\x2deb9901daca29-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Nov 1 00:14:40.711760 kubelet[2905]: I1101 00:14:40.711694 2905 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/2dc2411c-b601-4108-813f-eb9901daca29-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "2dc2411c-b601-4108-813f-eb9901daca29" (UID: "2dc2411c-b601-4108-813f-eb9901daca29"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGIDValue "" Nov 1 00:14:40.780584 kubelet[2905]: I1101 00:14:40.780416 2905 reconciler_common.go:299] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/2dc2411c-b601-4108-813f-eb9901daca29-whisker-ca-bundle\") on node \"ip-172-31-27-146\" DevicePath \"\"" Nov 1 00:14:40.780584 kubelet[2905]: I1101 00:14:40.780481 2905 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-2qrjf\" (UniqueName: \"kubernetes.io/projected/2dc2411c-b601-4108-813f-eb9901daca29-kube-api-access-2qrjf\") on node \"ip-172-31-27-146\" DevicePath \"\"" Nov 1 00:14:40.780584 kubelet[2905]: I1101 00:14:40.780506 2905 reconciler_common.go:299] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/2dc2411c-b601-4108-813f-eb9901daca29-whisker-backend-key-pair\") on node \"ip-172-31-27-146\" DevicePath \"\"" Nov 1 00:14:40.979998 systemd[1]: Removed slice kubepods-besteffort-pod2dc2411c_b601_4108_813f_eb9901daca29.slice. Nov 1 00:14:41.416963 systemd[1]: Created slice kubepods-besteffort-pod720f85d9_4a79_48d4_a808_29c9ff35fbd4.slice. Nov 1 00:14:41.486640 kubelet[2905]: I1101 00:14:41.486585 2905 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-nm6d2\" (UniqueName: \"kubernetes.io/projected/720f85d9-4a79-48d4-a808-29c9ff35fbd4-kube-api-access-nm6d2\") pod \"whisker-f46c6dfd5-mv69v\" (UID: \"720f85d9-4a79-48d4-a808-29c9ff35fbd4\") " pod="calico-system/whisker-f46c6dfd5-mv69v" Nov 1 00:14:41.487528 kubelet[2905]: I1101 00:14:41.487460 2905 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/720f85d9-4a79-48d4-a808-29c9ff35fbd4-whisker-backend-key-pair\") pod \"whisker-f46c6dfd5-mv69v\" (UID: \"720f85d9-4a79-48d4-a808-29c9ff35fbd4\") " pod="calico-system/whisker-f46c6dfd5-mv69v" Nov 1 00:14:41.487845 kubelet[2905]: I1101 00:14:41.487800 2905 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/720f85d9-4a79-48d4-a808-29c9ff35fbd4-whisker-ca-bundle\") pod \"whisker-f46c6dfd5-mv69v\" (UID: \"720f85d9-4a79-48d4-a808-29c9ff35fbd4\") " pod="calico-system/whisker-f46c6dfd5-mv69v" Nov 1 00:14:41.723019 env[1824]: time="2025-11-01T00:14:41.722850078Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-f46c6dfd5-mv69v,Uid:720f85d9-4a79-48d4-a808-29c9ff35fbd4,Namespace:calico-system,Attempt:0,}" Nov 1 00:14:41.951167 systemd-networkd[1549]: cali574852e79d5: Link UP Nov 1 00:14:41.955372 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Nov 1 00:14:41.955486 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali574852e79d5: link becomes ready Nov 1 00:14:41.957013 systemd-networkd[1549]: cali574852e79d5: Gained carrier Nov 1 00:14:41.957733 (udev-worker)[4195]: Network interface NamePolicy= disabled on kernel command line. Nov 1 00:14:41.988859 env[1824]: 2025-11-01 00:14:41.794 [INFO][4174] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Nov 1 00:14:41.988859 env[1824]: 2025-11-01 00:14:41.815 [INFO][4174] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--27--146-k8s-whisker--f46c6dfd5--mv69v-eth0 whisker-f46c6dfd5- calico-system 720f85d9-4a79-48d4-a808-29c9ff35fbd4 945 0 2025-11-01 00:14:41 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:f46c6dfd5 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s ip-172-31-27-146 whisker-f46c6dfd5-mv69v eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] cali574852e79d5 [] [] }} ContainerID="d148136475a716f0d0980e0714873eed58c9be90be88f875ebf7f933a3e8e8a7" Namespace="calico-system" Pod="whisker-f46c6dfd5-mv69v" WorkloadEndpoint="ip--172--31--27--146-k8s-whisker--f46c6dfd5--mv69v-" Nov 1 00:14:41.988859 env[1824]: 2025-11-01 00:14:41.815 [INFO][4174] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="d148136475a716f0d0980e0714873eed58c9be90be88f875ebf7f933a3e8e8a7" Namespace="calico-system" Pod="whisker-f46c6dfd5-mv69v" WorkloadEndpoint="ip--172--31--27--146-k8s-whisker--f46c6dfd5--mv69v-eth0" Nov 1 00:14:41.988859 env[1824]: 2025-11-01 00:14:41.869 [INFO][4187] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="d148136475a716f0d0980e0714873eed58c9be90be88f875ebf7f933a3e8e8a7" HandleID="k8s-pod-network.d148136475a716f0d0980e0714873eed58c9be90be88f875ebf7f933a3e8e8a7" Workload="ip--172--31--27--146-k8s-whisker--f46c6dfd5--mv69v-eth0" Nov 1 00:14:41.988859 env[1824]: 2025-11-01 00:14:41.869 [INFO][4187] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="d148136475a716f0d0980e0714873eed58c9be90be88f875ebf7f933a3e8e8a7" HandleID="k8s-pod-network.d148136475a716f0d0980e0714873eed58c9be90be88f875ebf7f933a3e8e8a7" Workload="ip--172--31--27--146-k8s-whisker--f46c6dfd5--mv69v-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002c9810), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-27-146", "pod":"whisker-f46c6dfd5-mv69v", "timestamp":"2025-11-01 00:14:41.869327864 +0000 UTC"}, Hostname:"ip-172-31-27-146", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:14:41.988859 env[1824]: 2025-11-01 00:14:41.869 [INFO][4187] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:14:41.988859 env[1824]: 2025-11-01 00:14:41.869 [INFO][4187] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:14:41.988859 env[1824]: 2025-11-01 00:14:41.870 [INFO][4187] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-27-146' Nov 1 00:14:41.988859 env[1824]: 2025-11-01 00:14:41.885 [INFO][4187] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.d148136475a716f0d0980e0714873eed58c9be90be88f875ebf7f933a3e8e8a7" host="ip-172-31-27-146" Nov 1 00:14:41.988859 env[1824]: 2025-11-01 00:14:41.893 [INFO][4187] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-27-146" Nov 1 00:14:41.988859 env[1824]: 2025-11-01 00:14:41.900 [INFO][4187] ipam/ipam.go 511: Trying affinity for 192.168.60.192/26 host="ip-172-31-27-146" Nov 1 00:14:41.988859 env[1824]: 2025-11-01 00:14:41.904 [INFO][4187] ipam/ipam.go 158: Attempting to load block cidr=192.168.60.192/26 host="ip-172-31-27-146" Nov 1 00:14:41.988859 env[1824]: 2025-11-01 00:14:41.908 [INFO][4187] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.60.192/26 host="ip-172-31-27-146" Nov 1 00:14:41.988859 env[1824]: 2025-11-01 00:14:41.908 [INFO][4187] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.60.192/26 handle="k8s-pod-network.d148136475a716f0d0980e0714873eed58c9be90be88f875ebf7f933a3e8e8a7" host="ip-172-31-27-146" Nov 1 00:14:41.988859 env[1824]: 2025-11-01 00:14:41.911 [INFO][4187] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.d148136475a716f0d0980e0714873eed58c9be90be88f875ebf7f933a3e8e8a7 Nov 1 00:14:41.988859 env[1824]: 2025-11-01 00:14:41.919 [INFO][4187] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.60.192/26 handle="k8s-pod-network.d148136475a716f0d0980e0714873eed58c9be90be88f875ebf7f933a3e8e8a7" host="ip-172-31-27-146" Nov 1 00:14:41.988859 env[1824]: 2025-11-01 00:14:41.929 [INFO][4187] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.60.193/26] block=192.168.60.192/26 handle="k8s-pod-network.d148136475a716f0d0980e0714873eed58c9be90be88f875ebf7f933a3e8e8a7" host="ip-172-31-27-146" Nov 1 00:14:41.988859 env[1824]: 2025-11-01 00:14:41.929 [INFO][4187] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.60.193/26] handle="k8s-pod-network.d148136475a716f0d0980e0714873eed58c9be90be88f875ebf7f933a3e8e8a7" host="ip-172-31-27-146" Nov 1 00:14:41.988859 env[1824]: 2025-11-01 00:14:41.930 [INFO][4187] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:14:41.988859 env[1824]: 2025-11-01 00:14:41.930 [INFO][4187] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.60.193/26] IPv6=[] ContainerID="d148136475a716f0d0980e0714873eed58c9be90be88f875ebf7f933a3e8e8a7" HandleID="k8s-pod-network.d148136475a716f0d0980e0714873eed58c9be90be88f875ebf7f933a3e8e8a7" Workload="ip--172--31--27--146-k8s-whisker--f46c6dfd5--mv69v-eth0" Nov 1 00:14:41.990488 env[1824]: 2025-11-01 00:14:41.933 [INFO][4174] cni-plugin/k8s.go 418: Populated endpoint ContainerID="d148136475a716f0d0980e0714873eed58c9be90be88f875ebf7f933a3e8e8a7" Namespace="calico-system" Pod="whisker-f46c6dfd5-mv69v" WorkloadEndpoint="ip--172--31--27--146-k8s-whisker--f46c6dfd5--mv69v-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--146-k8s-whisker--f46c6dfd5--mv69v-eth0", GenerateName:"whisker-f46c6dfd5-", Namespace:"calico-system", SelfLink:"", UID:"720f85d9-4a79-48d4-a808-29c9ff35fbd4", ResourceVersion:"945", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 14, 41, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"f46c6dfd5", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-146", ContainerID:"", Pod:"whisker-f46c6dfd5-mv69v", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.60.193/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali574852e79d5", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:14:41.990488 env[1824]: 2025-11-01 00:14:41.933 [INFO][4174] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.60.193/32] ContainerID="d148136475a716f0d0980e0714873eed58c9be90be88f875ebf7f933a3e8e8a7" Namespace="calico-system" Pod="whisker-f46c6dfd5-mv69v" WorkloadEndpoint="ip--172--31--27--146-k8s-whisker--f46c6dfd5--mv69v-eth0" Nov 1 00:14:41.990488 env[1824]: 2025-11-01 00:14:41.934 [INFO][4174] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali574852e79d5 ContainerID="d148136475a716f0d0980e0714873eed58c9be90be88f875ebf7f933a3e8e8a7" Namespace="calico-system" Pod="whisker-f46c6dfd5-mv69v" WorkloadEndpoint="ip--172--31--27--146-k8s-whisker--f46c6dfd5--mv69v-eth0" Nov 1 00:14:41.990488 env[1824]: 2025-11-01 00:14:41.958 [INFO][4174] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="d148136475a716f0d0980e0714873eed58c9be90be88f875ebf7f933a3e8e8a7" Namespace="calico-system" Pod="whisker-f46c6dfd5-mv69v" WorkloadEndpoint="ip--172--31--27--146-k8s-whisker--f46c6dfd5--mv69v-eth0" Nov 1 00:14:41.990488 env[1824]: 2025-11-01 00:14:41.959 [INFO][4174] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="d148136475a716f0d0980e0714873eed58c9be90be88f875ebf7f933a3e8e8a7" Namespace="calico-system" Pod="whisker-f46c6dfd5-mv69v" WorkloadEndpoint="ip--172--31--27--146-k8s-whisker--f46c6dfd5--mv69v-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--146-k8s-whisker--f46c6dfd5--mv69v-eth0", GenerateName:"whisker-f46c6dfd5-", Namespace:"calico-system", SelfLink:"", UID:"720f85d9-4a79-48d4-a808-29c9ff35fbd4", ResourceVersion:"945", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 14, 41, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"f46c6dfd5", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-146", ContainerID:"d148136475a716f0d0980e0714873eed58c9be90be88f875ebf7f933a3e8e8a7", Pod:"whisker-f46c6dfd5-mv69v", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.60.193/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali574852e79d5", MAC:"c6:09:13:a0:9f:b5", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:14:41.990488 env[1824]: 2025-11-01 00:14:41.980 [INFO][4174] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="d148136475a716f0d0980e0714873eed58c9be90be88f875ebf7f933a3e8e8a7" Namespace="calico-system" Pod="whisker-f46c6dfd5-mv69v" WorkloadEndpoint="ip--172--31--27--146-k8s-whisker--f46c6dfd5--mv69v-eth0" Nov 1 00:14:42.014290 env[1824]: time="2025-11-01T00:14:42.014103322Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:14:42.014607 env[1824]: time="2025-11-01T00:14:42.014229691Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:14:42.014607 env[1824]: time="2025-11-01T00:14:42.014276526Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:14:42.014786 env[1824]: time="2025-11-01T00:14:42.014610984Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d148136475a716f0d0980e0714873eed58c9be90be88f875ebf7f933a3e8e8a7 pid=4211 runtime=io.containerd.runc.v2 Nov 1 00:14:42.036639 systemd[1]: Started cri-containerd-d148136475a716f0d0980e0714873eed58c9be90be88f875ebf7f933a3e8e8a7.scope. Nov 1 00:14:42.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:42.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:42.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:42.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:42.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:42.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:42.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:42.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:42.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:42.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:42.108000 audit: BPF prog-id=139 op=LOAD Nov 1 00:14:42.109000 audit[4221]: AVC avc: denied { bpf } for pid=4221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:42.109000 audit[4221]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4211 pid=4221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:42.109000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431343831333634373561373136663064303938306530373134383733 Nov 1 00:14:42.110000 audit[4221]: AVC avc: denied { perfmon } for pid=4221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:42.110000 audit[4221]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4211 pid=4221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:42.110000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431343831333634373561373136663064303938306530373134383733 Nov 1 00:14:42.110000 audit[4221]: AVC avc: denied { bpf } for pid=4221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:42.110000 audit[4221]: AVC avc: denied { bpf } for pid=4221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:42.110000 audit[4221]: AVC avc: denied { bpf } for pid=4221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:42.110000 audit[4221]: AVC avc: denied { perfmon } for pid=4221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:42.110000 audit[4221]: AVC avc: denied { perfmon } for pid=4221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:42.110000 audit[4221]: AVC avc: denied { perfmon } for pid=4221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:42.110000 audit[4221]: AVC avc: denied { perfmon } for pid=4221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:42.110000 audit[4221]: AVC avc: denied { perfmon } for pid=4221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:42.110000 audit[4221]: AVC avc: denied { bpf } for pid=4221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:42.110000 audit[4221]: AVC avc: denied { bpf } for pid=4221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:42.110000 audit: BPF prog-id=140 op=LOAD Nov 1 00:14:42.110000 audit[4221]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4211 pid=4221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:42.110000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431343831333634373561373136663064303938306530373134383733 Nov 1 00:14:42.112000 audit[4221]: AVC avc: denied { bpf } for pid=4221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:42.112000 audit[4221]: AVC avc: denied { bpf } for pid=4221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:42.112000 audit[4221]: AVC avc: denied { perfmon } for pid=4221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:42.112000 audit[4221]: AVC avc: denied { perfmon } for pid=4221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:42.112000 audit[4221]: AVC avc: denied { perfmon } for pid=4221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:42.112000 audit[4221]: AVC avc: denied { perfmon } for pid=4221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:42.112000 audit[4221]: AVC avc: denied { perfmon } for pid=4221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:42.112000 audit[4221]: AVC avc: denied { bpf } for pid=4221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:42.112000 audit[4221]: AVC avc: denied { bpf } for pid=4221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:42.112000 audit: BPF prog-id=141 op=LOAD Nov 1 00:14:42.112000 audit[4221]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4211 pid=4221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:42.112000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431343831333634373561373136663064303938306530373134383733 Nov 1 00:14:42.115000 audit: BPF prog-id=141 op=UNLOAD Nov 1 00:14:42.115000 audit: BPF prog-id=140 op=UNLOAD Nov 1 00:14:42.115000 audit[4221]: AVC avc: denied { bpf } for pid=4221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:42.115000 audit[4221]: AVC avc: denied { bpf } for pid=4221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:42.115000 audit[4221]: AVC avc: denied { bpf } for pid=4221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:42.115000 audit[4221]: AVC avc: denied { perfmon } for pid=4221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:42.115000 audit[4221]: AVC avc: denied { perfmon } for pid=4221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:42.115000 audit[4221]: AVC avc: denied { perfmon } for pid=4221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:42.115000 audit[4221]: AVC avc: denied { perfmon } for pid=4221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:42.115000 audit[4221]: AVC avc: denied { perfmon } for pid=4221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:42.115000 audit[4221]: AVC avc: denied { bpf } for pid=4221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:42.115000 audit[4221]: AVC avc: denied { bpf } for pid=4221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:42.115000 audit: BPF prog-id=142 op=LOAD Nov 1 00:14:42.115000 audit[4221]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4211 pid=4221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:42.115000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431343831333634373561373136663064303938306530373134383733 Nov 1 00:14:42.157000 audit[2573]: AVC avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7160 scontext=system_u:system_r:svirt_lxc_net_t:s0:c567,c697 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:14:42.157000 audit[2573]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000ce0060 a2=fc6 a3=0 items=0 ppid=2411 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c567,c697 key=(null) Nov 1 00:14:42.157000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:14:42.157000 audit[2573]: AVC avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=5907 scontext=system_u:system_r:svirt_lxc_net_t:s0:c567,c697 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:14:42.157000 audit[2573]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40017bbaa0 a2=fc6 a3=0 items=0 ppid=2411 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c567,c697 key=(null) Nov 1 00:14:42.157000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:14:42.159000 audit[4275]: AVC avc: denied { write } for pid=4275 comm="tee" name="fd" dev="proc" ino=23123 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:14:42.159000 audit[4275]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffdaf567db a2=241 a3=1b6 items=1 ppid=4259 pid=4275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:42.159000 audit: CWD cwd="/etc/service/enabled/felix/log" Nov 1 00:14:42.159000 audit: PATH item=0 name="/dev/fd/63" inode=23116 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:14:42.159000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:14:42.263051 env[1824]: time="2025-11-01T00:14:42.262859257Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-f46c6dfd5-mv69v,Uid:720f85d9-4a79-48d4-a808-29c9ff35fbd4,Namespace:calico-system,Attempt:0,} returns sandbox id \"d148136475a716f0d0980e0714873eed58c9be90be88f875ebf7f933a3e8e8a7\"" Nov 1 00:14:42.271572 env[1824]: time="2025-11-01T00:14:42.271497392Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Nov 1 00:14:42.320000 audit[4295]: AVC avc: denied { write } for pid=4295 comm="tee" name="fd" dev="proc" ino=23164 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:14:42.320000 audit[4295]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd54707cc a2=241 a3=1b6 items=1 ppid=4249 pid=4295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:42.320000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Nov 1 00:14:42.320000 audit: PATH item=0 name="/dev/fd/63" inode=23138 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:14:42.320000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:14:42.352000 audit[4306]: AVC avc: denied { write } for pid=4306 comm="tee" name="fd" dev="proc" ino=21951 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:14:42.360000 audit[4310]: AVC avc: denied { write } for pid=4310 comm="tee" name="fd" dev="proc" ino=21955 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:14:42.361000 audit[4321]: AVC avc: denied { write } for pid=4321 comm="tee" name="fd" dev="proc" ino=23174 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:14:42.361000 audit[4321]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe9f787db a2=241 a3=1b6 items=1 ppid=4251 pid=4321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:42.361000 audit: CWD cwd="/etc/service/enabled/bird6/log" Nov 1 00:14:42.361000 audit: PATH item=0 name="/dev/fd/63" inode=21952 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:14:42.361000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:14:42.352000 audit[4306]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffce8447cb a2=241 a3=1b6 items=1 ppid=4244 pid=4306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:42.352000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Nov 1 00:14:42.352000 audit: PATH item=0 name="/dev/fd/63" inode=23159 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:14:42.352000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:14:42.371000 audit[4312]: AVC avc: denied { write } for pid=4312 comm="tee" name="fd" dev="proc" ino=21959 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:14:42.360000 audit[4310]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff19ff7dc a2=241 a3=1b6 items=1 ppid=4239 pid=4310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:42.360000 audit: CWD cwd="/etc/service/enabled/bird/log" Nov 1 00:14:42.360000 audit: PATH item=0 name="/dev/fd/63" inode=21943 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:14:42.360000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:14:42.371000 audit[4312]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffeb4237db a2=241 a3=1b6 items=1 ppid=4240 pid=4312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:42.371000 audit: CWD cwd="/etc/service/enabled/confd/log" Nov 1 00:14:42.371000 audit: PATH item=0 name="/dev/fd/63" inode=21944 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:14:42.371000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:14:42.382000 audit[4327]: AVC avc: denied { write } for pid=4327 comm="tee" name="fd" dev="proc" ino=23181 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:14:42.382000 audit[4327]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd9b147dd a2=241 a3=1b6 items=1 ppid=4277 pid=4327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:42.382000 audit: CWD cwd="/etc/service/enabled/cni/log" Nov 1 00:14:42.382000 audit: PATH item=0 name="/dev/fd/63" inode=23178 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:14:42.382000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:14:42.534158 env[1824]: time="2025-11-01T00:14:42.533946133Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:14:42.536590 env[1824]: time="2025-11-01T00:14:42.536436707Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Nov 1 00:14:42.538190 kubelet[2905]: E1101 00:14:42.537062 2905 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:14:42.538190 kubelet[2905]: E1101 00:14:42.537208 2905 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:14:42.538950 kubelet[2905]: E1101 00:14:42.538035 2905 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.4,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:6a25b9b39c124274af2d764b4547d5b9,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-nm6d2,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-f46c6dfd5-mv69v_calico-system(720f85d9-4a79-48d4-a808-29c9ff35fbd4): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Nov 1 00:14:42.541352 env[1824]: time="2025-11-01T00:14:42.540865182Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Nov 1 00:14:42.587000 audit[2585]: AVC avc: denied { watch } for pid=2585 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7160 scontext=system_u:system_r:svirt_lxc_net_t:s0:c230,c788 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:14:42.587000 audit[2585]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=68 a1=4001515290 a2=fc6 a3=0 items=0 ppid=2430 pid=2585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c230,c788 key=(null) Nov 1 00:14:42.587000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313436002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Nov 1 00:14:42.600000 audit[2585]: AVC avc: denied { watch } for pid=2585 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=5907 scontext=system_u:system_r:svirt_lxc_net_t:s0:c230,c788 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:14:42.600000 audit[2585]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=69 a1=4004ff28a0 a2=fc6 a3=0 items=0 ppid=2430 pid=2585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c230,c788 key=(null) Nov 1 00:14:42.600000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313436002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Nov 1 00:14:42.617000 audit[2585]: AVC avc: denied { watch } for pid=2585 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=5910 scontext=system_u:system_r:svirt_lxc_net_t:s0:c230,c788 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:14:42.617000 audit[2585]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=69 a1=40061e54a0 a2=fc6 a3=0 items=0 ppid=2430 pid=2585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c230,c788 key=(null) Nov 1 00:14:42.617000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313436002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Nov 1 00:14:42.721000 audit[2585]: AVC avc: denied { watch } for pid=2585 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=7162 scontext=system_u:system_r:svirt_lxc_net_t:s0:c230,c788 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:14:42.721000 audit[2585]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6a a1=4008246a50 a2=fc6 a3=0 items=0 ppid=2430 pid=2585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c230,c788 key=(null) Nov 1 00:14:42.721000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313436002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Nov 1 00:14:42.722000 audit[2585]: AVC avc: denied { watch } for pid=2585 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=5907 scontext=system_u:system_r:svirt_lxc_net_t:s0:c230,c788 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:14:42.722000 audit[2585]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6a a1=4004b700e0 a2=fc6 a3=0 items=0 ppid=2430 pid=2585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c230,c788 key=(null) Nov 1 00:14:42.722000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313436002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Nov 1 00:14:42.722000 audit[2585]: AVC avc: denied { watch } for pid=2585 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7160 scontext=system_u:system_r:svirt_lxc_net_t:s0:c230,c788 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:14:42.722000 audit[2585]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6a a1=4008246b70 a2=fc6 a3=0 items=0 ppid=2430 pid=2585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c230,c788 key=(null) Nov 1 00:14:42.722000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313436002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Nov 1 00:14:42.782966 env[1824]: time="2025-11-01T00:14:42.782890716Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:14:42.784143 env[1824]: time="2025-11-01T00:14:42.784028473Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Nov 1 00:14:42.784822 kubelet[2905]: E1101 00:14:42.784654 2905 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:14:42.785073 kubelet[2905]: E1101 00:14:42.785016 2905 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:14:42.786072 kubelet[2905]: E1101 00:14:42.785664 2905 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-nm6d2,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-f46c6dfd5-mv69v_calico-system(720f85d9-4a79-48d4-a808-29c9ff35fbd4): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Nov 1 00:14:42.788558 kubelet[2905]: E1101 00:14:42.788471 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-f46c6dfd5-mv69v" podUID="720f85d9-4a79-48d4-a808-29c9ff35fbd4" Nov 1 00:14:43.007475 kubelet[2905]: I1101 00:14:43.007421 2905 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="2dc2411c-b601-4108-813f-eb9901daca29" path="/var/lib/kubelet/pods/2dc2411c-b601-4108-813f-eb9901daca29/volumes" Nov 1 00:14:43.178000 audit[4363]: AVC avc: denied { bpf } for pid=4363 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.178000 audit[4363]: AVC avc: denied { bpf } for pid=4363 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.178000 audit[4363]: AVC avc: denied { perfmon } for pid=4363 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.178000 audit[4363]: AVC avc: denied { perfmon } for pid=4363 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.178000 audit[4363]: AVC avc: denied { perfmon } for pid=4363 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.178000 audit[4363]: AVC avc: denied { perfmon } for pid=4363 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.178000 audit[4363]: AVC avc: denied { perfmon } for pid=4363 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.178000 audit[4363]: AVC avc: denied { bpf } for pid=4363 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.178000 audit[4363]: AVC avc: denied { bpf } for pid=4363 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.178000 audit: BPF prog-id=143 op=LOAD Nov 1 00:14:43.178000 audit[4363]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd1d24138 a2=98 a3=ffffd1d24128 items=0 ppid=4273 pid=4363 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.178000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Nov 1 00:14:43.183000 audit: BPF prog-id=143 op=UNLOAD Nov 1 00:14:43.183000 audit[4363]: AVC avc: denied { bpf } for pid=4363 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.183000 audit[4363]: AVC avc: denied { bpf } for pid=4363 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.183000 audit[4363]: AVC avc: denied { perfmon } for pid=4363 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.183000 audit[4363]: AVC avc: denied { perfmon } for pid=4363 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.183000 audit[4363]: AVC avc: denied { perfmon } for pid=4363 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.183000 audit[4363]: AVC avc: denied { perfmon } for pid=4363 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.183000 audit[4363]: AVC avc: denied { perfmon } for pid=4363 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.183000 audit[4363]: AVC avc: denied { bpf } for pid=4363 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.183000 audit[4363]: AVC avc: denied { bpf } for pid=4363 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.183000 audit: BPF prog-id=144 op=LOAD Nov 1 00:14:43.183000 audit[4363]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd1d23fe8 a2=74 a3=95 items=0 ppid=4273 pid=4363 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.183000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Nov 1 00:14:43.186000 audit: BPF prog-id=144 op=UNLOAD Nov 1 00:14:43.186000 audit[4363]: AVC avc: denied { bpf } for pid=4363 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.186000 audit[4363]: AVC avc: denied { bpf } for pid=4363 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.186000 audit[4363]: AVC avc: denied { perfmon } for pid=4363 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.186000 audit[4363]: AVC avc: denied { perfmon } for pid=4363 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.186000 audit[4363]: AVC avc: denied { perfmon } for pid=4363 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.186000 audit[4363]: AVC avc: denied { perfmon } for pid=4363 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.186000 audit[4363]: AVC avc: denied { perfmon } for pid=4363 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.186000 audit[4363]: AVC avc: denied { bpf } for pid=4363 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.186000 audit[4363]: AVC avc: denied { bpf } for pid=4363 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.186000 audit: BPF prog-id=145 op=LOAD Nov 1 00:14:43.186000 audit[4363]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd1d24018 a2=40 a3=ffffd1d24048 items=0 ppid=4273 pid=4363 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.186000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Nov 1 00:14:43.190000 audit: BPF prog-id=145 op=UNLOAD Nov 1 00:14:43.190000 audit[4363]: AVC avc: denied { perfmon } for pid=4363 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.190000 audit[4363]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=0 a1=ffffd1d24130 a2=50 a3=0 items=0 ppid=4273 pid=4363 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.190000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Nov 1 00:14:43.193000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.193000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.193000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.193000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.193000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.193000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.193000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.193000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.193000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.193000 audit: BPF prog-id=146 op=LOAD Nov 1 00:14:43.193000 audit[4364]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd3ba0838 a2=98 a3=ffffd3ba0828 items=0 ppid=4273 pid=4364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.193000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:14:43.193000 audit: BPF prog-id=146 op=UNLOAD Nov 1 00:14:43.194000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.194000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.194000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.194000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.194000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.194000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.194000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.194000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.194000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.194000 audit: BPF prog-id=147 op=LOAD Nov 1 00:14:43.194000 audit[4364]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffd3ba04c8 a2=74 a3=95 items=0 ppid=4273 pid=4364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.194000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:14:43.194000 audit: BPF prog-id=147 op=UNLOAD Nov 1 00:14:43.194000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.194000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.194000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.194000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.194000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.194000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.194000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.194000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.194000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.194000 audit: BPF prog-id=148 op=LOAD Nov 1 00:14:43.194000 audit[4364]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffd3ba0528 a2=94 a3=2 items=0 ppid=4273 pid=4364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.194000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:14:43.194000 audit: BPF prog-id=148 op=UNLOAD Nov 1 00:14:43.297499 kubelet[2905]: E1101 00:14:43.297369 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-f46c6dfd5-mv69v" podUID="720f85d9-4a79-48d4-a808-29c9ff35fbd4" Nov 1 00:14:43.366000 audit[4367]: NETFILTER_CFG table=filter:107 family=2 entries=20 op=nft_register_rule pid=4367 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:14:43.366000 audit[4367]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffc86881b0 a2=0 a3=1 items=0 ppid=3030 pid=4367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.366000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:14:43.370000 audit[4367]: NETFILTER_CFG table=nat:108 family=2 entries=14 op=nft_register_rule pid=4367 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:14:43.370000 audit[4367]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3468 a0=3 a1=ffffc86881b0 a2=0 a3=1 items=0 ppid=3030 pid=4367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.370000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:14:43.394000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.394000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.394000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.394000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.394000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.394000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.394000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.394000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.394000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.394000 audit: BPF prog-id=149 op=LOAD Nov 1 00:14:43.394000 audit[4364]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffd3ba04e8 a2=40 a3=ffffd3ba0518 items=0 ppid=4273 pid=4364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.394000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:14:43.394000 audit: BPF prog-id=149 op=UNLOAD Nov 1 00:14:43.394000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.394000 audit[4364]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffd3ba0600 a2=50 a3=0 items=0 ppid=4273 pid=4364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.394000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:14:43.410000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.410000 audit[4364]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd3ba0558 a2=28 a3=ffffd3ba0688 items=0 ppid=4273 pid=4364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.410000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:14:43.411000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.411000 audit[4364]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd3ba0588 a2=28 a3=ffffd3ba06b8 items=0 ppid=4273 pid=4364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.411000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:14:43.411000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.411000 audit[4364]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd3ba0438 a2=28 a3=ffffd3ba0568 items=0 ppid=4273 pid=4364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.411000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:14:43.411000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.411000 audit[4364]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd3ba05a8 a2=28 a3=ffffd3ba06d8 items=0 ppid=4273 pid=4364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.411000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:14:43.411000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.411000 audit[4364]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd3ba0588 a2=28 a3=ffffd3ba06b8 items=0 ppid=4273 pid=4364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.411000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:14:43.411000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.411000 audit[4364]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd3ba0578 a2=28 a3=ffffd3ba06a8 items=0 ppid=4273 pid=4364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.411000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:14:43.411000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.411000 audit[4364]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd3ba05a8 a2=28 a3=ffffd3ba06d8 items=0 ppid=4273 pid=4364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.411000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:14:43.411000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.411000 audit[4364]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd3ba0588 a2=28 a3=ffffd3ba06b8 items=0 ppid=4273 pid=4364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.411000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:14:43.411000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.411000 audit[4364]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd3ba05a8 a2=28 a3=ffffd3ba06d8 items=0 ppid=4273 pid=4364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.411000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:14:43.411000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.411000 audit[4364]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd3ba0578 a2=28 a3=ffffd3ba06a8 items=0 ppid=4273 pid=4364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.411000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:14:43.411000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.411000 audit[4364]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd3ba05f8 a2=28 a3=ffffd3ba0738 items=0 ppid=4273 pid=4364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.411000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:14:43.411000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.411000 audit[4364]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffd3ba0330 a2=50 a3=0 items=0 ppid=4273 pid=4364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.411000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:14:43.411000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.411000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.411000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.411000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.411000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.411000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.411000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.411000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.411000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.411000 audit: BPF prog-id=150 op=LOAD Nov 1 00:14:43.411000 audit[4364]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffd3ba0338 a2=94 a3=5 items=0 ppid=4273 pid=4364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.411000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:14:43.411000 audit: BPF prog-id=150 op=UNLOAD Nov 1 00:14:43.411000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.411000 audit[4364]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffd3ba0440 a2=50 a3=0 items=0 ppid=4273 pid=4364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.411000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:14:43.411000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.411000 audit[4364]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffd3ba0588 a2=4 a3=3 items=0 ppid=4273 pid=4364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.411000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:14:43.411000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.411000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.411000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.411000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.411000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.411000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.411000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.411000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.411000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.411000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.411000 audit[4364]: AVC avc: denied { confidentiality } for pid=4364 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:14:43.411000 audit[4364]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffd3ba0568 a2=94 a3=6 items=0 ppid=4273 pid=4364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.411000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:14:43.412000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.412000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.412000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.412000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.412000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.412000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.412000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.412000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.412000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.412000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.412000 audit[4364]: AVC avc: denied { confidentiality } for pid=4364 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:14:43.412000 audit[4364]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffd3b9fd38 a2=94 a3=83 items=0 ppid=4273 pid=4364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.412000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:14:43.412000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.412000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.412000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.412000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.412000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.412000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.412000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.412000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.412000 audit[4364]: AVC avc: denied { perfmon } for pid=4364 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.412000 audit[4364]: AVC avc: denied { bpf } for pid=4364 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.412000 audit[4364]: AVC avc: denied { confidentiality } for pid=4364 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:14:43.412000 audit[4364]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffd3b9fd38 a2=94 a3=83 items=0 ppid=4273 pid=4364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.412000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:14:43.434000 audit[4370]: AVC avc: denied { bpf } for pid=4370 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.434000 audit[4370]: AVC avc: denied { bpf } for pid=4370 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.434000 audit[4370]: AVC avc: denied { perfmon } for pid=4370 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.434000 audit[4370]: AVC avc: denied { perfmon } for pid=4370 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.434000 audit[4370]: AVC avc: denied { perfmon } for pid=4370 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.434000 audit[4370]: AVC avc: denied { perfmon } for pid=4370 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.434000 audit[4370]: AVC avc: denied { perfmon } for pid=4370 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.434000 audit[4370]: AVC avc: denied { bpf } for pid=4370 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.434000 audit[4370]: AVC avc: denied { bpf } for pid=4370 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.434000 audit: BPF prog-id=151 op=LOAD Nov 1 00:14:43.434000 audit[4370]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffc8746118 a2=98 a3=ffffc8746108 items=0 ppid=4273 pid=4370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.434000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Nov 1 00:14:43.436000 audit: BPF prog-id=151 op=UNLOAD Nov 1 00:14:43.436000 audit[4370]: AVC avc: denied { bpf } for pid=4370 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.436000 audit[4370]: AVC avc: denied { bpf } for pid=4370 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.436000 audit[4370]: AVC avc: denied { perfmon } for pid=4370 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.436000 audit[4370]: AVC avc: denied { perfmon } for pid=4370 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.436000 audit[4370]: AVC avc: denied { perfmon } for pid=4370 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.436000 audit[4370]: AVC avc: denied { perfmon } for pid=4370 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.436000 audit[4370]: AVC avc: denied { perfmon } for pid=4370 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.436000 audit[4370]: AVC avc: denied { bpf } for pid=4370 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.436000 audit[4370]: AVC avc: denied { bpf } for pid=4370 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.436000 audit: BPF prog-id=152 op=LOAD Nov 1 00:14:43.436000 audit[4370]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffc8745fc8 a2=74 a3=95 items=0 ppid=4273 pid=4370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.436000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Nov 1 00:14:43.438000 audit: BPF prog-id=152 op=UNLOAD Nov 1 00:14:43.438000 audit[4370]: AVC avc: denied { bpf } for pid=4370 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.438000 audit[4370]: AVC avc: denied { bpf } for pid=4370 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.438000 audit[4370]: AVC avc: denied { perfmon } for pid=4370 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.438000 audit[4370]: AVC avc: denied { perfmon } for pid=4370 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.438000 audit[4370]: AVC avc: denied { perfmon } for pid=4370 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.438000 audit[4370]: AVC avc: denied { perfmon } for pid=4370 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.438000 audit[4370]: AVC avc: denied { perfmon } for pid=4370 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.438000 audit[4370]: AVC avc: denied { bpf } for pid=4370 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.438000 audit[4370]: AVC avc: denied { bpf } for pid=4370 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.438000 audit: BPF prog-id=153 op=LOAD Nov 1 00:14:43.438000 audit[4370]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffc8745ff8 a2=40 a3=ffffc8746028 items=0 ppid=4273 pid=4370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.438000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Nov 1 00:14:43.439000 audit: BPF prog-id=153 op=UNLOAD Nov 1 00:14:43.554510 (udev-worker)[4082]: Network interface NamePolicy= disabled on kernel command line. Nov 1 00:14:43.563475 systemd-networkd[1549]: vxlan.calico: Link UP Nov 1 00:14:43.563490 systemd-networkd[1549]: vxlan.calico: Gained carrier Nov 1 00:14:43.609000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.609000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.609000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.609000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.609000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.609000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.609000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.609000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.609000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.609000 audit: BPF prog-id=154 op=LOAD Nov 1 00:14:43.609000 audit[4396]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffcff23d88 a2=98 a3=ffffcff23d78 items=0 ppid=4273 pid=4396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.609000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:14:43.609000 audit: BPF prog-id=154 op=UNLOAD Nov 1 00:14:43.609000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.609000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.609000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.609000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.609000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.609000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.609000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.609000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.609000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.609000 audit: BPF prog-id=155 op=LOAD Nov 1 00:14:43.609000 audit[4396]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffcff23a68 a2=74 a3=95 items=0 ppid=4273 pid=4396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.609000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:14:43.610000 audit: BPF prog-id=155 op=UNLOAD Nov 1 00:14:43.610000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.610000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.610000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.610000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.610000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.610000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.610000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.610000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.610000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.610000 audit: BPF prog-id=156 op=LOAD Nov 1 00:14:43.610000 audit[4396]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffcff23ac8 a2=94 a3=2 items=0 ppid=4273 pid=4396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.610000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:14:43.610000 audit: BPF prog-id=156 op=UNLOAD Nov 1 00:14:43.610000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.610000 audit[4396]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffcff23af8 a2=28 a3=ffffcff23c28 items=0 ppid=4273 pid=4396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.610000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:14:43.610000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.610000 audit[4396]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcff23b28 a2=28 a3=ffffcff23c58 items=0 ppid=4273 pid=4396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.610000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:14:43.610000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.610000 audit[4396]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcff239d8 a2=28 a3=ffffcff23b08 items=0 ppid=4273 pid=4396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.610000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:14:43.610000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.610000 audit[4396]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffcff23b48 a2=28 a3=ffffcff23c78 items=0 ppid=4273 pid=4396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.610000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:14:43.610000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.610000 audit[4396]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffcff23b28 a2=28 a3=ffffcff23c58 items=0 ppid=4273 pid=4396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.610000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:14:43.610000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.610000 audit[4396]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffcff23b18 a2=28 a3=ffffcff23c48 items=0 ppid=4273 pid=4396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.610000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:14:43.611000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.611000 audit[4396]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffcff23b48 a2=28 a3=ffffcff23c78 items=0 ppid=4273 pid=4396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.611000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:14:43.611000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.611000 audit[4396]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcff23b28 a2=28 a3=ffffcff23c58 items=0 ppid=4273 pid=4396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.611000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:14:43.611000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.611000 audit[4396]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcff23b48 a2=28 a3=ffffcff23c78 items=0 ppid=4273 pid=4396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.611000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:14:43.611000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.611000 audit[4396]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcff23b18 a2=28 a3=ffffcff23c48 items=0 ppid=4273 pid=4396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.611000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:14:43.611000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.611000 audit[4396]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffcff23b98 a2=28 a3=ffffcff23cd8 items=0 ppid=4273 pid=4396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.611000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:14:43.611000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.611000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.611000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.611000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.611000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.611000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.611000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.611000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.611000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.611000 audit: BPF prog-id=157 op=LOAD Nov 1 00:14:43.611000 audit[4396]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffcff239b8 a2=40 a3=ffffcff239e8 items=0 ppid=4273 pid=4396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.611000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:14:43.611000 audit: BPF prog-id=157 op=UNLOAD Nov 1 00:14:43.612000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.612000 audit[4396]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=0 a1=ffffcff239e0 a2=50 a3=0 items=0 ppid=4273 pid=4396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.612000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:14:43.612000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.612000 audit[4396]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=0 a1=ffffcff239e0 a2=50 a3=0 items=0 ppid=4273 pid=4396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.612000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:14:43.612000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.612000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.612000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.612000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.612000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.612000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.612000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.612000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.612000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.612000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.612000 audit: BPF prog-id=158 op=LOAD Nov 1 00:14:43.612000 audit[4396]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffcff23148 a2=94 a3=2 items=0 ppid=4273 pid=4396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.612000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:14:43.613000 audit: BPF prog-id=158 op=UNLOAD Nov 1 00:14:43.613000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.613000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.613000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.613000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.613000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.613000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.613000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.613000 audit[4396]: AVC avc: denied { perfmon } for pid=4396 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.613000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.613000 audit[4396]: AVC avc: denied { bpf } for pid=4396 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.613000 audit: BPF prog-id=159 op=LOAD Nov 1 00:14:43.613000 audit[4396]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffcff232d8 a2=94 a3=30 items=0 ppid=4273 pid=4396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.613000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:14:43.619000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.619000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.619000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.619000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.619000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.619000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.619000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.619000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.619000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.619000 audit: BPF prog-id=160 op=LOAD Nov 1 00:14:43.619000 audit[4398]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffeadd7a98 a2=98 a3=ffffeadd7a88 items=0 ppid=4273 pid=4398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.619000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:14:43.619000 audit: BPF prog-id=160 op=UNLOAD Nov 1 00:14:43.620000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.620000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.620000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.620000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.620000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.620000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.620000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.620000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.620000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.620000 audit: BPF prog-id=161 op=LOAD Nov 1 00:14:43.620000 audit[4398]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffeadd7728 a2=74 a3=95 items=0 ppid=4273 pid=4398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.620000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:14:43.620000 audit: BPF prog-id=161 op=UNLOAD Nov 1 00:14:43.620000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.620000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.620000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.620000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.620000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.620000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.620000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.620000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.620000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.620000 audit: BPF prog-id=162 op=LOAD Nov 1 00:14:43.620000 audit[4398]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffeadd7788 a2=94 a3=2 items=0 ppid=4273 pid=4398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.620000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:14:43.620000 audit: BPF prog-id=162 op=UNLOAD Nov 1 00:14:43.782355 systemd-networkd[1549]: cali574852e79d5: Gained IPv6LL Nov 1 00:14:43.826000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.826000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.826000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.826000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.826000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.826000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.826000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.826000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.826000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.826000 audit: BPF prog-id=163 op=LOAD Nov 1 00:14:43.826000 audit[4398]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffeadd7748 a2=40 a3=ffffeadd7778 items=0 ppid=4273 pid=4398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.826000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:14:43.826000 audit: BPF prog-id=163 op=UNLOAD Nov 1 00:14:43.826000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.826000 audit[4398]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffeadd7860 a2=50 a3=0 items=0 ppid=4273 pid=4398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.826000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:14:43.845000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.845000 audit[4398]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffeadd77b8 a2=28 a3=ffffeadd78e8 items=0 ppid=4273 pid=4398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.845000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:14:43.845000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.845000 audit[4398]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffeadd77e8 a2=28 a3=ffffeadd7918 items=0 ppid=4273 pid=4398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.845000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:14:43.845000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.845000 audit[4398]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffeadd7698 a2=28 a3=ffffeadd77c8 items=0 ppid=4273 pid=4398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.845000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:14:43.845000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.845000 audit[4398]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffeadd7808 a2=28 a3=ffffeadd7938 items=0 ppid=4273 pid=4398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.845000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:14:43.845000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.845000 audit[4398]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffeadd77e8 a2=28 a3=ffffeadd7918 items=0 ppid=4273 pid=4398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.845000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:14:43.845000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.845000 audit[4398]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffeadd77d8 a2=28 a3=ffffeadd7908 items=0 ppid=4273 pid=4398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.845000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:14:43.846000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.846000 audit[4398]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffeadd7808 a2=28 a3=ffffeadd7938 items=0 ppid=4273 pid=4398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.846000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:14:43.846000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.846000 audit[4398]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffeadd77e8 a2=28 a3=ffffeadd7918 items=0 ppid=4273 pid=4398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.846000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:14:43.846000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.846000 audit[4398]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffeadd7808 a2=28 a3=ffffeadd7938 items=0 ppid=4273 pid=4398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.846000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:14:43.846000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.846000 audit[4398]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffeadd77d8 a2=28 a3=ffffeadd7908 items=0 ppid=4273 pid=4398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.846000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:14:43.846000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.846000 audit[4398]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffeadd7858 a2=28 a3=ffffeadd7998 items=0 ppid=4273 pid=4398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.846000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:14:43.846000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.846000 audit[4398]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffeadd7590 a2=50 a3=0 items=0 ppid=4273 pid=4398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.846000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:14:43.846000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.846000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.846000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.846000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.846000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.846000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.846000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.846000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.846000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.846000 audit: BPF prog-id=164 op=LOAD Nov 1 00:14:43.846000 audit[4398]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffeadd7598 a2=94 a3=5 items=0 ppid=4273 pid=4398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.846000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:14:43.847000 audit: BPF prog-id=164 op=UNLOAD Nov 1 00:14:43.847000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.847000 audit[4398]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffeadd76a0 a2=50 a3=0 items=0 ppid=4273 pid=4398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.847000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:14:43.847000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.847000 audit[4398]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffeadd77e8 a2=4 a3=3 items=0 ppid=4273 pid=4398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.847000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:14:43.847000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.847000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.847000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.847000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.847000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.847000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.847000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.847000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.847000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.847000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.847000 audit[4398]: AVC avc: denied { confidentiality } for pid=4398 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:14:43.847000 audit[4398]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffeadd77c8 a2=94 a3=6 items=0 ppid=4273 pid=4398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.847000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:14:43.847000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.847000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.847000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.847000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.847000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.847000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.847000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.847000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.847000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.847000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.847000 audit[4398]: AVC avc: denied { confidentiality } for pid=4398 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:14:43.847000 audit[4398]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffeadd6f98 a2=94 a3=83 items=0 ppid=4273 pid=4398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.847000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:14:43.848000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.848000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.848000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.848000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.848000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.848000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.848000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.848000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.848000 audit[4398]: AVC avc: denied { perfmon } for pid=4398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.848000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.848000 audit[4398]: AVC avc: denied { confidentiality } for pid=4398 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:14:43.848000 audit[4398]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffeadd6f98 a2=94 a3=83 items=0 ppid=4273 pid=4398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.848000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:14:43.849000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.849000 audit[4398]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffeadd89d8 a2=10 a3=ffffeadd8ac8 items=0 ppid=4273 pid=4398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.849000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:14:43.849000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.849000 audit[4398]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffeadd8898 a2=10 a3=ffffeadd8988 items=0 ppid=4273 pid=4398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.849000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:14:43.849000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.849000 audit[4398]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffeadd8808 a2=10 a3=ffffeadd8988 items=0 ppid=4273 pid=4398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.849000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:14:43.849000 audit[4398]: AVC avc: denied { bpf } for pid=4398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.849000 audit[4398]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffeadd8808 a2=10 a3=ffffeadd8988 items=0 ppid=4273 pid=4398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.849000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:14:43.858000 audit: BPF prog-id=159 op=UNLOAD Nov 1 00:14:43.953000 audit[4422]: NETFILTER_CFG table=mangle:109 family=2 entries=16 op=nft_register_chain pid=4422 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:14:43.953000 audit[4422]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6868 a0=3 a1=ffffd1e06030 a2=0 a3=ffff9c33afa8 items=0 ppid=4273 pid=4422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.953000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:14:43.970000 audit[4424]: NETFILTER_CFG table=nat:110 family=2 entries=15 op=nft_register_chain pid=4424 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:14:43.970000 audit[4424]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5084 a0=3 a1=ffffde06ffa0 a2=0 a3=ffffa1a82fa8 items=0 ppid=4273 pid=4424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.970000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:14:43.993000 audit[4423]: NETFILTER_CFG table=raw:111 family=2 entries=21 op=nft_register_chain pid=4423 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:14:43.993000 audit[4423]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8452 a0=3 a1=ffffda2ec0b0 a2=0 a3=ffffbdf9efa8 items=0 ppid=4273 pid=4423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.993000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:14:43.995000 audit[4427]: NETFILTER_CFG table=filter:112 family=2 entries=94 op=nft_register_chain pid=4427 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:14:43.995000 audit[4427]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=53116 a0=3 a1=fffff5598bb0 a2=0 a3=ffff8df2bfa8 items=0 ppid=4273 pid=4427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.995000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:14:44.806441 systemd-networkd[1549]: vxlan.calico: Gained IPv6LL Nov 1 00:14:44.964162 env[1824]: time="2025-11-01T00:14:44.962453261Z" level=info msg="StopPodSandbox for \"fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339\"" Nov 1 00:14:44.964162 env[1824]: time="2025-11-01T00:14:44.962474009Z" level=info msg="StopPodSandbox for \"37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e\"" Nov 1 00:14:45.218331 env[1824]: 2025-11-01 00:14:45.105 [INFO][4456] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e" Nov 1 00:14:45.218331 env[1824]: 2025-11-01 00:14:45.105 [INFO][4456] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e" iface="eth0" netns="/var/run/netns/cni-d36cefa4-9e53-905c-3c8f-8985ea1a9e41" Nov 1 00:14:45.218331 env[1824]: 2025-11-01 00:14:45.105 [INFO][4456] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e" iface="eth0" netns="/var/run/netns/cni-d36cefa4-9e53-905c-3c8f-8985ea1a9e41" Nov 1 00:14:45.218331 env[1824]: 2025-11-01 00:14:45.105 [INFO][4456] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e" iface="eth0" netns="/var/run/netns/cni-d36cefa4-9e53-905c-3c8f-8985ea1a9e41" Nov 1 00:14:45.218331 env[1824]: 2025-11-01 00:14:45.105 [INFO][4456] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e" Nov 1 00:14:45.218331 env[1824]: 2025-11-01 00:14:45.105 [INFO][4456] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e" Nov 1 00:14:45.218331 env[1824]: 2025-11-01 00:14:45.179 [INFO][4473] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e" HandleID="k8s-pod-network.37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e" Workload="ip--172--31--27--146-k8s-csi--node--driver--89sjk-eth0" Nov 1 00:14:45.218331 env[1824]: 2025-11-01 00:14:45.180 [INFO][4473] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:14:45.218331 env[1824]: 2025-11-01 00:14:45.180 [INFO][4473] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:14:45.218331 env[1824]: 2025-11-01 00:14:45.206 [WARNING][4473] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e" HandleID="k8s-pod-network.37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e" Workload="ip--172--31--27--146-k8s-csi--node--driver--89sjk-eth0" Nov 1 00:14:45.218331 env[1824]: 2025-11-01 00:14:45.206 [INFO][4473] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e" HandleID="k8s-pod-network.37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e" Workload="ip--172--31--27--146-k8s-csi--node--driver--89sjk-eth0" Nov 1 00:14:45.218331 env[1824]: 2025-11-01 00:14:45.212 [INFO][4473] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:14:45.218331 env[1824]: 2025-11-01 00:14:45.215 [INFO][4456] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e" Nov 1 00:14:45.223941 systemd[1]: run-netns-cni\x2dd36cefa4\x2d9e53\x2d905c\x2d3c8f\x2d8985ea1a9e41.mount: Deactivated successfully. Nov 1 00:14:45.229186 env[1824]: time="2025-11-01T00:14:45.227696314Z" level=info msg="TearDown network for sandbox \"37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e\" successfully" Nov 1 00:14:45.229186 env[1824]: time="2025-11-01T00:14:45.227764640Z" level=info msg="StopPodSandbox for \"37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e\" returns successfully" Nov 1 00:14:45.229886 env[1824]: time="2025-11-01T00:14:45.229834486Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-89sjk,Uid:7a8f56d2-ec05-443a-b8e9-9b53fb320745,Namespace:calico-system,Attempt:1,}" Nov 1 00:14:45.253044 env[1824]: 2025-11-01 00:14:45.103 [INFO][4465] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339" Nov 1 00:14:45.253044 env[1824]: 2025-11-01 00:14:45.104 [INFO][4465] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339" iface="eth0" netns="/var/run/netns/cni-86d5e6ac-efee-b604-197f-abfe51a55f80" Nov 1 00:14:45.253044 env[1824]: 2025-11-01 00:14:45.105 [INFO][4465] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339" iface="eth0" netns="/var/run/netns/cni-86d5e6ac-efee-b604-197f-abfe51a55f80" Nov 1 00:14:45.253044 env[1824]: 2025-11-01 00:14:45.106 [INFO][4465] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339" iface="eth0" netns="/var/run/netns/cni-86d5e6ac-efee-b604-197f-abfe51a55f80" Nov 1 00:14:45.253044 env[1824]: 2025-11-01 00:14:45.106 [INFO][4465] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339" Nov 1 00:14:45.253044 env[1824]: 2025-11-01 00:14:45.106 [INFO][4465] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339" Nov 1 00:14:45.253044 env[1824]: 2025-11-01 00:14:45.206 [INFO][4475] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339" HandleID="k8s-pod-network.fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339" Workload="ip--172--31--27--146-k8s-calico--apiserver--6d9db7877d--g6gc4-eth0" Nov 1 00:14:45.253044 env[1824]: 2025-11-01 00:14:45.206 [INFO][4475] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:14:45.253044 env[1824]: 2025-11-01 00:14:45.212 [INFO][4475] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:14:45.253044 env[1824]: 2025-11-01 00:14:45.241 [WARNING][4475] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339" HandleID="k8s-pod-network.fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339" Workload="ip--172--31--27--146-k8s-calico--apiserver--6d9db7877d--g6gc4-eth0" Nov 1 00:14:45.253044 env[1824]: 2025-11-01 00:14:45.241 [INFO][4475] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339" HandleID="k8s-pod-network.fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339" Workload="ip--172--31--27--146-k8s-calico--apiserver--6d9db7877d--g6gc4-eth0" Nov 1 00:14:45.253044 env[1824]: 2025-11-01 00:14:45.244 [INFO][4475] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:14:45.253044 env[1824]: 2025-11-01 00:14:45.247 [INFO][4465] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339" Nov 1 00:14:45.258660 systemd[1]: run-netns-cni\x2d86d5e6ac\x2defee\x2db604\x2d197f\x2dabfe51a55f80.mount: Deactivated successfully. Nov 1 00:14:45.259002 env[1824]: time="2025-11-01T00:14:45.258943038Z" level=info msg="TearDown network for sandbox \"fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339\" successfully" Nov 1 00:14:45.259234 env[1824]: time="2025-11-01T00:14:45.259195501Z" level=info msg="StopPodSandbox for \"fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339\" returns successfully" Nov 1 00:14:45.261875 env[1824]: time="2025-11-01T00:14:45.261798570Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6d9db7877d-g6gc4,Uid:d237b083-16fc-4661-b219-6ab46b70c3f4,Namespace:calico-apiserver,Attempt:1,}" Nov 1 00:14:45.523951 systemd[1]: Started sshd@7-172.31.27.146:22-147.75.109.163:53596.service. Nov 1 00:14:45.531032 kernel: kauditd_printk_skb: 677 callbacks suppressed Nov 1 00:14:45.531246 kernel: audit: type=1130 audit(1761956085.527:1160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.27.146:22-147.75.109.163:53596 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:45.527000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.27.146:22-147.75.109.163:53596 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:45.736667 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Nov 1 00:14:45.736811 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali7750a2d2588: link becomes ready Nov 1 00:14:45.727998 systemd-networkd[1549]: cali7750a2d2588: Link UP Nov 1 00:14:45.738735 systemd-networkd[1549]: cali7750a2d2588: Gained carrier Nov 1 00:14:45.785275 sshd[4522]: Accepted publickey for core from 147.75.109.163 port 53596 ssh2: RSA SHA256:l10clL99NTgBLZDdAUsIsAniCj4DES+0hQanxvSOioM Nov 1 00:14:45.783000 audit[4522]: USER_ACCT pid=4522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:45.800691 sshd[4522]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:14:45.795000 audit[4522]: CRED_ACQ pid=4522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:45.815411 kernel: audit: type=1101 audit(1761956085.783:1161): pid=4522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:45.815601 kernel: audit: type=1103 audit(1761956085.795:1162): pid=4522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:45.819421 env[1824]: 2025-11-01 00:14:45.464 [INFO][4497] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--27--146-k8s-calico--apiserver--6d9db7877d--g6gc4-eth0 calico-apiserver-6d9db7877d- calico-apiserver d237b083-16fc-4661-b219-6ab46b70c3f4 978 0 2025-11-01 00:14:07 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:6d9db7877d projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ip-172-31-27-146 calico-apiserver-6d9db7877d-g6gc4 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali7750a2d2588 [] [] }} ContainerID="219a217dc20b6a9e52425ce77c59d948030771ced9678727738e65076d9308b5" Namespace="calico-apiserver" Pod="calico-apiserver-6d9db7877d-g6gc4" WorkloadEndpoint="ip--172--31--27--146-k8s-calico--apiserver--6d9db7877d--g6gc4-" Nov 1 00:14:45.819421 env[1824]: 2025-11-01 00:14:45.465 [INFO][4497] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="219a217dc20b6a9e52425ce77c59d948030771ced9678727738e65076d9308b5" Namespace="calico-apiserver" Pod="calico-apiserver-6d9db7877d-g6gc4" WorkloadEndpoint="ip--172--31--27--146-k8s-calico--apiserver--6d9db7877d--g6gc4-eth0" Nov 1 00:14:45.819421 env[1824]: 2025-11-01 00:14:45.629 [INFO][4520] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="219a217dc20b6a9e52425ce77c59d948030771ced9678727738e65076d9308b5" HandleID="k8s-pod-network.219a217dc20b6a9e52425ce77c59d948030771ced9678727738e65076d9308b5" Workload="ip--172--31--27--146-k8s-calico--apiserver--6d9db7877d--g6gc4-eth0" Nov 1 00:14:45.819421 env[1824]: 2025-11-01 00:14:45.630 [INFO][4520] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="219a217dc20b6a9e52425ce77c59d948030771ced9678727738e65076d9308b5" HandleID="k8s-pod-network.219a217dc20b6a9e52425ce77c59d948030771ced9678727738e65076d9308b5" Workload="ip--172--31--27--146-k8s-calico--apiserver--6d9db7877d--g6gc4-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400028d960), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ip-172-31-27-146", "pod":"calico-apiserver-6d9db7877d-g6gc4", "timestamp":"2025-11-01 00:14:45.629549647 +0000 UTC"}, Hostname:"ip-172-31-27-146", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:14:45.819421 env[1824]: 2025-11-01 00:14:45.630 [INFO][4520] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:14:45.819421 env[1824]: 2025-11-01 00:14:45.630 [INFO][4520] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:14:45.819421 env[1824]: 2025-11-01 00:14:45.630 [INFO][4520] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-27-146' Nov 1 00:14:45.819421 env[1824]: 2025-11-01 00:14:45.650 [INFO][4520] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.219a217dc20b6a9e52425ce77c59d948030771ced9678727738e65076d9308b5" host="ip-172-31-27-146" Nov 1 00:14:45.819421 env[1824]: 2025-11-01 00:14:45.659 [INFO][4520] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-27-146" Nov 1 00:14:45.819421 env[1824]: 2025-11-01 00:14:45.667 [INFO][4520] ipam/ipam.go 511: Trying affinity for 192.168.60.192/26 host="ip-172-31-27-146" Nov 1 00:14:45.819421 env[1824]: 2025-11-01 00:14:45.670 [INFO][4520] ipam/ipam.go 158: Attempting to load block cidr=192.168.60.192/26 host="ip-172-31-27-146" Nov 1 00:14:45.819421 env[1824]: 2025-11-01 00:14:45.675 [INFO][4520] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.60.192/26 host="ip-172-31-27-146" Nov 1 00:14:45.819421 env[1824]: 2025-11-01 00:14:45.675 [INFO][4520] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.60.192/26 handle="k8s-pod-network.219a217dc20b6a9e52425ce77c59d948030771ced9678727738e65076d9308b5" host="ip-172-31-27-146" Nov 1 00:14:45.819421 env[1824]: 2025-11-01 00:14:45.678 [INFO][4520] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.219a217dc20b6a9e52425ce77c59d948030771ced9678727738e65076d9308b5 Nov 1 00:14:45.819421 env[1824]: 2025-11-01 00:14:45.687 [INFO][4520] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.60.192/26 handle="k8s-pod-network.219a217dc20b6a9e52425ce77c59d948030771ced9678727738e65076d9308b5" host="ip-172-31-27-146" Nov 1 00:14:45.819421 env[1824]: 2025-11-01 00:14:45.704 [INFO][4520] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.60.194/26] block=192.168.60.192/26 handle="k8s-pod-network.219a217dc20b6a9e52425ce77c59d948030771ced9678727738e65076d9308b5" host="ip-172-31-27-146" Nov 1 00:14:45.819421 env[1824]: 2025-11-01 00:14:45.704 [INFO][4520] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.60.194/26] handle="k8s-pod-network.219a217dc20b6a9e52425ce77c59d948030771ced9678727738e65076d9308b5" host="ip-172-31-27-146" Nov 1 00:14:45.819421 env[1824]: 2025-11-01 00:14:45.704 [INFO][4520] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:14:45.819421 env[1824]: 2025-11-01 00:14:45.705 [INFO][4520] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.60.194/26] IPv6=[] ContainerID="219a217dc20b6a9e52425ce77c59d948030771ced9678727738e65076d9308b5" HandleID="k8s-pod-network.219a217dc20b6a9e52425ce77c59d948030771ced9678727738e65076d9308b5" Workload="ip--172--31--27--146-k8s-calico--apiserver--6d9db7877d--g6gc4-eth0" Nov 1 00:14:45.820971 env[1824]: 2025-11-01 00:14:45.710 [INFO][4497] cni-plugin/k8s.go 418: Populated endpoint ContainerID="219a217dc20b6a9e52425ce77c59d948030771ced9678727738e65076d9308b5" Namespace="calico-apiserver" Pod="calico-apiserver-6d9db7877d-g6gc4" WorkloadEndpoint="ip--172--31--27--146-k8s-calico--apiserver--6d9db7877d--g6gc4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--146-k8s-calico--apiserver--6d9db7877d--g6gc4-eth0", GenerateName:"calico-apiserver-6d9db7877d-", Namespace:"calico-apiserver", SelfLink:"", UID:"d237b083-16fc-4661-b219-6ab46b70c3f4", ResourceVersion:"978", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 14, 7, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6d9db7877d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-146", ContainerID:"", Pod:"calico-apiserver-6d9db7877d-g6gc4", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.60.194/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali7750a2d2588", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:14:45.820971 env[1824]: 2025-11-01 00:14:45.710 [INFO][4497] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.60.194/32] ContainerID="219a217dc20b6a9e52425ce77c59d948030771ced9678727738e65076d9308b5" Namespace="calico-apiserver" Pod="calico-apiserver-6d9db7877d-g6gc4" WorkloadEndpoint="ip--172--31--27--146-k8s-calico--apiserver--6d9db7877d--g6gc4-eth0" Nov 1 00:14:45.820971 env[1824]: 2025-11-01 00:14:45.710 [INFO][4497] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali7750a2d2588 ContainerID="219a217dc20b6a9e52425ce77c59d948030771ced9678727738e65076d9308b5" Namespace="calico-apiserver" Pod="calico-apiserver-6d9db7877d-g6gc4" WorkloadEndpoint="ip--172--31--27--146-k8s-calico--apiserver--6d9db7877d--g6gc4-eth0" Nov 1 00:14:45.820971 env[1824]: 2025-11-01 00:14:45.748 [INFO][4497] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="219a217dc20b6a9e52425ce77c59d948030771ced9678727738e65076d9308b5" Namespace="calico-apiserver" Pod="calico-apiserver-6d9db7877d-g6gc4" WorkloadEndpoint="ip--172--31--27--146-k8s-calico--apiserver--6d9db7877d--g6gc4-eth0" Nov 1 00:14:45.820971 env[1824]: 2025-11-01 00:14:45.748 [INFO][4497] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="219a217dc20b6a9e52425ce77c59d948030771ced9678727738e65076d9308b5" Namespace="calico-apiserver" Pod="calico-apiserver-6d9db7877d-g6gc4" WorkloadEndpoint="ip--172--31--27--146-k8s-calico--apiserver--6d9db7877d--g6gc4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--146-k8s-calico--apiserver--6d9db7877d--g6gc4-eth0", GenerateName:"calico-apiserver-6d9db7877d-", Namespace:"calico-apiserver", SelfLink:"", UID:"d237b083-16fc-4661-b219-6ab46b70c3f4", ResourceVersion:"978", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 14, 7, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6d9db7877d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-146", ContainerID:"219a217dc20b6a9e52425ce77c59d948030771ced9678727738e65076d9308b5", Pod:"calico-apiserver-6d9db7877d-g6gc4", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.60.194/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali7750a2d2588", MAC:"ee:a5:72:a2:6c:b5", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:14:45.820971 env[1824]: 2025-11-01 00:14:45.797 [INFO][4497] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="219a217dc20b6a9e52425ce77c59d948030771ced9678727738e65076d9308b5" Namespace="calico-apiserver" Pod="calico-apiserver-6d9db7877d-g6gc4" WorkloadEndpoint="ip--172--31--27--146-k8s-calico--apiserver--6d9db7877d--g6gc4-eth0" Nov 1 00:14:45.827906 kernel: audit: type=1006 audit(1761956085.796:1163): pid=4522 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Nov 1 00:14:45.826677 systemd[1]: Started session-8.scope. Nov 1 00:14:45.829208 systemd-logind[1813]: New session 8 of user core. Nov 1 00:14:45.796000 audit[4522]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffe579e30 a2=3 a3=1 items=0 ppid=1 pid=4522 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:45.844874 kernel: audit: type=1300 audit(1761956085.796:1163): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffe579e30 a2=3 a3=1 items=0 ppid=1 pid=4522 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:45.796000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:14:45.856749 kernel: audit: type=1327 audit(1761956085.796:1163): proctitle=737368643A20636F7265205B707269765D Nov 1 00:14:45.870000 audit[4522]: USER_START pid=4522 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:45.884000 audit[4544]: CRED_ACQ pid=4544 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:45.896703 kernel: audit: type=1105 audit(1761956085.870:1164): pid=4522 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:45.896883 kernel: audit: type=1103 audit(1761956085.884:1165): pid=4544 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:45.895000 audit[4545]: NETFILTER_CFG table=filter:113 family=2 entries=50 op=nft_register_chain pid=4545 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:14:45.905298 env[1824]: time="2025-11-01T00:14:45.905106870Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:14:45.905892 env[1824]: time="2025-11-01T00:14:45.905796450Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:14:45.906260 env[1824]: time="2025-11-01T00:14:45.906182772Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:14:45.907072 env[1824]: time="2025-11-01T00:14:45.906978814Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/219a217dc20b6a9e52425ce77c59d948030771ced9678727738e65076d9308b5 pid=4552 runtime=io.containerd.runc.v2 Nov 1 00:14:45.895000 audit[4545]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=28208 a0=3 a1=ffffe427b0f0 a2=0 a3=ffff80d57fa8 items=0 ppid=4273 pid=4545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:45.923039 kernel: audit: type=1325 audit(1761956085.895:1166): table=filter:113 family=2 entries=50 op=nft_register_chain pid=4545 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:14:45.923203 kernel: audit: type=1300 audit(1761956085.895:1166): arch=c00000b7 syscall=211 success=yes exit=28208 a0=3 a1=ffffe427b0f0 a2=0 a3=ffff80d57fa8 items=0 ppid=4273 pid=4545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:45.895000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:14:45.938388 systemd-networkd[1549]: cali945b8c99053: Link UP Nov 1 00:14:45.947529 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali945b8c99053: link becomes ready Nov 1 00:14:45.947505 systemd-networkd[1549]: cali945b8c99053: Gained carrier Nov 1 00:14:45.957522 systemd[1]: Started cri-containerd-219a217dc20b6a9e52425ce77c59d948030771ced9678727738e65076d9308b5.scope. Nov 1 00:14:45.963667 env[1824]: time="2025-11-01T00:14:45.963568553Z" level=info msg="StopPodSandbox for \"7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d\"" Nov 1 00:14:46.011359 env[1824]: 2025-11-01 00:14:45.464 [INFO][4487] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--27--146-k8s-csi--node--driver--89sjk-eth0 csi-node-driver- calico-system 7a8f56d2-ec05-443a-b8e9-9b53fb320745 976 0 2025-11-01 00:14:19 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:857b56db8f k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s ip-172-31-27-146 csi-node-driver-89sjk eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] cali945b8c99053 [] [] }} ContainerID="fe7f4c2b50137faaba4fde4d8f536d970d7fa8f5666083e5ec3ecac9539223fc" Namespace="calico-system" Pod="csi-node-driver-89sjk" WorkloadEndpoint="ip--172--31--27--146-k8s-csi--node--driver--89sjk-" Nov 1 00:14:46.011359 env[1824]: 2025-11-01 00:14:45.465 [INFO][4487] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="fe7f4c2b50137faaba4fde4d8f536d970d7fa8f5666083e5ec3ecac9539223fc" Namespace="calico-system" Pod="csi-node-driver-89sjk" WorkloadEndpoint="ip--172--31--27--146-k8s-csi--node--driver--89sjk-eth0" Nov 1 00:14:46.011359 env[1824]: 2025-11-01 00:14:45.629 [INFO][4515] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="fe7f4c2b50137faaba4fde4d8f536d970d7fa8f5666083e5ec3ecac9539223fc" HandleID="k8s-pod-network.fe7f4c2b50137faaba4fde4d8f536d970d7fa8f5666083e5ec3ecac9539223fc" Workload="ip--172--31--27--146-k8s-csi--node--driver--89sjk-eth0" Nov 1 00:14:46.011359 env[1824]: 2025-11-01 00:14:45.630 [INFO][4515] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="fe7f4c2b50137faaba4fde4d8f536d970d7fa8f5666083e5ec3ecac9539223fc" HandleID="k8s-pod-network.fe7f4c2b50137faaba4fde4d8f536d970d7fa8f5666083e5ec3ecac9539223fc" Workload="ip--172--31--27--146-k8s-csi--node--driver--89sjk-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002c1030), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-27-146", "pod":"csi-node-driver-89sjk", "timestamp":"2025-11-01 00:14:45.629556451 +0000 UTC"}, Hostname:"ip-172-31-27-146", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:14:46.011359 env[1824]: 2025-11-01 00:14:45.630 [INFO][4515] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:14:46.011359 env[1824]: 2025-11-01 00:14:45.704 [INFO][4515] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:14:46.011359 env[1824]: 2025-11-01 00:14:45.707 [INFO][4515] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-27-146' Nov 1 00:14:46.011359 env[1824]: 2025-11-01 00:14:45.757 [INFO][4515] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.fe7f4c2b50137faaba4fde4d8f536d970d7fa8f5666083e5ec3ecac9539223fc" host="ip-172-31-27-146" Nov 1 00:14:46.011359 env[1824]: 2025-11-01 00:14:45.769 [INFO][4515] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-27-146" Nov 1 00:14:46.011359 env[1824]: 2025-11-01 00:14:45.780 [INFO][4515] ipam/ipam.go 511: Trying affinity for 192.168.60.192/26 host="ip-172-31-27-146" Nov 1 00:14:46.011359 env[1824]: 2025-11-01 00:14:45.813 [INFO][4515] ipam/ipam.go 158: Attempting to load block cidr=192.168.60.192/26 host="ip-172-31-27-146" Nov 1 00:14:46.011359 env[1824]: 2025-11-01 00:14:45.833 [INFO][4515] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.60.192/26 host="ip-172-31-27-146" Nov 1 00:14:46.011359 env[1824]: 2025-11-01 00:14:45.833 [INFO][4515] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.60.192/26 handle="k8s-pod-network.fe7f4c2b50137faaba4fde4d8f536d970d7fa8f5666083e5ec3ecac9539223fc" host="ip-172-31-27-146" Nov 1 00:14:46.011359 env[1824]: 2025-11-01 00:14:45.846 [INFO][4515] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.fe7f4c2b50137faaba4fde4d8f536d970d7fa8f5666083e5ec3ecac9539223fc Nov 1 00:14:46.011359 env[1824]: 2025-11-01 00:14:45.858 [INFO][4515] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.60.192/26 handle="k8s-pod-network.fe7f4c2b50137faaba4fde4d8f536d970d7fa8f5666083e5ec3ecac9539223fc" host="ip-172-31-27-146" Nov 1 00:14:46.011359 env[1824]: 2025-11-01 00:14:45.889 [INFO][4515] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.60.195/26] block=192.168.60.192/26 handle="k8s-pod-network.fe7f4c2b50137faaba4fde4d8f536d970d7fa8f5666083e5ec3ecac9539223fc" host="ip-172-31-27-146" Nov 1 00:14:46.011359 env[1824]: 2025-11-01 00:14:45.889 [INFO][4515] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.60.195/26] handle="k8s-pod-network.fe7f4c2b50137faaba4fde4d8f536d970d7fa8f5666083e5ec3ecac9539223fc" host="ip-172-31-27-146" Nov 1 00:14:46.011359 env[1824]: 2025-11-01 00:14:45.889 [INFO][4515] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:14:46.011359 env[1824]: 2025-11-01 00:14:45.889 [INFO][4515] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.60.195/26] IPv6=[] ContainerID="fe7f4c2b50137faaba4fde4d8f536d970d7fa8f5666083e5ec3ecac9539223fc" HandleID="k8s-pod-network.fe7f4c2b50137faaba4fde4d8f536d970d7fa8f5666083e5ec3ecac9539223fc" Workload="ip--172--31--27--146-k8s-csi--node--driver--89sjk-eth0" Nov 1 00:14:46.013194 env[1824]: 2025-11-01 00:14:45.899 [INFO][4487] cni-plugin/k8s.go 418: Populated endpoint ContainerID="fe7f4c2b50137faaba4fde4d8f536d970d7fa8f5666083e5ec3ecac9539223fc" Namespace="calico-system" Pod="csi-node-driver-89sjk" WorkloadEndpoint="ip--172--31--27--146-k8s-csi--node--driver--89sjk-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--146-k8s-csi--node--driver--89sjk-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"7a8f56d2-ec05-443a-b8e9-9b53fb320745", ResourceVersion:"976", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 14, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-146", ContainerID:"", Pod:"csi-node-driver-89sjk", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.60.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali945b8c99053", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:14:46.013194 env[1824]: 2025-11-01 00:14:45.900 [INFO][4487] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.60.195/32] ContainerID="fe7f4c2b50137faaba4fde4d8f536d970d7fa8f5666083e5ec3ecac9539223fc" Namespace="calico-system" Pod="csi-node-driver-89sjk" WorkloadEndpoint="ip--172--31--27--146-k8s-csi--node--driver--89sjk-eth0" Nov 1 00:14:46.013194 env[1824]: 2025-11-01 00:14:45.900 [INFO][4487] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali945b8c99053 ContainerID="fe7f4c2b50137faaba4fde4d8f536d970d7fa8f5666083e5ec3ecac9539223fc" Namespace="calico-system" Pod="csi-node-driver-89sjk" WorkloadEndpoint="ip--172--31--27--146-k8s-csi--node--driver--89sjk-eth0" Nov 1 00:14:46.013194 env[1824]: 2025-11-01 00:14:45.966 [INFO][4487] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="fe7f4c2b50137faaba4fde4d8f536d970d7fa8f5666083e5ec3ecac9539223fc" Namespace="calico-system" Pod="csi-node-driver-89sjk" WorkloadEndpoint="ip--172--31--27--146-k8s-csi--node--driver--89sjk-eth0" Nov 1 00:14:46.013194 env[1824]: 2025-11-01 00:14:45.975 [INFO][4487] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="fe7f4c2b50137faaba4fde4d8f536d970d7fa8f5666083e5ec3ecac9539223fc" Namespace="calico-system" Pod="csi-node-driver-89sjk" WorkloadEndpoint="ip--172--31--27--146-k8s-csi--node--driver--89sjk-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--146-k8s-csi--node--driver--89sjk-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"7a8f56d2-ec05-443a-b8e9-9b53fb320745", ResourceVersion:"976", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 14, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-146", ContainerID:"fe7f4c2b50137faaba4fde4d8f536d970d7fa8f5666083e5ec3ecac9539223fc", Pod:"csi-node-driver-89sjk", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.60.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali945b8c99053", MAC:"9e:d3:84:d8:b6:3f", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:14:46.013194 env[1824]: 2025-11-01 00:14:46.008 [INFO][4487] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="fe7f4c2b50137faaba4fde4d8f536d970d7fa8f5666083e5ec3ecac9539223fc" Namespace="calico-system" Pod="csi-node-driver-89sjk" WorkloadEndpoint="ip--172--31--27--146-k8s-csi--node--driver--89sjk-eth0" Nov 1 00:14:46.087582 env[1824]: time="2025-11-01T00:14:46.087464254Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:14:46.087829 env[1824]: time="2025-11-01T00:14:46.087549609Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:14:46.087829 env[1824]: time="2025-11-01T00:14:46.087591596Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:14:46.088033 env[1824]: time="2025-11-01T00:14:46.087844444Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/fe7f4c2b50137faaba4fde4d8f536d970d7fa8f5666083e5ec3ecac9539223fc pid=4612 runtime=io.containerd.runc.v2 Nov 1 00:14:46.094000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.094000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.095000 audit: BPF prog-id=165 op=LOAD Nov 1 00:14:46.096000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.096000 audit[4564]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4552 pid=4564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:46.096000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231396132313764633230623661396535323432356365373763353964 Nov 1 00:14:46.096000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.096000 audit[4564]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4552 pid=4564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:46.096000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231396132313764633230623661396535323432356365373763353964 Nov 1 00:14:46.096000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.096000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.096000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.096000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.096000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.096000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.096000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.096000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.096000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.096000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.096000 audit: BPF prog-id=166 op=LOAD Nov 1 00:14:46.096000 audit[4564]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4552 pid=4564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:46.096000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231396132313764633230623661396535323432356365373763353964 Nov 1 00:14:46.096000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.096000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.096000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.096000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.096000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.096000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.096000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.096000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.096000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.096000 audit: BPF prog-id=167 op=LOAD Nov 1 00:14:46.096000 audit[4564]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4552 pid=4564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:46.096000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231396132313764633230623661396535323432356365373763353964 Nov 1 00:14:46.097000 audit: BPF prog-id=167 op=UNLOAD Nov 1 00:14:46.097000 audit: BPF prog-id=166 op=UNLOAD Nov 1 00:14:46.097000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.097000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.097000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.097000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.097000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.097000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.097000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.097000 audit[4564]: AVC avc: denied { perfmon } for pid=4564 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.097000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.097000 audit[4564]: AVC avc: denied { bpf } for pid=4564 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.097000 audit: BPF prog-id=168 op=LOAD Nov 1 00:14:46.097000 audit[4564]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4552 pid=4564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:46.097000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231396132313764633230623661396535323432356365373763353964 Nov 1 00:14:46.170289 systemd[1]: Started cri-containerd-fe7f4c2b50137faaba4fde4d8f536d970d7fa8f5666083e5ec3ecac9539223fc.scope. Nov 1 00:14:46.300229 env[1824]: time="2025-11-01T00:14:46.300170095Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6d9db7877d-g6gc4,Uid:d237b083-16fc-4661-b219-6ab46b70c3f4,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"219a217dc20b6a9e52425ce77c59d948030771ced9678727738e65076d9308b5\"" Nov 1 00:14:46.308563 env[1824]: time="2025-11-01T00:14:46.308493873Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:14:46.319190 sshd[4522]: pam_unix(sshd:session): session closed for user core Nov 1 00:14:46.326000 audit[4522]: USER_END pid=4522 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:46.326000 audit[4522]: CRED_DISP pid=4522 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:46.329000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.27.146:22-147.75.109.163:53596 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:46.330010 systemd[1]: sshd@7-172.31.27.146:22-147.75.109.163:53596.service: Deactivated successfully. Nov 1 00:14:46.331408 systemd[1]: session-8.scope: Deactivated successfully. Nov 1 00:14:46.332796 systemd-logind[1813]: Session 8 logged out. Waiting for processes to exit. Nov 1 00:14:46.334882 systemd-logind[1813]: Removed session 8. Nov 1 00:14:46.335000 audit[4652]: NETFILTER_CFG table=filter:114 family=2 entries=40 op=nft_register_chain pid=4652 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:14:46.335000 audit[4652]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=20764 a0=3 a1=ffffd10a7810 a2=0 a3=ffffa200bfa8 items=0 ppid=4273 pid=4652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:46.335000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:14:46.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.357000 audit: BPF prog-id=169 op=LOAD Nov 1 00:14:46.358000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.358000 audit[4624]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4612 pid=4624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:46.358000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665376634633262353031333766616162613466646534643866353336 Nov 1 00:14:46.358000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.358000 audit[4624]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4612 pid=4624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:46.358000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665376634633262353031333766616162613466646534643866353336 Nov 1 00:14:46.359000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.359000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.359000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.359000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.359000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.359000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.359000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.359000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.359000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.359000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.359000 audit: BPF prog-id=170 op=LOAD Nov 1 00:14:46.359000 audit[4624]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4612 pid=4624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:46.359000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665376634633262353031333766616162613466646534643866353336 Nov 1 00:14:46.359000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.359000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.359000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.359000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.359000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.359000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.359000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.359000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.359000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.359000 audit: BPF prog-id=171 op=LOAD Nov 1 00:14:46.359000 audit[4624]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4612 pid=4624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:46.359000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665376634633262353031333766616162613466646534643866353336 Nov 1 00:14:46.360000 audit: BPF prog-id=171 op=UNLOAD Nov 1 00:14:46.360000 audit: BPF prog-id=170 op=UNLOAD Nov 1 00:14:46.360000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.360000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.360000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.360000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.360000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.360000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.360000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.360000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.360000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.360000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.360000 audit: BPF prog-id=172 op=LOAD Nov 1 00:14:46.360000 audit[4624]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4612 pid=4624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:46.360000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665376634633262353031333766616162613466646534643866353336 Nov 1 00:14:46.410473 env[1824]: time="2025-11-01T00:14:46.410330754Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-89sjk,Uid:7a8f56d2-ec05-443a-b8e9-9b53fb320745,Namespace:calico-system,Attempt:1,} returns sandbox id \"fe7f4c2b50137faaba4fde4d8f536d970d7fa8f5666083e5ec3ecac9539223fc\"" Nov 1 00:14:46.428736 env[1824]: 2025-11-01 00:14:46.273 [INFO][4591] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d" Nov 1 00:14:46.428736 env[1824]: 2025-11-01 00:14:46.273 [INFO][4591] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d" iface="eth0" netns="/var/run/netns/cni-6c265602-0ca8-010c-e68a-85837d02f964" Nov 1 00:14:46.428736 env[1824]: 2025-11-01 00:14:46.274 [INFO][4591] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d" iface="eth0" netns="/var/run/netns/cni-6c265602-0ca8-010c-e68a-85837d02f964" Nov 1 00:14:46.428736 env[1824]: 2025-11-01 00:14:46.274 [INFO][4591] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d" iface="eth0" netns="/var/run/netns/cni-6c265602-0ca8-010c-e68a-85837d02f964" Nov 1 00:14:46.428736 env[1824]: 2025-11-01 00:14:46.274 [INFO][4591] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d" Nov 1 00:14:46.428736 env[1824]: 2025-11-01 00:14:46.274 [INFO][4591] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d" Nov 1 00:14:46.428736 env[1824]: 2025-11-01 00:14:46.395 [INFO][4645] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d" HandleID="k8s-pod-network.7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d" Workload="ip--172--31--27--146-k8s-goldmane--666569f655--hp4nw-eth0" Nov 1 00:14:46.428736 env[1824]: 2025-11-01 00:14:46.395 [INFO][4645] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:14:46.428736 env[1824]: 2025-11-01 00:14:46.396 [INFO][4645] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:14:46.428736 env[1824]: 2025-11-01 00:14:46.416 [WARNING][4645] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d" HandleID="k8s-pod-network.7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d" Workload="ip--172--31--27--146-k8s-goldmane--666569f655--hp4nw-eth0" Nov 1 00:14:46.428736 env[1824]: 2025-11-01 00:14:46.416 [INFO][4645] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d" HandleID="k8s-pod-network.7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d" Workload="ip--172--31--27--146-k8s-goldmane--666569f655--hp4nw-eth0" Nov 1 00:14:46.428736 env[1824]: 2025-11-01 00:14:46.422 [INFO][4645] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:14:46.428736 env[1824]: 2025-11-01 00:14:46.425 [INFO][4591] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d" Nov 1 00:14:46.434444 systemd[1]: run-netns-cni\x2d6c265602\x2d0ca8\x2d010c\x2de68a\x2d85837d02f964.mount: Deactivated successfully. Nov 1 00:14:46.436014 env[1824]: time="2025-11-01T00:14:46.435935331Z" level=info msg="TearDown network for sandbox \"7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d\" successfully" Nov 1 00:14:46.436278 env[1824]: time="2025-11-01T00:14:46.436233898Z" level=info msg="StopPodSandbox for \"7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d\" returns successfully" Nov 1 00:14:46.437690 env[1824]: time="2025-11-01T00:14:46.437639436Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-hp4nw,Uid:2672231a-dbf2-4175-a896-3a2597610669,Namespace:calico-system,Attempt:1,}" Nov 1 00:14:46.611011 env[1824]: time="2025-11-01T00:14:46.606102758Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:14:46.611011 env[1824]: time="2025-11-01T00:14:46.609210470Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:14:46.611394 kubelet[2905]: E1101 00:14:46.610360 2905 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:14:46.611394 kubelet[2905]: E1101 00:14:46.610420 2905 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:14:46.611394 kubelet[2905]: E1101 00:14:46.610728 2905 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-pmp28,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-6d9db7877d-g6gc4_calico-apiserver(d237b083-16fc-4661-b219-6ab46b70c3f4): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:14:46.612706 kubelet[2905]: E1101 00:14:46.612181 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6d9db7877d-g6gc4" podUID="d237b083-16fc-4661-b219-6ab46b70c3f4" Nov 1 00:14:46.613328 env[1824]: time="2025-11-01T00:14:46.613275203Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Nov 1 00:14:46.681080 systemd-networkd[1549]: calic7947145fc3: Link UP Nov 1 00:14:46.687297 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calic7947145fc3: link becomes ready Nov 1 00:14:46.687219 systemd-networkd[1549]: calic7947145fc3: Gained carrier Nov 1 00:14:46.720149 env[1824]: 2025-11-01 00:14:46.539 [INFO][4671] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--27--146-k8s-goldmane--666569f655--hp4nw-eth0 goldmane-666569f655- calico-system 2672231a-dbf2-4175-a896-3a2597610669 1017 0 2025-11-01 00:14:15 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:666569f655 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s ip-172-31-27-146 goldmane-666569f655-hp4nw eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] calic7947145fc3 [] [] }} ContainerID="9d4fd562e98c27c73e2fdbf54395d731aa9d0730493b783ff69990d3db8c0176" Namespace="calico-system" Pod="goldmane-666569f655-hp4nw" WorkloadEndpoint="ip--172--31--27--146-k8s-goldmane--666569f655--hp4nw-" Nov 1 00:14:46.720149 env[1824]: 2025-11-01 00:14:46.539 [INFO][4671] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="9d4fd562e98c27c73e2fdbf54395d731aa9d0730493b783ff69990d3db8c0176" Namespace="calico-system" Pod="goldmane-666569f655-hp4nw" WorkloadEndpoint="ip--172--31--27--146-k8s-goldmane--666569f655--hp4nw-eth0" Nov 1 00:14:46.720149 env[1824]: 2025-11-01 00:14:46.597 [INFO][4683] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="9d4fd562e98c27c73e2fdbf54395d731aa9d0730493b783ff69990d3db8c0176" HandleID="k8s-pod-network.9d4fd562e98c27c73e2fdbf54395d731aa9d0730493b783ff69990d3db8c0176" Workload="ip--172--31--27--146-k8s-goldmane--666569f655--hp4nw-eth0" Nov 1 00:14:46.720149 env[1824]: 2025-11-01 00:14:46.597 [INFO][4683] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="9d4fd562e98c27c73e2fdbf54395d731aa9d0730493b783ff69990d3db8c0176" HandleID="k8s-pod-network.9d4fd562e98c27c73e2fdbf54395d731aa9d0730493b783ff69990d3db8c0176" Workload="ip--172--31--27--146-k8s-goldmane--666569f655--hp4nw-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002d2fe0), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-27-146", "pod":"goldmane-666569f655-hp4nw", "timestamp":"2025-11-01 00:14:46.597503932 +0000 UTC"}, Hostname:"ip-172-31-27-146", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:14:46.720149 env[1824]: 2025-11-01 00:14:46.597 [INFO][4683] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:14:46.720149 env[1824]: 2025-11-01 00:14:46.598 [INFO][4683] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:14:46.720149 env[1824]: 2025-11-01 00:14:46.598 [INFO][4683] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-27-146' Nov 1 00:14:46.720149 env[1824]: 2025-11-01 00:14:46.617 [INFO][4683] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.9d4fd562e98c27c73e2fdbf54395d731aa9d0730493b783ff69990d3db8c0176" host="ip-172-31-27-146" Nov 1 00:14:46.720149 env[1824]: 2025-11-01 00:14:46.629 [INFO][4683] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-27-146" Nov 1 00:14:46.720149 env[1824]: 2025-11-01 00:14:46.641 [INFO][4683] ipam/ipam.go 511: Trying affinity for 192.168.60.192/26 host="ip-172-31-27-146" Nov 1 00:14:46.720149 env[1824]: 2025-11-01 00:14:46.644 [INFO][4683] ipam/ipam.go 158: Attempting to load block cidr=192.168.60.192/26 host="ip-172-31-27-146" Nov 1 00:14:46.720149 env[1824]: 2025-11-01 00:14:46.648 [INFO][4683] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.60.192/26 host="ip-172-31-27-146" Nov 1 00:14:46.720149 env[1824]: 2025-11-01 00:14:46.648 [INFO][4683] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.60.192/26 handle="k8s-pod-network.9d4fd562e98c27c73e2fdbf54395d731aa9d0730493b783ff69990d3db8c0176" host="ip-172-31-27-146" Nov 1 00:14:46.720149 env[1824]: 2025-11-01 00:14:46.651 [INFO][4683] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.9d4fd562e98c27c73e2fdbf54395d731aa9d0730493b783ff69990d3db8c0176 Nov 1 00:14:46.720149 env[1824]: 2025-11-01 00:14:46.658 [INFO][4683] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.60.192/26 handle="k8s-pod-network.9d4fd562e98c27c73e2fdbf54395d731aa9d0730493b783ff69990d3db8c0176" host="ip-172-31-27-146" Nov 1 00:14:46.720149 env[1824]: 2025-11-01 00:14:46.671 [INFO][4683] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.60.196/26] block=192.168.60.192/26 handle="k8s-pod-network.9d4fd562e98c27c73e2fdbf54395d731aa9d0730493b783ff69990d3db8c0176" host="ip-172-31-27-146" Nov 1 00:14:46.720149 env[1824]: 2025-11-01 00:14:46.672 [INFO][4683] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.60.196/26] handle="k8s-pod-network.9d4fd562e98c27c73e2fdbf54395d731aa9d0730493b783ff69990d3db8c0176" host="ip-172-31-27-146" Nov 1 00:14:46.720149 env[1824]: 2025-11-01 00:14:46.672 [INFO][4683] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:14:46.720149 env[1824]: 2025-11-01 00:14:46.672 [INFO][4683] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.60.196/26] IPv6=[] ContainerID="9d4fd562e98c27c73e2fdbf54395d731aa9d0730493b783ff69990d3db8c0176" HandleID="k8s-pod-network.9d4fd562e98c27c73e2fdbf54395d731aa9d0730493b783ff69990d3db8c0176" Workload="ip--172--31--27--146-k8s-goldmane--666569f655--hp4nw-eth0" Nov 1 00:14:46.721630 env[1824]: 2025-11-01 00:14:46.676 [INFO][4671] cni-plugin/k8s.go 418: Populated endpoint ContainerID="9d4fd562e98c27c73e2fdbf54395d731aa9d0730493b783ff69990d3db8c0176" Namespace="calico-system" Pod="goldmane-666569f655-hp4nw" WorkloadEndpoint="ip--172--31--27--146-k8s-goldmane--666569f655--hp4nw-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--146-k8s-goldmane--666569f655--hp4nw-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"2672231a-dbf2-4175-a896-3a2597610669", ResourceVersion:"1017", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 14, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-146", ContainerID:"", Pod:"goldmane-666569f655-hp4nw", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.60.196/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calic7947145fc3", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:14:46.721630 env[1824]: 2025-11-01 00:14:46.676 [INFO][4671] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.60.196/32] ContainerID="9d4fd562e98c27c73e2fdbf54395d731aa9d0730493b783ff69990d3db8c0176" Namespace="calico-system" Pod="goldmane-666569f655-hp4nw" WorkloadEndpoint="ip--172--31--27--146-k8s-goldmane--666569f655--hp4nw-eth0" Nov 1 00:14:46.721630 env[1824]: 2025-11-01 00:14:46.676 [INFO][4671] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calic7947145fc3 ContainerID="9d4fd562e98c27c73e2fdbf54395d731aa9d0730493b783ff69990d3db8c0176" Namespace="calico-system" Pod="goldmane-666569f655-hp4nw" WorkloadEndpoint="ip--172--31--27--146-k8s-goldmane--666569f655--hp4nw-eth0" Nov 1 00:14:46.721630 env[1824]: 2025-11-01 00:14:46.687 [INFO][4671] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="9d4fd562e98c27c73e2fdbf54395d731aa9d0730493b783ff69990d3db8c0176" Namespace="calico-system" Pod="goldmane-666569f655-hp4nw" WorkloadEndpoint="ip--172--31--27--146-k8s-goldmane--666569f655--hp4nw-eth0" Nov 1 00:14:46.721630 env[1824]: 2025-11-01 00:14:46.689 [INFO][4671] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="9d4fd562e98c27c73e2fdbf54395d731aa9d0730493b783ff69990d3db8c0176" Namespace="calico-system" Pod="goldmane-666569f655-hp4nw" WorkloadEndpoint="ip--172--31--27--146-k8s-goldmane--666569f655--hp4nw-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--146-k8s-goldmane--666569f655--hp4nw-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"2672231a-dbf2-4175-a896-3a2597610669", ResourceVersion:"1017", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 14, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-146", ContainerID:"9d4fd562e98c27c73e2fdbf54395d731aa9d0730493b783ff69990d3db8c0176", Pod:"goldmane-666569f655-hp4nw", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.60.196/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calic7947145fc3", MAC:"0a:c9:90:fe:e6:bb", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:14:46.721630 env[1824]: 2025-11-01 00:14:46.709 [INFO][4671] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="9d4fd562e98c27c73e2fdbf54395d731aa9d0730493b783ff69990d3db8c0176" Namespace="calico-system" Pod="goldmane-666569f655-hp4nw" WorkloadEndpoint="ip--172--31--27--146-k8s-goldmane--666569f655--hp4nw-eth0" Nov 1 00:14:46.743000 audit[4699]: NETFILTER_CFG table=filter:115 family=2 entries=52 op=nft_register_chain pid=4699 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:14:46.743000 audit[4699]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=27556 a0=3 a1=ffffd7e95130 a2=0 a3=ffff86062fa8 items=0 ppid=4273 pid=4699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:46.743000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:14:46.762186 env[1824]: time="2025-11-01T00:14:46.762013388Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:14:46.762186 env[1824]: time="2025-11-01T00:14:46.762090607Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:14:46.762521 env[1824]: time="2025-11-01T00:14:46.762186258Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:14:46.762906 env[1824]: time="2025-11-01T00:14:46.762837331Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9d4fd562e98c27c73e2fdbf54395d731aa9d0730493b783ff69990d3db8c0176 pid=4707 runtime=io.containerd.runc.v2 Nov 1 00:14:46.798453 systemd[1]: Started cri-containerd-9d4fd562e98c27c73e2fdbf54395d731aa9d0730493b783ff69990d3db8c0176.scope. Nov 1 00:14:46.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.845000 audit: BPF prog-id=173 op=LOAD Nov 1 00:14:46.846000 audit[4716]: AVC avc: denied { bpf } for pid=4716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.846000 audit[4716]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4707 pid=4716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:46.846000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964346664353632653938633237633733653266646266353433393564 Nov 1 00:14:46.846000 audit[4716]: AVC avc: denied { perfmon } for pid=4716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.846000 audit[4716]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4707 pid=4716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:46.846000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964346664353632653938633237633733653266646266353433393564 Nov 1 00:14:46.846000 audit[4716]: AVC avc: denied { bpf } for pid=4716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.846000 audit[4716]: AVC avc: denied { bpf } for pid=4716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.846000 audit[4716]: AVC avc: denied { bpf } for pid=4716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.846000 audit[4716]: AVC avc: denied { perfmon } for pid=4716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.846000 audit[4716]: AVC avc: denied { perfmon } for pid=4716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.846000 audit[4716]: AVC avc: denied { perfmon } for pid=4716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.846000 audit[4716]: AVC avc: denied { perfmon } for pid=4716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.846000 audit[4716]: AVC avc: denied { perfmon } for pid=4716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.846000 audit[4716]: AVC avc: denied { bpf } for pid=4716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.846000 audit[4716]: AVC avc: denied { bpf } for pid=4716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.846000 audit: BPF prog-id=174 op=LOAD Nov 1 00:14:46.846000 audit[4716]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4707 pid=4716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:46.846000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964346664353632653938633237633733653266646266353433393564 Nov 1 00:14:46.847000 audit[4716]: AVC avc: denied { bpf } for pid=4716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.847000 audit[4716]: AVC avc: denied { bpf } for pid=4716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.847000 audit[4716]: AVC avc: denied { perfmon } for pid=4716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.847000 audit[4716]: AVC avc: denied { perfmon } for pid=4716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.847000 audit[4716]: AVC avc: denied { perfmon } for pid=4716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.847000 audit[4716]: AVC avc: denied { perfmon } for pid=4716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.847000 audit[4716]: AVC avc: denied { perfmon } for pid=4716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.847000 audit[4716]: AVC avc: denied { bpf } for pid=4716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.847000 audit[4716]: AVC avc: denied { bpf } for pid=4716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.847000 audit: BPF prog-id=175 op=LOAD Nov 1 00:14:46.847000 audit[4716]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4707 pid=4716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:46.847000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964346664353632653938633237633733653266646266353433393564 Nov 1 00:14:46.847000 audit: BPF prog-id=175 op=UNLOAD Nov 1 00:14:46.847000 audit: BPF prog-id=174 op=UNLOAD Nov 1 00:14:46.847000 audit[4716]: AVC avc: denied { bpf } for pid=4716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.847000 audit[4716]: AVC avc: denied { bpf } for pid=4716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.847000 audit[4716]: AVC avc: denied { bpf } for pid=4716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.847000 audit[4716]: AVC avc: denied { perfmon } for pid=4716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.847000 audit[4716]: AVC avc: denied { perfmon } for pid=4716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.847000 audit[4716]: AVC avc: denied { perfmon } for pid=4716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.847000 audit[4716]: AVC avc: denied { perfmon } for pid=4716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.847000 audit[4716]: AVC avc: denied { perfmon } for pid=4716 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.847000 audit[4716]: AVC avc: denied { bpf } for pid=4716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.847000 audit[4716]: AVC avc: denied { bpf } for pid=4716 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:46.847000 audit: BPF prog-id=176 op=LOAD Nov 1 00:14:46.847000 audit[4716]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4707 pid=4716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:46.847000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964346664353632653938633237633733653266646266353433393564 Nov 1 00:14:46.859170 env[1824]: time="2025-11-01T00:14:46.859060160Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:14:46.861472 env[1824]: time="2025-11-01T00:14:46.861286761Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Nov 1 00:14:46.861696 kubelet[2905]: E1101 00:14:46.861636 2905 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:14:46.861793 kubelet[2905]: E1101 00:14:46.861703 2905 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:14:46.861991 kubelet[2905]: E1101 00:14:46.861891 2905 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.30.4,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-b66ts,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-89sjk_calico-system(7a8f56d2-ec05-443a-b8e9-9b53fb320745): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Nov 1 00:14:46.868421 env[1824]: time="2025-11-01T00:14:46.868368655Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Nov 1 00:14:46.935760 env[1824]: time="2025-11-01T00:14:46.935707609Z" level=info msg="StopPodSandbox for \"37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e\"" Nov 1 00:14:46.942237 env[1824]: time="2025-11-01T00:14:46.942075418Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-hp4nw,Uid:2672231a-dbf2-4175-a896-3a2597610669,Namespace:calico-system,Attempt:1,} returns sandbox id \"9d4fd562e98c27c73e2fdbf54395d731aa9d0730493b783ff69990d3db8c0176\"" Nov 1 00:14:46.964180 env[1824]: time="2025-11-01T00:14:46.964032219Z" level=info msg="StopPodSandbox for \"5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee\"" Nov 1 00:14:46.970758 env[1824]: time="2025-11-01T00:14:46.965001552Z" level=info msg="StopPodSandbox for \"6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf\"" Nov 1 00:14:46.971228 env[1824]: time="2025-11-01T00:14:46.965400462Z" level=info msg="StopPodSandbox for \"7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e\"" Nov 1 00:14:46.971834 env[1824]: time="2025-11-01T00:14:46.971770791Z" level=info msg="StopPodSandbox for \"a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac\"" Nov 1 00:14:47.111782 systemd-networkd[1549]: cali945b8c99053: Gained IPv6LL Nov 1 00:14:47.112308 systemd-networkd[1549]: cali7750a2d2588: Gained IPv6LL Nov 1 00:14:47.152431 env[1824]: time="2025-11-01T00:14:47.152326647Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:14:47.155661 env[1824]: time="2025-11-01T00:14:47.155559160Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Nov 1 00:14:47.156365 kubelet[2905]: E1101 00:14:47.156046 2905 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:14:47.156365 kubelet[2905]: E1101 00:14:47.156112 2905 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:14:47.156618 kubelet[2905]: E1101 00:14:47.156490 2905 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-b66ts,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-89sjk_calico-system(7a8f56d2-ec05-443a-b8e9-9b53fb320745): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Nov 1 00:14:47.157263 env[1824]: time="2025-11-01T00:14:47.157215628Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Nov 1 00:14:47.160918 kubelet[2905]: E1101 00:14:47.160802 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-89sjk" podUID="7a8f56d2-ec05-443a-b8e9-9b53fb320745" Nov 1 00:14:47.424639 env[1824]: time="2025-11-01T00:14:47.424491155Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:14:47.427320 env[1824]: time="2025-11-01T00:14:47.427213603Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Nov 1 00:14:47.428033 kubelet[2905]: E1101 00:14:47.427964 2905 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:14:47.428221 kubelet[2905]: E1101 00:14:47.428057 2905 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:14:47.428413 kubelet[2905]: E1101 00:14:47.428297 2905 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-p6wq4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-666569f655-hp4nw_calico-system(2672231a-dbf2-4175-a896-3a2597610669): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Nov 1 00:14:47.430014 kubelet[2905]: E1101 00:14:47.429917 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-hp4nw" podUID="2672231a-dbf2-4175-a896-3a2597610669" Nov 1 00:14:47.443636 kubelet[2905]: E1101 00:14:47.443093 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6d9db7877d-g6gc4" podUID="d237b083-16fc-4661-b219-6ab46b70c3f4" Nov 1 00:14:47.485348 kubelet[2905]: E1101 00:14:47.480945 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-89sjk" podUID="7a8f56d2-ec05-443a-b8e9-9b53fb320745" Nov 1 00:14:47.554176 env[1824]: 2025-11-01 00:14:47.243 [INFO][4785] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf" Nov 1 00:14:47.554176 env[1824]: 2025-11-01 00:14:47.243 [INFO][4785] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf" iface="eth0" netns="/var/run/netns/cni-cf9599a7-d471-67df-a4b6-2fe628a7f6c1" Nov 1 00:14:47.554176 env[1824]: 2025-11-01 00:14:47.243 [INFO][4785] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf" iface="eth0" netns="/var/run/netns/cni-cf9599a7-d471-67df-a4b6-2fe628a7f6c1" Nov 1 00:14:47.554176 env[1824]: 2025-11-01 00:14:47.244 [INFO][4785] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf" iface="eth0" netns="/var/run/netns/cni-cf9599a7-d471-67df-a4b6-2fe628a7f6c1" Nov 1 00:14:47.554176 env[1824]: 2025-11-01 00:14:47.244 [INFO][4785] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf" Nov 1 00:14:47.554176 env[1824]: 2025-11-01 00:14:47.244 [INFO][4785] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf" Nov 1 00:14:47.554176 env[1824]: 2025-11-01 00:14:47.408 [INFO][4819] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf" HandleID="k8s-pod-network.6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf" Workload="ip--172--31--27--146-k8s-coredns--668d6bf9bc--9pzj4-eth0" Nov 1 00:14:47.554176 env[1824]: 2025-11-01 00:14:47.408 [INFO][4819] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:14:47.554176 env[1824]: 2025-11-01 00:14:47.408 [INFO][4819] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:14:47.554176 env[1824]: 2025-11-01 00:14:47.502 [WARNING][4819] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf" HandleID="k8s-pod-network.6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf" Workload="ip--172--31--27--146-k8s-coredns--668d6bf9bc--9pzj4-eth0" Nov 1 00:14:47.554176 env[1824]: 2025-11-01 00:14:47.502 [INFO][4819] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf" HandleID="k8s-pod-network.6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf" Workload="ip--172--31--27--146-k8s-coredns--668d6bf9bc--9pzj4-eth0" Nov 1 00:14:47.554176 env[1824]: 2025-11-01 00:14:47.533 [INFO][4819] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:14:47.554176 env[1824]: 2025-11-01 00:14:47.549 [INFO][4785] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf" Nov 1 00:14:47.558673 systemd[1]: run-netns-cni\x2dcf9599a7\x2dd471\x2d67df\x2da4b6\x2d2fe628a7f6c1.mount: Deactivated successfully. Nov 1 00:14:47.571251 env[1824]: time="2025-11-01T00:14:47.568098127Z" level=info msg="TearDown network for sandbox \"6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf\" successfully" Nov 1 00:14:47.571251 env[1824]: time="2025-11-01T00:14:47.568220813Z" level=info msg="StopPodSandbox for \"6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf\" returns successfully" Nov 1 00:14:47.573407 env[1824]: time="2025-11-01T00:14:47.573280947Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-9pzj4,Uid:4b6be88e-2b28-4afc-b9bf-475fed78cc30,Namespace:kube-system,Attempt:1,}" Nov 1 00:14:47.786208 env[1824]: 2025-11-01 00:14:47.391 [WARNING][4766] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--146-k8s-csi--node--driver--89sjk-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"7a8f56d2-ec05-443a-b8e9-9b53fb320745", ResourceVersion:"1015", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 14, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-146", ContainerID:"fe7f4c2b50137faaba4fde4d8f536d970d7fa8f5666083e5ec3ecac9539223fc", Pod:"csi-node-driver-89sjk", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.60.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali945b8c99053", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:14:47.786208 env[1824]: 2025-11-01 00:14:47.404 [INFO][4766] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e" Nov 1 00:14:47.786208 env[1824]: 2025-11-01 00:14:47.404 [INFO][4766] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e" iface="eth0" netns="" Nov 1 00:14:47.786208 env[1824]: 2025-11-01 00:14:47.404 [INFO][4766] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e" Nov 1 00:14:47.786208 env[1824]: 2025-11-01 00:14:47.404 [INFO][4766] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e" Nov 1 00:14:47.786208 env[1824]: 2025-11-01 00:14:47.693 [INFO][4836] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e" HandleID="k8s-pod-network.37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e" Workload="ip--172--31--27--146-k8s-csi--node--driver--89sjk-eth0" Nov 1 00:14:47.786208 env[1824]: 2025-11-01 00:14:47.710 [INFO][4836] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:14:47.786208 env[1824]: 2025-11-01 00:14:47.710 [INFO][4836] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:14:47.786208 env[1824]: 2025-11-01 00:14:47.748 [WARNING][4836] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e" HandleID="k8s-pod-network.37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e" Workload="ip--172--31--27--146-k8s-csi--node--driver--89sjk-eth0" Nov 1 00:14:47.786208 env[1824]: 2025-11-01 00:14:47.749 [INFO][4836] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e" HandleID="k8s-pod-network.37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e" Workload="ip--172--31--27--146-k8s-csi--node--driver--89sjk-eth0" Nov 1 00:14:47.786208 env[1824]: 2025-11-01 00:14:47.763 [INFO][4836] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:14:47.786208 env[1824]: 2025-11-01 00:14:47.776 [INFO][4766] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e" Nov 1 00:14:47.787608 env[1824]: time="2025-11-01T00:14:47.787549226Z" level=info msg="TearDown network for sandbox \"37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e\" successfully" Nov 1 00:14:47.788056 env[1824]: time="2025-11-01T00:14:47.788016043Z" level=info msg="StopPodSandbox for \"37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e\" returns successfully" Nov 1 00:14:47.791858 env[1824]: time="2025-11-01T00:14:47.791805396Z" level=info msg="RemovePodSandbox for \"37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e\"" Nov 1 00:14:47.792182 env[1824]: time="2025-11-01T00:14:47.792093512Z" level=info msg="Forcibly stopping sandbox \"37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e\"" Nov 1 00:14:47.816000 audit[4867]: NETFILTER_CFG table=filter:116 family=2 entries=20 op=nft_register_rule pid=4867 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:14:47.823290 env[1824]: 2025-11-01 00:14:47.469 [INFO][4807] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac" Nov 1 00:14:47.823290 env[1824]: 2025-11-01 00:14:47.469 [INFO][4807] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac" iface="eth0" netns="/var/run/netns/cni-c3672356-43ce-66ee-0bfa-f15f7864710b" Nov 1 00:14:47.823290 env[1824]: 2025-11-01 00:14:47.471 [INFO][4807] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac" iface="eth0" netns="/var/run/netns/cni-c3672356-43ce-66ee-0bfa-f15f7864710b" Nov 1 00:14:47.823290 env[1824]: 2025-11-01 00:14:47.477 [INFO][4807] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac" iface="eth0" netns="/var/run/netns/cni-c3672356-43ce-66ee-0bfa-f15f7864710b" Nov 1 00:14:47.823290 env[1824]: 2025-11-01 00:14:47.478 [INFO][4807] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac" Nov 1 00:14:47.823290 env[1824]: 2025-11-01 00:14:47.478 [INFO][4807] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac" Nov 1 00:14:47.823290 env[1824]: 2025-11-01 00:14:47.719 [INFO][4835] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac" HandleID="k8s-pod-network.a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac" Workload="ip--172--31--27--146-k8s-calico--kube--controllers--7758fdbbb7--7swhm-eth0" Nov 1 00:14:47.823290 env[1824]: 2025-11-01 00:14:47.723 [INFO][4835] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:14:47.823290 env[1824]: 2025-11-01 00:14:47.767 [INFO][4835] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:14:47.823290 env[1824]: 2025-11-01 00:14:47.798 [WARNING][4835] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac" HandleID="k8s-pod-network.a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac" Workload="ip--172--31--27--146-k8s-calico--kube--controllers--7758fdbbb7--7swhm-eth0" Nov 1 00:14:47.823290 env[1824]: 2025-11-01 00:14:47.798 [INFO][4835] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac" HandleID="k8s-pod-network.a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac" Workload="ip--172--31--27--146-k8s-calico--kube--controllers--7758fdbbb7--7swhm-eth0" Nov 1 00:14:47.823290 env[1824]: 2025-11-01 00:14:47.806 [INFO][4835] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:14:47.823290 env[1824]: 2025-11-01 00:14:47.816 [INFO][4807] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac" Nov 1 00:14:47.828091 systemd[1]: run-netns-cni\x2dc3672356\x2d43ce\x2d66ee\x2d0bfa\x2df15f7864710b.mount: Deactivated successfully. Nov 1 00:14:47.830560 env[1824]: time="2025-11-01T00:14:47.830487493Z" level=info msg="TearDown network for sandbox \"a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac\" successfully" Nov 1 00:14:47.830728 env[1824]: time="2025-11-01T00:14:47.830553696Z" level=info msg="StopPodSandbox for \"a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac\" returns successfully" Nov 1 00:14:47.831696 env[1824]: time="2025-11-01T00:14:47.831624056Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7758fdbbb7-7swhm,Uid:7c4dfa77-9d3c-4d7b-9cd8-e90f78821efe,Namespace:calico-system,Attempt:1,}" Nov 1 00:14:47.816000 audit[4867]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffd9680340 a2=0 a3=1 items=0 ppid=3030 pid=4867 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:47.816000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:14:47.857000 audit[4867]: NETFILTER_CFG table=nat:117 family=2 entries=14 op=nft_register_rule pid=4867 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:14:47.857000 audit[4867]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3468 a0=3 a1=ffffd9680340 a2=0 a3=1 items=0 ppid=3030 pid=4867 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:47.857000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:14:47.992043 env[1824]: 2025-11-01 00:14:47.673 [INFO][4800] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee" Nov 1 00:14:47.992043 env[1824]: 2025-11-01 00:14:47.673 [INFO][4800] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee" iface="eth0" netns="/var/run/netns/cni-78915ae4-e0c7-aa1e-eb39-b1e2ea8c8ce4" Nov 1 00:14:47.992043 env[1824]: 2025-11-01 00:14:47.675 [INFO][4800] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee" iface="eth0" netns="/var/run/netns/cni-78915ae4-e0c7-aa1e-eb39-b1e2ea8c8ce4" Nov 1 00:14:47.992043 env[1824]: 2025-11-01 00:14:47.678 [INFO][4800] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee" iface="eth0" netns="/var/run/netns/cni-78915ae4-e0c7-aa1e-eb39-b1e2ea8c8ce4" Nov 1 00:14:47.992043 env[1824]: 2025-11-01 00:14:47.678 [INFO][4800] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee" Nov 1 00:14:47.992043 env[1824]: 2025-11-01 00:14:47.678 [INFO][4800] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee" Nov 1 00:14:47.992043 env[1824]: 2025-11-01 00:14:47.925 [INFO][4861] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee" HandleID="k8s-pod-network.5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee" Workload="ip--172--31--27--146-k8s-calico--apiserver--6d9db7877d--dphkx-eth0" Nov 1 00:14:47.992043 env[1824]: 2025-11-01 00:14:47.933 [INFO][4861] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:14:47.992043 env[1824]: 2025-11-01 00:14:47.933 [INFO][4861] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:14:47.992043 env[1824]: 2025-11-01 00:14:47.965 [WARNING][4861] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee" HandleID="k8s-pod-network.5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee" Workload="ip--172--31--27--146-k8s-calico--apiserver--6d9db7877d--dphkx-eth0" Nov 1 00:14:47.992043 env[1824]: 2025-11-01 00:14:47.965 [INFO][4861] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee" HandleID="k8s-pod-network.5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee" Workload="ip--172--31--27--146-k8s-calico--apiserver--6d9db7877d--dphkx-eth0" Nov 1 00:14:47.992043 env[1824]: 2025-11-01 00:14:47.978 [INFO][4861] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:14:47.992043 env[1824]: 2025-11-01 00:14:47.989 [INFO][4800] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee" Nov 1 00:14:47.994308 env[1824]: time="2025-11-01T00:14:47.994247824Z" level=info msg="TearDown network for sandbox \"5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee\" successfully" Nov 1 00:14:47.994531 env[1824]: time="2025-11-01T00:14:47.994497180Z" level=info msg="StopPodSandbox for \"5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee\" returns successfully" Nov 1 00:14:47.996080 env[1824]: time="2025-11-01T00:14:47.996017390Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6d9db7877d-dphkx,Uid:d04e8d82-e949-4962-a876-1dbd67173f6c,Namespace:calico-apiserver,Attempt:1,}" Nov 1 00:14:48.060575 env[1824]: 2025-11-01 00:14:47.620 [INFO][4786] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e" Nov 1 00:14:48.060575 env[1824]: 2025-11-01 00:14:47.621 [INFO][4786] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e" iface="eth0" netns="/var/run/netns/cni-7faaa072-730b-d61b-228b-1369f6360c89" Nov 1 00:14:48.060575 env[1824]: 2025-11-01 00:14:47.621 [INFO][4786] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e" iface="eth0" netns="/var/run/netns/cni-7faaa072-730b-d61b-228b-1369f6360c89" Nov 1 00:14:48.060575 env[1824]: 2025-11-01 00:14:47.624 [INFO][4786] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e" iface="eth0" netns="/var/run/netns/cni-7faaa072-730b-d61b-228b-1369f6360c89" Nov 1 00:14:48.060575 env[1824]: 2025-11-01 00:14:47.624 [INFO][4786] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e" Nov 1 00:14:48.060575 env[1824]: 2025-11-01 00:14:47.625 [INFO][4786] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e" Nov 1 00:14:48.060575 env[1824]: 2025-11-01 00:14:47.982 [INFO][4856] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e" HandleID="k8s-pod-network.7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e" Workload="ip--172--31--27--146-k8s-coredns--668d6bf9bc--57x5z-eth0" Nov 1 00:14:48.060575 env[1824]: 2025-11-01 00:14:47.982 [INFO][4856] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:14:48.060575 env[1824]: 2025-11-01 00:14:47.982 [INFO][4856] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:14:48.060575 env[1824]: 2025-11-01 00:14:48.026 [WARNING][4856] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e" HandleID="k8s-pod-network.7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e" Workload="ip--172--31--27--146-k8s-coredns--668d6bf9bc--57x5z-eth0" Nov 1 00:14:48.060575 env[1824]: 2025-11-01 00:14:48.027 [INFO][4856] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e" HandleID="k8s-pod-network.7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e" Workload="ip--172--31--27--146-k8s-coredns--668d6bf9bc--57x5z-eth0" Nov 1 00:14:48.060575 env[1824]: 2025-11-01 00:14:48.038 [INFO][4856] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:14:48.060575 env[1824]: 2025-11-01 00:14:48.054 [INFO][4786] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e" Nov 1 00:14:48.063723 env[1824]: time="2025-11-01T00:14:48.063641519Z" level=info msg="TearDown network for sandbox \"7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e\" successfully" Nov 1 00:14:48.063723 env[1824]: time="2025-11-01T00:14:48.063710182Z" level=info msg="StopPodSandbox for \"7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e\" returns successfully" Nov 1 00:14:48.065029 env[1824]: time="2025-11-01T00:14:48.064959665Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-57x5z,Uid:81b9363b-5132-4737-acfe-192244e24f20,Namespace:kube-system,Attempt:1,}" Nov 1 00:14:48.235406 systemd[1]: run-netns-cni\x2d7faaa072\x2d730b\x2dd61b\x2d228b\x2d1369f6360c89.mount: Deactivated successfully. Nov 1 00:14:48.235580 systemd[1]: run-netns-cni\x2d78915ae4\x2de0c7\x2daa1e\x2deb39\x2db1e2ea8c8ce4.mount: Deactivated successfully. Nov 1 00:14:48.327492 systemd-networkd[1549]: calic7947145fc3: Gained IPv6LL Nov 1 00:14:48.392937 systemd-networkd[1549]: cali519bebf1aed: Link UP Nov 1 00:14:48.401039 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Nov 1 00:14:48.401267 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali519bebf1aed: link becomes ready Nov 1 00:14:48.401523 systemd-networkd[1549]: cali519bebf1aed: Gained carrier Nov 1 00:14:48.445867 kubelet[2905]: E1101 00:14:48.445805 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-hp4nw" podUID="2672231a-dbf2-4175-a896-3a2597610669" Nov 1 00:14:48.449949 kubelet[2905]: E1101 00:14:48.449578 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-89sjk" podUID="7a8f56d2-ec05-443a-b8e9-9b53fb320745" Nov 1 00:14:48.468496 env[1824]: 2025-11-01 00:14:47.938 [INFO][4845] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--27--146-k8s-coredns--668d6bf9bc--9pzj4-eth0 coredns-668d6bf9bc- kube-system 4b6be88e-2b28-4afc-b9bf-475fed78cc30 1042 0 2025-11-01 00:13:52 +0000 UTC map[k8s-app:kube-dns pod-template-hash:668d6bf9bc projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ip-172-31-27-146 coredns-668d6bf9bc-9pzj4 eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali519bebf1aed [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="645c9167c93a9195302a61585b604c239467700cf87342dc98e8e4129962cbdb" Namespace="kube-system" Pod="coredns-668d6bf9bc-9pzj4" WorkloadEndpoint="ip--172--31--27--146-k8s-coredns--668d6bf9bc--9pzj4-" Nov 1 00:14:48.468496 env[1824]: 2025-11-01 00:14:47.938 [INFO][4845] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="645c9167c93a9195302a61585b604c239467700cf87342dc98e8e4129962cbdb" Namespace="kube-system" Pod="coredns-668d6bf9bc-9pzj4" WorkloadEndpoint="ip--172--31--27--146-k8s-coredns--668d6bf9bc--9pzj4-eth0" Nov 1 00:14:48.468496 env[1824]: 2025-11-01 00:14:48.287 [INFO][4897] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="645c9167c93a9195302a61585b604c239467700cf87342dc98e8e4129962cbdb" HandleID="k8s-pod-network.645c9167c93a9195302a61585b604c239467700cf87342dc98e8e4129962cbdb" Workload="ip--172--31--27--146-k8s-coredns--668d6bf9bc--9pzj4-eth0" Nov 1 00:14:48.468496 env[1824]: 2025-11-01 00:14:48.287 [INFO][4897] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="645c9167c93a9195302a61585b604c239467700cf87342dc98e8e4129962cbdb" HandleID="k8s-pod-network.645c9167c93a9195302a61585b604c239467700cf87342dc98e8e4129962cbdb" Workload="ip--172--31--27--146-k8s-coredns--668d6bf9bc--9pzj4-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004c4a0), Attrs:map[string]string{"namespace":"kube-system", "node":"ip-172-31-27-146", "pod":"coredns-668d6bf9bc-9pzj4", "timestamp":"2025-11-01 00:14:48.287016746 +0000 UTC"}, Hostname:"ip-172-31-27-146", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:14:48.468496 env[1824]: 2025-11-01 00:14:48.287 [INFO][4897] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:14:48.468496 env[1824]: 2025-11-01 00:14:48.287 [INFO][4897] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:14:48.468496 env[1824]: 2025-11-01 00:14:48.287 [INFO][4897] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-27-146' Nov 1 00:14:48.468496 env[1824]: 2025-11-01 00:14:48.309 [INFO][4897] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.645c9167c93a9195302a61585b604c239467700cf87342dc98e8e4129962cbdb" host="ip-172-31-27-146" Nov 1 00:14:48.468496 env[1824]: 2025-11-01 00:14:48.317 [INFO][4897] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-27-146" Nov 1 00:14:48.468496 env[1824]: 2025-11-01 00:14:48.325 [INFO][4897] ipam/ipam.go 511: Trying affinity for 192.168.60.192/26 host="ip-172-31-27-146" Nov 1 00:14:48.468496 env[1824]: 2025-11-01 00:14:48.331 [INFO][4897] ipam/ipam.go 158: Attempting to load block cidr=192.168.60.192/26 host="ip-172-31-27-146" Nov 1 00:14:48.468496 env[1824]: 2025-11-01 00:14:48.341 [INFO][4897] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.60.192/26 host="ip-172-31-27-146" Nov 1 00:14:48.468496 env[1824]: 2025-11-01 00:14:48.341 [INFO][4897] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.60.192/26 handle="k8s-pod-network.645c9167c93a9195302a61585b604c239467700cf87342dc98e8e4129962cbdb" host="ip-172-31-27-146" Nov 1 00:14:48.468496 env[1824]: 2025-11-01 00:14:48.347 [INFO][4897] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.645c9167c93a9195302a61585b604c239467700cf87342dc98e8e4129962cbdb Nov 1 00:14:48.468496 env[1824]: 2025-11-01 00:14:48.364 [INFO][4897] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.60.192/26 handle="k8s-pod-network.645c9167c93a9195302a61585b604c239467700cf87342dc98e8e4129962cbdb" host="ip-172-31-27-146" Nov 1 00:14:48.468496 env[1824]: 2025-11-01 00:14:48.378 [INFO][4897] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.60.197/26] block=192.168.60.192/26 handle="k8s-pod-network.645c9167c93a9195302a61585b604c239467700cf87342dc98e8e4129962cbdb" host="ip-172-31-27-146" Nov 1 00:14:48.468496 env[1824]: 2025-11-01 00:14:48.378 [INFO][4897] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.60.197/26] handle="k8s-pod-network.645c9167c93a9195302a61585b604c239467700cf87342dc98e8e4129962cbdb" host="ip-172-31-27-146" Nov 1 00:14:48.468496 env[1824]: 2025-11-01 00:14:48.378 [INFO][4897] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:14:48.468496 env[1824]: 2025-11-01 00:14:48.378 [INFO][4897] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.60.197/26] IPv6=[] ContainerID="645c9167c93a9195302a61585b604c239467700cf87342dc98e8e4129962cbdb" HandleID="k8s-pod-network.645c9167c93a9195302a61585b604c239467700cf87342dc98e8e4129962cbdb" Workload="ip--172--31--27--146-k8s-coredns--668d6bf9bc--9pzj4-eth0" Nov 1 00:14:48.480240 env[1824]: 2025-11-01 00:14:48.385 [INFO][4845] cni-plugin/k8s.go 418: Populated endpoint ContainerID="645c9167c93a9195302a61585b604c239467700cf87342dc98e8e4129962cbdb" Namespace="kube-system" Pod="coredns-668d6bf9bc-9pzj4" WorkloadEndpoint="ip--172--31--27--146-k8s-coredns--668d6bf9bc--9pzj4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--146-k8s-coredns--668d6bf9bc--9pzj4-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"4b6be88e-2b28-4afc-b9bf-475fed78cc30", ResourceVersion:"1042", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 13, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-146", ContainerID:"", Pod:"coredns-668d6bf9bc-9pzj4", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.60.197/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali519bebf1aed", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:14:48.480240 env[1824]: 2025-11-01 00:14:48.386 [INFO][4845] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.60.197/32] ContainerID="645c9167c93a9195302a61585b604c239467700cf87342dc98e8e4129962cbdb" Namespace="kube-system" Pod="coredns-668d6bf9bc-9pzj4" WorkloadEndpoint="ip--172--31--27--146-k8s-coredns--668d6bf9bc--9pzj4-eth0" Nov 1 00:14:48.480240 env[1824]: 2025-11-01 00:14:48.386 [INFO][4845] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali519bebf1aed ContainerID="645c9167c93a9195302a61585b604c239467700cf87342dc98e8e4129962cbdb" Namespace="kube-system" Pod="coredns-668d6bf9bc-9pzj4" WorkloadEndpoint="ip--172--31--27--146-k8s-coredns--668d6bf9bc--9pzj4-eth0" Nov 1 00:14:48.480240 env[1824]: 2025-11-01 00:14:48.408 [INFO][4845] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="645c9167c93a9195302a61585b604c239467700cf87342dc98e8e4129962cbdb" Namespace="kube-system" Pod="coredns-668d6bf9bc-9pzj4" WorkloadEndpoint="ip--172--31--27--146-k8s-coredns--668d6bf9bc--9pzj4-eth0" Nov 1 00:14:48.480240 env[1824]: 2025-11-01 00:14:48.414 [INFO][4845] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="645c9167c93a9195302a61585b604c239467700cf87342dc98e8e4129962cbdb" Namespace="kube-system" Pod="coredns-668d6bf9bc-9pzj4" WorkloadEndpoint="ip--172--31--27--146-k8s-coredns--668d6bf9bc--9pzj4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--146-k8s-coredns--668d6bf9bc--9pzj4-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"4b6be88e-2b28-4afc-b9bf-475fed78cc30", ResourceVersion:"1042", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 13, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-146", ContainerID:"645c9167c93a9195302a61585b604c239467700cf87342dc98e8e4129962cbdb", Pod:"coredns-668d6bf9bc-9pzj4", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.60.197/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali519bebf1aed", MAC:"c2:27:27:7b:f2:0b", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:14:48.480240 env[1824]: 2025-11-01 00:14:48.451 [INFO][4845] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="645c9167c93a9195302a61585b604c239467700cf87342dc98e8e4129962cbdb" Namespace="kube-system" Pod="coredns-668d6bf9bc-9pzj4" WorkloadEndpoint="ip--172--31--27--146-k8s-coredns--668d6bf9bc--9pzj4-eth0" Nov 1 00:14:48.609000 audit[4968]: NETFILTER_CFG table=filter:118 family=2 entries=20 op=nft_register_rule pid=4968 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:14:48.609000 audit[4968]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffef112520 a2=0 a3=1 items=0 ppid=3030 pid=4968 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:48.609000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:14:48.617000 audit[4968]: NETFILTER_CFG table=nat:119 family=2 entries=14 op=nft_register_rule pid=4968 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:14:48.617000 audit[4968]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3468 a0=3 a1=ffffef112520 a2=0 a3=1 items=0 ppid=3030 pid=4968 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:48.617000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:14:48.655910 systemd-networkd[1549]: cali0cb23678c13: Link UP Nov 1 00:14:48.693328 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali0cb23678c13: link becomes ready Nov 1 00:14:48.693883 systemd-networkd[1549]: cali0cb23678c13: Gained carrier Nov 1 00:14:48.706959 env[1824]: time="2025-11-01T00:14:48.706767807Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:14:48.707339 env[1824]: time="2025-11-01T00:14:48.706895761Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:14:48.707918 env[1824]: time="2025-11-01T00:14:48.707296231Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:14:48.711000 audit[4982]: NETFILTER_CFG table=filter:120 family=2 entries=60 op=nft_register_chain pid=4982 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:14:48.711000 audit[4982]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=28968 a0=3 a1=ffffffedb1f0 a2=0 a3=ffffa97fafa8 items=0 ppid=4273 pid=4982 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:48.711000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:14:48.714446 env[1824]: time="2025-11-01T00:14:48.714318536Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/645c9167c93a9195302a61585b604c239467700cf87342dc98e8e4129962cbdb pid=4969 runtime=io.containerd.runc.v2 Nov 1 00:14:48.717000 audit[2573]: AVC avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=5907 scontext=system_u:system_r:svirt_lxc_net_t:s0:c567,c697 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:14:48.717000 audit[2573]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001374c60 a2=fc6 a3=0 items=0 ppid=2411 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c567,c697 key=(null) Nov 1 00:14:48.717000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:14:48.732000 audit[2573]: AVC avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=5907 scontext=system_u:system_r:svirt_lxc_net_t:s0:c567,c697 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:14:48.732000 audit[2573]: AVC avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=5907 scontext=system_u:system_r:svirt_lxc_net_t:s0:c567,c697 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:14:48.732000 audit[2573]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001374fa0 a2=fc6 a3=0 items=0 ppid=2411 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c567,c697 key=(null) Nov 1 00:14:48.732000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:14:48.732000 audit[2573]: AVC avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=5907 scontext=system_u:system_r:svirt_lxc_net_t:s0:c567,c697 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:14:48.732000 audit[2573]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001374fe0 a2=fc6 a3=0 items=0 ppid=2411 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c567,c697 key=(null) Nov 1 00:14:48.732000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:14:48.732000 audit[2573]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000a09e00 a2=fc6 a3=0 items=0 ppid=2411 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c567,c697 key=(null) Nov 1 00:14:48.732000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:14:48.747013 env[1824]: 2025-11-01 00:14:48.189 [INFO][4877] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--27--146-k8s-calico--kube--controllers--7758fdbbb7--7swhm-eth0 calico-kube-controllers-7758fdbbb7- calico-system 7c4dfa77-9d3c-4d7b-9cd8-e90f78821efe 1046 0 2025-11-01 00:14:20 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:7758fdbbb7 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s ip-172-31-27-146 calico-kube-controllers-7758fdbbb7-7swhm eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali0cb23678c13 [] [] }} ContainerID="8caccadeaa0edc28e3abba471cf34819d550e2e177946872c6b58ccc3346f683" Namespace="calico-system" Pod="calico-kube-controllers-7758fdbbb7-7swhm" WorkloadEndpoint="ip--172--31--27--146-k8s-calico--kube--controllers--7758fdbbb7--7swhm-" Nov 1 00:14:48.747013 env[1824]: 2025-11-01 00:14:48.189 [INFO][4877] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="8caccadeaa0edc28e3abba471cf34819d550e2e177946872c6b58ccc3346f683" Namespace="calico-system" Pod="calico-kube-controllers-7758fdbbb7-7swhm" WorkloadEndpoint="ip--172--31--27--146-k8s-calico--kube--controllers--7758fdbbb7--7swhm-eth0" Nov 1 00:14:48.747013 env[1824]: 2025-11-01 00:14:48.523 [INFO][4927] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="8caccadeaa0edc28e3abba471cf34819d550e2e177946872c6b58ccc3346f683" HandleID="k8s-pod-network.8caccadeaa0edc28e3abba471cf34819d550e2e177946872c6b58ccc3346f683" Workload="ip--172--31--27--146-k8s-calico--kube--controllers--7758fdbbb7--7swhm-eth0" Nov 1 00:14:48.747013 env[1824]: 2025-11-01 00:14:48.523 [INFO][4927] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="8caccadeaa0edc28e3abba471cf34819d550e2e177946872c6b58ccc3346f683" HandleID="k8s-pod-network.8caccadeaa0edc28e3abba471cf34819d550e2e177946872c6b58ccc3346f683" Workload="ip--172--31--27--146-k8s-calico--kube--controllers--7758fdbbb7--7swhm-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002cb880), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-27-146", "pod":"calico-kube-controllers-7758fdbbb7-7swhm", "timestamp":"2025-11-01 00:14:48.523359081 +0000 UTC"}, Hostname:"ip-172-31-27-146", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:14:48.747013 env[1824]: 2025-11-01 00:14:48.523 [INFO][4927] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:14:48.747013 env[1824]: 2025-11-01 00:14:48.524 [INFO][4927] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:14:48.747013 env[1824]: 2025-11-01 00:14:48.524 [INFO][4927] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-27-146' Nov 1 00:14:48.747013 env[1824]: 2025-11-01 00:14:48.576 [INFO][4927] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.8caccadeaa0edc28e3abba471cf34819d550e2e177946872c6b58ccc3346f683" host="ip-172-31-27-146" Nov 1 00:14:48.747013 env[1824]: 2025-11-01 00:14:48.592 [INFO][4927] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-27-146" Nov 1 00:14:48.747013 env[1824]: 2025-11-01 00:14:48.604 [INFO][4927] ipam/ipam.go 511: Trying affinity for 192.168.60.192/26 host="ip-172-31-27-146" Nov 1 00:14:48.747013 env[1824]: 2025-11-01 00:14:48.607 [INFO][4927] ipam/ipam.go 158: Attempting to load block cidr=192.168.60.192/26 host="ip-172-31-27-146" Nov 1 00:14:48.747013 env[1824]: 2025-11-01 00:14:48.612 [INFO][4927] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.60.192/26 host="ip-172-31-27-146" Nov 1 00:14:48.747013 env[1824]: 2025-11-01 00:14:48.612 [INFO][4927] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.60.192/26 handle="k8s-pod-network.8caccadeaa0edc28e3abba471cf34819d550e2e177946872c6b58ccc3346f683" host="ip-172-31-27-146" Nov 1 00:14:48.747013 env[1824]: 2025-11-01 00:14:48.615 [INFO][4927] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.8caccadeaa0edc28e3abba471cf34819d550e2e177946872c6b58ccc3346f683 Nov 1 00:14:48.747013 env[1824]: 2025-11-01 00:14:48.624 [INFO][4927] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.60.192/26 handle="k8s-pod-network.8caccadeaa0edc28e3abba471cf34819d550e2e177946872c6b58ccc3346f683" host="ip-172-31-27-146" Nov 1 00:14:48.747013 env[1824]: 2025-11-01 00:14:48.637 [INFO][4927] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.60.198/26] block=192.168.60.192/26 handle="k8s-pod-network.8caccadeaa0edc28e3abba471cf34819d550e2e177946872c6b58ccc3346f683" host="ip-172-31-27-146" Nov 1 00:14:48.747013 env[1824]: 2025-11-01 00:14:48.637 [INFO][4927] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.60.198/26] handle="k8s-pod-network.8caccadeaa0edc28e3abba471cf34819d550e2e177946872c6b58ccc3346f683" host="ip-172-31-27-146" Nov 1 00:14:48.747013 env[1824]: 2025-11-01 00:14:48.637 [INFO][4927] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:14:48.747013 env[1824]: 2025-11-01 00:14:48.638 [INFO][4927] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.60.198/26] IPv6=[] ContainerID="8caccadeaa0edc28e3abba471cf34819d550e2e177946872c6b58ccc3346f683" HandleID="k8s-pod-network.8caccadeaa0edc28e3abba471cf34819d550e2e177946872c6b58ccc3346f683" Workload="ip--172--31--27--146-k8s-calico--kube--controllers--7758fdbbb7--7swhm-eth0" Nov 1 00:14:48.748518 env[1824]: 2025-11-01 00:14:48.641 [INFO][4877] cni-plugin/k8s.go 418: Populated endpoint ContainerID="8caccadeaa0edc28e3abba471cf34819d550e2e177946872c6b58ccc3346f683" Namespace="calico-system" Pod="calico-kube-controllers-7758fdbbb7-7swhm" WorkloadEndpoint="ip--172--31--27--146-k8s-calico--kube--controllers--7758fdbbb7--7swhm-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--146-k8s-calico--kube--controllers--7758fdbbb7--7swhm-eth0", GenerateName:"calico-kube-controllers-7758fdbbb7-", Namespace:"calico-system", SelfLink:"", UID:"7c4dfa77-9d3c-4d7b-9cd8-e90f78821efe", ResourceVersion:"1046", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 14, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7758fdbbb7", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-146", ContainerID:"", Pod:"calico-kube-controllers-7758fdbbb7-7swhm", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.60.198/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali0cb23678c13", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:14:48.748518 env[1824]: 2025-11-01 00:14:48.642 [INFO][4877] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.60.198/32] ContainerID="8caccadeaa0edc28e3abba471cf34819d550e2e177946872c6b58ccc3346f683" Namespace="calico-system" Pod="calico-kube-controllers-7758fdbbb7-7swhm" WorkloadEndpoint="ip--172--31--27--146-k8s-calico--kube--controllers--7758fdbbb7--7swhm-eth0" Nov 1 00:14:48.748518 env[1824]: 2025-11-01 00:14:48.642 [INFO][4877] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali0cb23678c13 ContainerID="8caccadeaa0edc28e3abba471cf34819d550e2e177946872c6b58ccc3346f683" Namespace="calico-system" Pod="calico-kube-controllers-7758fdbbb7-7swhm" WorkloadEndpoint="ip--172--31--27--146-k8s-calico--kube--controllers--7758fdbbb7--7swhm-eth0" Nov 1 00:14:48.748518 env[1824]: 2025-11-01 00:14:48.689 [INFO][4877] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="8caccadeaa0edc28e3abba471cf34819d550e2e177946872c6b58ccc3346f683" Namespace="calico-system" Pod="calico-kube-controllers-7758fdbbb7-7swhm" WorkloadEndpoint="ip--172--31--27--146-k8s-calico--kube--controllers--7758fdbbb7--7swhm-eth0" Nov 1 00:14:48.748518 env[1824]: 2025-11-01 00:14:48.696 [INFO][4877] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="8caccadeaa0edc28e3abba471cf34819d550e2e177946872c6b58ccc3346f683" Namespace="calico-system" Pod="calico-kube-controllers-7758fdbbb7-7swhm" WorkloadEndpoint="ip--172--31--27--146-k8s-calico--kube--controllers--7758fdbbb7--7swhm-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--146-k8s-calico--kube--controllers--7758fdbbb7--7swhm-eth0", GenerateName:"calico-kube-controllers-7758fdbbb7-", Namespace:"calico-system", SelfLink:"", UID:"7c4dfa77-9d3c-4d7b-9cd8-e90f78821efe", ResourceVersion:"1046", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 14, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7758fdbbb7", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-146", ContainerID:"8caccadeaa0edc28e3abba471cf34819d550e2e177946872c6b58ccc3346f683", Pod:"calico-kube-controllers-7758fdbbb7-7swhm", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.60.198/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali0cb23678c13", MAC:"e6:7f:66:46:9e:1c", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:14:48.748518 env[1824]: 2025-11-01 00:14:48.738 [INFO][4877] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="8caccadeaa0edc28e3abba471cf34819d550e2e177946872c6b58ccc3346f683" Namespace="calico-system" Pod="calico-kube-controllers-7758fdbbb7-7swhm" WorkloadEndpoint="ip--172--31--27--146-k8s-calico--kube--controllers--7758fdbbb7--7swhm-eth0" Nov 1 00:14:48.834220 systemd-networkd[1549]: cali5461fa36da9: Link UP Nov 1 00:14:48.845584 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali5461fa36da9: link becomes ready Nov 1 00:14:48.845978 systemd-networkd[1549]: cali5461fa36da9: Gained carrier Nov 1 00:14:48.876939 systemd[1]: run-containerd-runc-k8s.io-645c9167c93a9195302a61585b604c239467700cf87342dc98e8e4129962cbdb-runc.C18nUp.mount: Deactivated successfully. Nov 1 00:14:48.895855 systemd[1]: Started cri-containerd-645c9167c93a9195302a61585b604c239467700cf87342dc98e8e4129962cbdb.scope. Nov 1 00:14:48.923203 env[1824]: 2025-11-01 00:14:48.244 [WARNING][4883] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--146-k8s-csi--node--driver--89sjk-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"7a8f56d2-ec05-443a-b8e9-9b53fb320745", ResourceVersion:"1055", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 14, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-146", ContainerID:"fe7f4c2b50137faaba4fde4d8f536d970d7fa8f5666083e5ec3ecac9539223fc", Pod:"csi-node-driver-89sjk", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.60.195/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali945b8c99053", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:14:48.923203 env[1824]: 2025-11-01 00:14:48.244 [INFO][4883] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e" Nov 1 00:14:48.923203 env[1824]: 2025-11-01 00:14:48.244 [INFO][4883] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e" iface="eth0" netns="" Nov 1 00:14:48.923203 env[1824]: 2025-11-01 00:14:48.244 [INFO][4883] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e" Nov 1 00:14:48.923203 env[1824]: 2025-11-01 00:14:48.244 [INFO][4883] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e" Nov 1 00:14:48.923203 env[1824]: 2025-11-01 00:14:48.631 [INFO][4931] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e" HandleID="k8s-pod-network.37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e" Workload="ip--172--31--27--146-k8s-csi--node--driver--89sjk-eth0" Nov 1 00:14:48.923203 env[1824]: 2025-11-01 00:14:48.631 [INFO][4931] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:14:48.923203 env[1824]: 2025-11-01 00:14:48.807 [INFO][4931] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:14:48.923203 env[1824]: 2025-11-01 00:14:48.883 [WARNING][4931] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e" HandleID="k8s-pod-network.37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e" Workload="ip--172--31--27--146-k8s-csi--node--driver--89sjk-eth0" Nov 1 00:14:48.923203 env[1824]: 2025-11-01 00:14:48.883 [INFO][4931] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e" HandleID="k8s-pod-network.37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e" Workload="ip--172--31--27--146-k8s-csi--node--driver--89sjk-eth0" Nov 1 00:14:48.923203 env[1824]: 2025-11-01 00:14:48.901 [INFO][4931] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:14:48.923203 env[1824]: 2025-11-01 00:14:48.914 [INFO][4883] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e" Nov 1 00:14:48.924187 env[1824]: time="2025-11-01T00:14:48.924137799Z" level=info msg="TearDown network for sandbox \"37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e\" successfully" Nov 1 00:14:48.932101 env[1824]: time="2025-11-01T00:14:48.932041648Z" level=info msg="RemovePodSandbox \"37510360c0038a94bf9350364b6d59566d15d98b14a33a184c3c9c3471224a3e\" returns successfully" Nov 1 00:14:48.934700 env[1824]: time="2025-11-01T00:14:48.934633781Z" level=info msg="StopPodSandbox for \"fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339\"" Nov 1 00:14:48.949000 audit[5013]: NETFILTER_CFG table=filter:121 family=2 entries=48 op=nft_register_chain pid=5013 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:14:48.951592 env[1824]: 2025-11-01 00:14:48.367 [INFO][4903] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--27--146-k8s-calico--apiserver--6d9db7877d--dphkx-eth0 calico-apiserver-6d9db7877d- calico-apiserver d04e8d82-e949-4962-a876-1dbd67173f6c 1059 0 2025-11-01 00:14:07 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:6d9db7877d projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ip-172-31-27-146 calico-apiserver-6d9db7877d-dphkx eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali5461fa36da9 [] [] }} ContainerID="d764a4e00d5917e9f2a7e8f811bd68d13168e0652ac696c38e305d50ae452b92" Namespace="calico-apiserver" Pod="calico-apiserver-6d9db7877d-dphkx" WorkloadEndpoint="ip--172--31--27--146-k8s-calico--apiserver--6d9db7877d--dphkx-" Nov 1 00:14:48.951592 env[1824]: 2025-11-01 00:14:48.367 [INFO][4903] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="d764a4e00d5917e9f2a7e8f811bd68d13168e0652ac696c38e305d50ae452b92" Namespace="calico-apiserver" Pod="calico-apiserver-6d9db7877d-dphkx" WorkloadEndpoint="ip--172--31--27--146-k8s-calico--apiserver--6d9db7877d--dphkx-eth0" Nov 1 00:14:48.951592 env[1824]: 2025-11-01 00:14:48.593 [INFO][4944] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="d764a4e00d5917e9f2a7e8f811bd68d13168e0652ac696c38e305d50ae452b92" HandleID="k8s-pod-network.d764a4e00d5917e9f2a7e8f811bd68d13168e0652ac696c38e305d50ae452b92" Workload="ip--172--31--27--146-k8s-calico--apiserver--6d9db7877d--dphkx-eth0" Nov 1 00:14:48.951592 env[1824]: 2025-11-01 00:14:48.594 [INFO][4944] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="d764a4e00d5917e9f2a7e8f811bd68d13168e0652ac696c38e305d50ae452b92" HandleID="k8s-pod-network.d764a4e00d5917e9f2a7e8f811bd68d13168e0652ac696c38e305d50ae452b92" Workload="ip--172--31--27--146-k8s-calico--apiserver--6d9db7877d--dphkx-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004d8c0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ip-172-31-27-146", "pod":"calico-apiserver-6d9db7877d-dphkx", "timestamp":"2025-11-01 00:14:48.59369489 +0000 UTC"}, Hostname:"ip-172-31-27-146", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:14:48.951592 env[1824]: 2025-11-01 00:14:48.594 [INFO][4944] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:14:48.951592 env[1824]: 2025-11-01 00:14:48.639 [INFO][4944] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:14:48.951592 env[1824]: 2025-11-01 00:14:48.639 [INFO][4944] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-27-146' Nov 1 00:14:48.951592 env[1824]: 2025-11-01 00:14:48.685 [INFO][4944] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.d764a4e00d5917e9f2a7e8f811bd68d13168e0652ac696c38e305d50ae452b92" host="ip-172-31-27-146" Nov 1 00:14:48.951592 env[1824]: 2025-11-01 00:14:48.705 [INFO][4944] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-27-146" Nov 1 00:14:48.951592 env[1824]: 2025-11-01 00:14:48.726 [INFO][4944] ipam/ipam.go 511: Trying affinity for 192.168.60.192/26 host="ip-172-31-27-146" Nov 1 00:14:48.951592 env[1824]: 2025-11-01 00:14:48.739 [INFO][4944] ipam/ipam.go 158: Attempting to load block cidr=192.168.60.192/26 host="ip-172-31-27-146" Nov 1 00:14:48.951592 env[1824]: 2025-11-01 00:14:48.754 [INFO][4944] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.60.192/26 host="ip-172-31-27-146" Nov 1 00:14:48.951592 env[1824]: 2025-11-01 00:14:48.754 [INFO][4944] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.60.192/26 handle="k8s-pod-network.d764a4e00d5917e9f2a7e8f811bd68d13168e0652ac696c38e305d50ae452b92" host="ip-172-31-27-146" Nov 1 00:14:48.951592 env[1824]: 2025-11-01 00:14:48.763 [INFO][4944] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.d764a4e00d5917e9f2a7e8f811bd68d13168e0652ac696c38e305d50ae452b92 Nov 1 00:14:48.951592 env[1824]: 2025-11-01 00:14:48.783 [INFO][4944] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.60.192/26 handle="k8s-pod-network.d764a4e00d5917e9f2a7e8f811bd68d13168e0652ac696c38e305d50ae452b92" host="ip-172-31-27-146" Nov 1 00:14:48.951592 env[1824]: 2025-11-01 00:14:48.800 [INFO][4944] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.60.199/26] block=192.168.60.192/26 handle="k8s-pod-network.d764a4e00d5917e9f2a7e8f811bd68d13168e0652ac696c38e305d50ae452b92" host="ip-172-31-27-146" Nov 1 00:14:48.951592 env[1824]: 2025-11-01 00:14:48.801 [INFO][4944] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.60.199/26] handle="k8s-pod-network.d764a4e00d5917e9f2a7e8f811bd68d13168e0652ac696c38e305d50ae452b92" host="ip-172-31-27-146" Nov 1 00:14:48.951592 env[1824]: 2025-11-01 00:14:48.801 [INFO][4944] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:14:48.951592 env[1824]: 2025-11-01 00:14:48.801 [INFO][4944] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.60.199/26] IPv6=[] ContainerID="d764a4e00d5917e9f2a7e8f811bd68d13168e0652ac696c38e305d50ae452b92" HandleID="k8s-pod-network.d764a4e00d5917e9f2a7e8f811bd68d13168e0652ac696c38e305d50ae452b92" Workload="ip--172--31--27--146-k8s-calico--apiserver--6d9db7877d--dphkx-eth0" Nov 1 00:14:48.953003 env[1824]: 2025-11-01 00:14:48.808 [INFO][4903] cni-plugin/k8s.go 418: Populated endpoint ContainerID="d764a4e00d5917e9f2a7e8f811bd68d13168e0652ac696c38e305d50ae452b92" Namespace="calico-apiserver" Pod="calico-apiserver-6d9db7877d-dphkx" WorkloadEndpoint="ip--172--31--27--146-k8s-calico--apiserver--6d9db7877d--dphkx-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--146-k8s-calico--apiserver--6d9db7877d--dphkx-eth0", GenerateName:"calico-apiserver-6d9db7877d-", Namespace:"calico-apiserver", SelfLink:"", UID:"d04e8d82-e949-4962-a876-1dbd67173f6c", ResourceVersion:"1059", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 14, 7, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6d9db7877d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-146", ContainerID:"", Pod:"calico-apiserver-6d9db7877d-dphkx", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.60.199/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali5461fa36da9", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:14:48.953003 env[1824]: 2025-11-01 00:14:48.813 [INFO][4903] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.60.199/32] ContainerID="d764a4e00d5917e9f2a7e8f811bd68d13168e0652ac696c38e305d50ae452b92" Namespace="calico-apiserver" Pod="calico-apiserver-6d9db7877d-dphkx" WorkloadEndpoint="ip--172--31--27--146-k8s-calico--apiserver--6d9db7877d--dphkx-eth0" Nov 1 00:14:48.953003 env[1824]: 2025-11-01 00:14:48.813 [INFO][4903] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali5461fa36da9 ContainerID="d764a4e00d5917e9f2a7e8f811bd68d13168e0652ac696c38e305d50ae452b92" Namespace="calico-apiserver" Pod="calico-apiserver-6d9db7877d-dphkx" WorkloadEndpoint="ip--172--31--27--146-k8s-calico--apiserver--6d9db7877d--dphkx-eth0" Nov 1 00:14:48.953003 env[1824]: 2025-11-01 00:14:48.876 [INFO][4903] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="d764a4e00d5917e9f2a7e8f811bd68d13168e0652ac696c38e305d50ae452b92" Namespace="calico-apiserver" Pod="calico-apiserver-6d9db7877d-dphkx" WorkloadEndpoint="ip--172--31--27--146-k8s-calico--apiserver--6d9db7877d--dphkx-eth0" Nov 1 00:14:48.953003 env[1824]: 2025-11-01 00:14:48.878 [INFO][4903] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="d764a4e00d5917e9f2a7e8f811bd68d13168e0652ac696c38e305d50ae452b92" Namespace="calico-apiserver" Pod="calico-apiserver-6d9db7877d-dphkx" WorkloadEndpoint="ip--172--31--27--146-k8s-calico--apiserver--6d9db7877d--dphkx-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--146-k8s-calico--apiserver--6d9db7877d--dphkx-eth0", GenerateName:"calico-apiserver-6d9db7877d-", Namespace:"calico-apiserver", SelfLink:"", UID:"d04e8d82-e949-4962-a876-1dbd67173f6c", ResourceVersion:"1059", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 14, 7, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6d9db7877d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-146", ContainerID:"d764a4e00d5917e9f2a7e8f811bd68d13168e0652ac696c38e305d50ae452b92", Pod:"calico-apiserver-6d9db7877d-dphkx", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.60.199/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali5461fa36da9", MAC:"8a:e7:a4:b7:fb:97", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:14:48.953003 env[1824]: 2025-11-01 00:14:48.943 [INFO][4903] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="d764a4e00d5917e9f2a7e8f811bd68d13168e0652ac696c38e305d50ae452b92" Namespace="calico-apiserver" Pod="calico-apiserver-6d9db7877d-dphkx" WorkloadEndpoint="ip--172--31--27--146-k8s-calico--apiserver--6d9db7877d--dphkx-eth0" Nov 1 00:14:48.949000 audit[5013]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=23124 a0=3 a1=ffffd2153fe0 a2=0 a3=ffff9e2bafa8 items=0 ppid=4273 pid=5013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:48.949000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:14:48.982866 env[1824]: time="2025-11-01T00:14:48.982726512Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:14:48.982866 env[1824]: time="2025-11-01T00:14:48.982811591Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:14:48.983330 env[1824]: time="2025-11-01T00:14:48.982838926Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:14:48.984168 env[1824]: time="2025-11-01T00:14:48.983733634Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8caccadeaa0edc28e3abba471cf34819d550e2e177946872c6b58ccc3346f683 pid=5018 runtime=io.containerd.runc.v2 Nov 1 00:14:49.002000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.002000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.002000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.002000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.002000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.002000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.002000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.002000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.002000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.002000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.002000 audit: BPF prog-id=177 op=LOAD Nov 1 00:14:49.005000 audit[4990]: AVC avc: denied { bpf } for pid=4990 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.005000 audit[4990]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4969 pid=4990 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:49.005000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634356339313637633933613931393533303261363135383562363034 Nov 1 00:14:49.005000 audit[4990]: AVC avc: denied { perfmon } for pid=4990 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.005000 audit[4990]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4969 pid=4990 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:49.005000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634356339313637633933613931393533303261363135383562363034 Nov 1 00:14:49.010000 audit[4990]: AVC avc: denied { bpf } for pid=4990 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.010000 audit[4990]: AVC avc: denied { bpf } for pid=4990 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.010000 audit[4990]: AVC avc: denied { bpf } for pid=4990 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.010000 audit[4990]: AVC avc: denied { perfmon } for pid=4990 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.010000 audit[4990]: AVC avc: denied { perfmon } for pid=4990 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.010000 audit[4990]: AVC avc: denied { perfmon } for pid=4990 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.010000 audit[4990]: AVC avc: denied { perfmon } for pid=4990 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.010000 audit[4990]: AVC avc: denied { perfmon } for pid=4990 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.010000 audit[4990]: AVC avc: denied { bpf } for pid=4990 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.010000 audit[4990]: AVC avc: denied { bpf } for pid=4990 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.010000 audit: BPF prog-id=178 op=LOAD Nov 1 00:14:49.010000 audit[4990]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4969 pid=4990 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:49.010000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634356339313637633933613931393533303261363135383562363034 Nov 1 00:14:49.010000 audit[4990]: AVC avc: denied { bpf } for pid=4990 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.010000 audit[4990]: AVC avc: denied { bpf } for pid=4990 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.010000 audit[4990]: AVC avc: denied { perfmon } for pid=4990 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.010000 audit[4990]: AVC avc: denied { perfmon } for pid=4990 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.010000 audit[4990]: AVC avc: denied { perfmon } for pid=4990 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.010000 audit[4990]: AVC avc: denied { perfmon } for pid=4990 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.010000 audit[4990]: AVC avc: denied { perfmon } for pid=4990 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.010000 audit[4990]: AVC avc: denied { bpf } for pid=4990 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.010000 audit[4990]: AVC avc: denied { bpf } for pid=4990 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.010000 audit: BPF prog-id=179 op=LOAD Nov 1 00:14:49.010000 audit[4990]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4969 pid=4990 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:49.010000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634356339313637633933613931393533303261363135383562363034 Nov 1 00:14:49.010000 audit: BPF prog-id=179 op=UNLOAD Nov 1 00:14:49.010000 audit: BPF prog-id=178 op=UNLOAD Nov 1 00:14:49.010000 audit[4990]: AVC avc: denied { bpf } for pid=4990 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.010000 audit[4990]: AVC avc: denied { bpf } for pid=4990 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.010000 audit[4990]: AVC avc: denied { bpf } for pid=4990 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.010000 audit[4990]: AVC avc: denied { perfmon } for pid=4990 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.010000 audit[4990]: AVC avc: denied { perfmon } for pid=4990 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.010000 audit[4990]: AVC avc: denied { perfmon } for pid=4990 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.010000 audit[4990]: AVC avc: denied { perfmon } for pid=4990 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.010000 audit[4990]: AVC avc: denied { perfmon } for pid=4990 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.010000 audit[4990]: AVC avc: denied { bpf } for pid=4990 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.010000 audit[4990]: AVC avc: denied { bpf } for pid=4990 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.010000 audit: BPF prog-id=180 op=LOAD Nov 1 00:14:49.010000 audit[4990]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4969 pid=4990 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:49.010000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634356339313637633933613931393533303261363135383562363034 Nov 1 00:14:49.068094 env[1824]: time="2025-11-01T00:14:49.067917392Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:14:49.068427 env[1824]: time="2025-11-01T00:14:49.068360174Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:14:49.068634 env[1824]: time="2025-11-01T00:14:49.068573808Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:14:49.069609 env[1824]: time="2025-11-01T00:14:49.069504204Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d764a4e00d5917e9f2a7e8f811bd68d13168e0652ac696c38e305d50ae452b92 pid=5066 runtime=io.containerd.runc.v2 Nov 1 00:14:49.075451 systemd-networkd[1549]: cali99581bdfeb4: Link UP Nov 1 00:14:49.095224 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali99581bdfeb4: link becomes ready Nov 1 00:14:49.095733 systemd-networkd[1549]: cali99581bdfeb4: Gained carrier Nov 1 00:14:49.135645 env[1824]: 2025-11-01 00:14:48.514 [INFO][4918] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--27--146-k8s-coredns--668d6bf9bc--57x5z-eth0 coredns-668d6bf9bc- kube-system 81b9363b-5132-4737-acfe-192244e24f20 1054 0 2025-11-01 00:13:52 +0000 UTC map[k8s-app:kube-dns pod-template-hash:668d6bf9bc projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ip-172-31-27-146 coredns-668d6bf9bc-57x5z eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali99581bdfeb4 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="d907fd889d5b3dbb7842936dd1ecc06de0dbe6ac57db667b2b2d7099c12626c5" Namespace="kube-system" Pod="coredns-668d6bf9bc-57x5z" WorkloadEndpoint="ip--172--31--27--146-k8s-coredns--668d6bf9bc--57x5z-" Nov 1 00:14:49.135645 env[1824]: 2025-11-01 00:14:48.514 [INFO][4918] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="d907fd889d5b3dbb7842936dd1ecc06de0dbe6ac57db667b2b2d7099c12626c5" Namespace="kube-system" Pod="coredns-668d6bf9bc-57x5z" WorkloadEndpoint="ip--172--31--27--146-k8s-coredns--668d6bf9bc--57x5z-eth0" Nov 1 00:14:49.135645 env[1824]: 2025-11-01 00:14:48.909 [INFO][4963] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="d907fd889d5b3dbb7842936dd1ecc06de0dbe6ac57db667b2b2d7099c12626c5" HandleID="k8s-pod-network.d907fd889d5b3dbb7842936dd1ecc06de0dbe6ac57db667b2b2d7099c12626c5" Workload="ip--172--31--27--146-k8s-coredns--668d6bf9bc--57x5z-eth0" Nov 1 00:14:49.135645 env[1824]: 2025-11-01 00:14:48.910 [INFO][4963] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="d907fd889d5b3dbb7842936dd1ecc06de0dbe6ac57db667b2b2d7099c12626c5" HandleID="k8s-pod-network.d907fd889d5b3dbb7842936dd1ecc06de0dbe6ac57db667b2b2d7099c12626c5" Workload="ip--172--31--27--146-k8s-coredns--668d6bf9bc--57x5z-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40001228e0), Attrs:map[string]string{"namespace":"kube-system", "node":"ip-172-31-27-146", "pod":"coredns-668d6bf9bc-57x5z", "timestamp":"2025-11-01 00:14:48.909944428 +0000 UTC"}, Hostname:"ip-172-31-27-146", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:14:49.135645 env[1824]: 2025-11-01 00:14:48.910 [INFO][4963] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:14:49.135645 env[1824]: 2025-11-01 00:14:48.910 [INFO][4963] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:14:49.135645 env[1824]: 2025-11-01 00:14:48.911 [INFO][4963] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-27-146' Nov 1 00:14:49.135645 env[1824]: 2025-11-01 00:14:48.965 [INFO][4963] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.d907fd889d5b3dbb7842936dd1ecc06de0dbe6ac57db667b2b2d7099c12626c5" host="ip-172-31-27-146" Nov 1 00:14:49.135645 env[1824]: 2025-11-01 00:14:48.992 [INFO][4963] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-27-146" Nov 1 00:14:49.135645 env[1824]: 2025-11-01 00:14:49.008 [INFO][4963] ipam/ipam.go 511: Trying affinity for 192.168.60.192/26 host="ip-172-31-27-146" Nov 1 00:14:49.135645 env[1824]: 2025-11-01 00:14:49.015 [INFO][4963] ipam/ipam.go 158: Attempting to load block cidr=192.168.60.192/26 host="ip-172-31-27-146" Nov 1 00:14:49.135645 env[1824]: 2025-11-01 00:14:49.031 [INFO][4963] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.60.192/26 host="ip-172-31-27-146" Nov 1 00:14:49.135645 env[1824]: 2025-11-01 00:14:49.031 [INFO][4963] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.60.192/26 handle="k8s-pod-network.d907fd889d5b3dbb7842936dd1ecc06de0dbe6ac57db667b2b2d7099c12626c5" host="ip-172-31-27-146" Nov 1 00:14:49.135645 env[1824]: 2025-11-01 00:14:49.035 [INFO][4963] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.d907fd889d5b3dbb7842936dd1ecc06de0dbe6ac57db667b2b2d7099c12626c5 Nov 1 00:14:49.135645 env[1824]: 2025-11-01 00:14:49.043 [INFO][4963] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.60.192/26 handle="k8s-pod-network.d907fd889d5b3dbb7842936dd1ecc06de0dbe6ac57db667b2b2d7099c12626c5" host="ip-172-31-27-146" Nov 1 00:14:49.135645 env[1824]: 2025-11-01 00:14:49.058 [INFO][4963] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.60.200/26] block=192.168.60.192/26 handle="k8s-pod-network.d907fd889d5b3dbb7842936dd1ecc06de0dbe6ac57db667b2b2d7099c12626c5" host="ip-172-31-27-146" Nov 1 00:14:49.135645 env[1824]: 2025-11-01 00:14:49.058 [INFO][4963] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.60.200/26] handle="k8s-pod-network.d907fd889d5b3dbb7842936dd1ecc06de0dbe6ac57db667b2b2d7099c12626c5" host="ip-172-31-27-146" Nov 1 00:14:49.135645 env[1824]: 2025-11-01 00:14:49.059 [INFO][4963] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:14:49.135645 env[1824]: 2025-11-01 00:14:49.059 [INFO][4963] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.60.200/26] IPv6=[] ContainerID="d907fd889d5b3dbb7842936dd1ecc06de0dbe6ac57db667b2b2d7099c12626c5" HandleID="k8s-pod-network.d907fd889d5b3dbb7842936dd1ecc06de0dbe6ac57db667b2b2d7099c12626c5" Workload="ip--172--31--27--146-k8s-coredns--668d6bf9bc--57x5z-eth0" Nov 1 00:14:49.137195 env[1824]: 2025-11-01 00:14:49.069 [INFO][4918] cni-plugin/k8s.go 418: Populated endpoint ContainerID="d907fd889d5b3dbb7842936dd1ecc06de0dbe6ac57db667b2b2d7099c12626c5" Namespace="kube-system" Pod="coredns-668d6bf9bc-57x5z" WorkloadEndpoint="ip--172--31--27--146-k8s-coredns--668d6bf9bc--57x5z-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--146-k8s-coredns--668d6bf9bc--57x5z-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"81b9363b-5132-4737-acfe-192244e24f20", ResourceVersion:"1054", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 13, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-146", ContainerID:"", Pod:"coredns-668d6bf9bc-57x5z", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.60.200/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali99581bdfeb4", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:14:49.137195 env[1824]: 2025-11-01 00:14:49.069 [INFO][4918] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.60.200/32] ContainerID="d907fd889d5b3dbb7842936dd1ecc06de0dbe6ac57db667b2b2d7099c12626c5" Namespace="kube-system" Pod="coredns-668d6bf9bc-57x5z" WorkloadEndpoint="ip--172--31--27--146-k8s-coredns--668d6bf9bc--57x5z-eth0" Nov 1 00:14:49.137195 env[1824]: 2025-11-01 00:14:49.069 [INFO][4918] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali99581bdfeb4 ContainerID="d907fd889d5b3dbb7842936dd1ecc06de0dbe6ac57db667b2b2d7099c12626c5" Namespace="kube-system" Pod="coredns-668d6bf9bc-57x5z" WorkloadEndpoint="ip--172--31--27--146-k8s-coredns--668d6bf9bc--57x5z-eth0" Nov 1 00:14:49.137195 env[1824]: 2025-11-01 00:14:49.104 [INFO][4918] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="d907fd889d5b3dbb7842936dd1ecc06de0dbe6ac57db667b2b2d7099c12626c5" Namespace="kube-system" Pod="coredns-668d6bf9bc-57x5z" WorkloadEndpoint="ip--172--31--27--146-k8s-coredns--668d6bf9bc--57x5z-eth0" Nov 1 00:14:49.137195 env[1824]: 2025-11-01 00:14:49.108 [INFO][4918] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="d907fd889d5b3dbb7842936dd1ecc06de0dbe6ac57db667b2b2d7099c12626c5" Namespace="kube-system" Pod="coredns-668d6bf9bc-57x5z" WorkloadEndpoint="ip--172--31--27--146-k8s-coredns--668d6bf9bc--57x5z-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--146-k8s-coredns--668d6bf9bc--57x5z-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"81b9363b-5132-4737-acfe-192244e24f20", ResourceVersion:"1054", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 13, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-146", ContainerID:"d907fd889d5b3dbb7842936dd1ecc06de0dbe6ac57db667b2b2d7099c12626c5", Pod:"coredns-668d6bf9bc-57x5z", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.60.200/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali99581bdfeb4", MAC:"42:69:55:b0:f1:f9", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:14:49.137195 env[1824]: 2025-11-01 00:14:49.131 [INFO][4918] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="d907fd889d5b3dbb7842936dd1ecc06de0dbe6ac57db667b2b2d7099c12626c5" Namespace="kube-system" Pod="coredns-668d6bf9bc-57x5z" WorkloadEndpoint="ip--172--31--27--146-k8s-coredns--668d6bf9bc--57x5z-eth0" Nov 1 00:14:49.172810 systemd[1]: Started cri-containerd-8caccadeaa0edc28e3abba471cf34819d550e2e177946872c6b58ccc3346f683.scope. Nov 1 00:14:49.199163 env[1824]: time="2025-11-01T00:14:49.197658891Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-9pzj4,Uid:4b6be88e-2b28-4afc-b9bf-475fed78cc30,Namespace:kube-system,Attempt:1,} returns sandbox id \"645c9167c93a9195302a61585b604c239467700cf87342dc98e8e4129962cbdb\"" Nov 1 00:14:49.208709 env[1824]: time="2025-11-01T00:14:49.208630988Z" level=info msg="CreateContainer within sandbox \"645c9167c93a9195302a61585b604c239467700cf87342dc98e8e4129962cbdb\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Nov 1 00:14:49.259617 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount802107980.mount: Deactivated successfully. Nov 1 00:14:49.273383 systemd[1]: Started cri-containerd-d764a4e00d5917e9f2a7e8f811bd68d13168e0652ac696c38e305d50ae452b92.scope. Nov 1 00:14:49.298978 env[1824]: time="2025-11-01T00:14:49.295243051Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:14:49.298978 env[1824]: time="2025-11-01T00:14:49.295528216Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:14:49.298978 env[1824]: time="2025-11-01T00:14:49.295562547Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:14:49.300168 env[1824]: time="2025-11-01T00:14:49.300033511Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d907fd889d5b3dbb7842936dd1ecc06de0dbe6ac57db667b2b2d7099c12626c5 pid=5123 runtime=io.containerd.runc.v2 Nov 1 00:14:49.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.301000 audit: BPF prog-id=181 op=LOAD Nov 1 00:14:49.305000 audit[5054]: AVC avc: denied { bpf } for pid=5054 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.305000 audit[5054]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=5018 pid=5054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:49.305000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863616363616465616130656463323865336162626134373163663334 Nov 1 00:14:49.306000 audit[5054]: AVC avc: denied { perfmon } for pid=5054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.306000 audit[5054]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=5018 pid=5054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:49.306000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863616363616465616130656463323865336162626134373163663334 Nov 1 00:14:49.306000 audit[5054]: AVC avc: denied { bpf } for pid=5054 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.306000 audit[5054]: AVC avc: denied { bpf } for pid=5054 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.306000 audit[5054]: AVC avc: denied { bpf } for pid=5054 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.306000 audit[5054]: AVC avc: denied { perfmon } for pid=5054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.306000 audit[5054]: AVC avc: denied { perfmon } for pid=5054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.306000 audit[5054]: AVC avc: denied { perfmon } for pid=5054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.306000 audit[5054]: AVC avc: denied { perfmon } for pid=5054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.306000 audit[5054]: AVC avc: denied { perfmon } for pid=5054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.306000 audit[5054]: AVC avc: denied { bpf } for pid=5054 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.306000 audit[5054]: AVC avc: denied { bpf } for pid=5054 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.306000 audit: BPF prog-id=182 op=LOAD Nov 1 00:14:49.306000 audit[5054]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=5018 pid=5054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:49.306000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863616363616465616130656463323865336162626134373163663334 Nov 1 00:14:49.320000 audit[5054]: AVC avc: denied { bpf } for pid=5054 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.320000 audit[5054]: AVC avc: denied { bpf } for pid=5054 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.320000 audit[5054]: AVC avc: denied { perfmon } for pid=5054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.320000 audit[5054]: AVC avc: denied { perfmon } for pid=5054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.320000 audit[5054]: AVC avc: denied { perfmon } for pid=5054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.320000 audit[5054]: AVC avc: denied { perfmon } for pid=5054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.320000 audit[5054]: AVC avc: denied { perfmon } for pid=5054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.320000 audit[5054]: AVC avc: denied { bpf } for pid=5054 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.320000 audit[5054]: AVC avc: denied { bpf } for pid=5054 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.320000 audit: BPF prog-id=183 op=LOAD Nov 1 00:14:49.320000 audit[5054]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=5018 pid=5054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:49.320000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863616363616465616130656463323865336162626134373163663334 Nov 1 00:14:49.323000 audit: BPF prog-id=183 op=UNLOAD Nov 1 00:14:49.324000 audit: BPF prog-id=182 op=UNLOAD Nov 1 00:14:49.324000 audit[5054]: AVC avc: denied { bpf } for pid=5054 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.324000 audit[5054]: AVC avc: denied { bpf } for pid=5054 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.324000 audit[5054]: AVC avc: denied { bpf } for pid=5054 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.324000 audit[5054]: AVC avc: denied { perfmon } for pid=5054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.324000 audit[5054]: AVC avc: denied { perfmon } for pid=5054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.324000 audit[5054]: AVC avc: denied { perfmon } for pid=5054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.324000 audit[5054]: AVC avc: denied { perfmon } for pid=5054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.324000 audit[5054]: AVC avc: denied { perfmon } for pid=5054 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.324000 audit[5054]: AVC avc: denied { bpf } for pid=5054 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.324000 audit[5054]: AVC avc: denied { bpf } for pid=5054 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.324000 audit: BPF prog-id=184 op=LOAD Nov 1 00:14:49.324000 audit[5054]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=5018 pid=5054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:49.324000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863616363616465616130656463323865336162626134373163663334 Nov 1 00:14:49.352802 env[1824]: time="2025-11-01T00:14:49.352530004Z" level=info msg="CreateContainer within sandbox \"645c9167c93a9195302a61585b604c239467700cf87342dc98e8e4129962cbdb\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"7145c3e42ac1588c95d1970bd97c6ddaa835992e298953ede40e04c4a0895aca\"" Nov 1 00:14:49.355039 env[1824]: time="2025-11-01T00:14:49.354070257Z" level=info msg="StartContainer for \"7145c3e42ac1588c95d1970bd97c6ddaa835992e298953ede40e04c4a0895aca\"" Nov 1 00:14:49.405844 systemd[1]: Started cri-containerd-d907fd889d5b3dbb7842936dd1ecc06de0dbe6ac57db667b2b2d7099c12626c5.scope. Nov 1 00:14:49.461482 systemd[1]: Started cri-containerd-7145c3e42ac1588c95d1970bd97c6ddaa835992e298953ede40e04c4a0895aca.scope. Nov 1 00:14:49.474000 audit[5173]: NETFILTER_CFG table=filter:122 family=2 entries=41 op=nft_register_chain pid=5173 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:14:49.474000 audit[5173]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=23096 a0=3 a1=ffffcd0ab930 a2=0 a3=ffff9cb4afa8 items=0 ppid=4273 pid=5173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:49.474000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:14:49.495000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.495000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.495000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.495000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.495000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.495000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.495000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.495000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.495000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.495000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.495000 audit: BPF prog-id=185 op=LOAD Nov 1 00:14:49.497000 audit[5136]: AVC avc: denied { bpf } for pid=5136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.497000 audit[5136]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=5123 pid=5136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:49.497000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439303766643838396435623364626237383432393336646431656363 Nov 1 00:14:49.497000 audit[5136]: AVC avc: denied { perfmon } for pid=5136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.497000 audit[5136]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=5123 pid=5136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:49.497000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439303766643838396435623364626237383432393336646431656363 Nov 1 00:14:49.498000 audit[5136]: AVC avc: denied { bpf } for pid=5136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.498000 audit[5136]: AVC avc: denied { bpf } for pid=5136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.498000 audit[5136]: AVC avc: denied { bpf } for pid=5136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.498000 audit[5136]: AVC avc: denied { perfmon } for pid=5136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.498000 audit[5136]: AVC avc: denied { perfmon } for pid=5136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.498000 audit[5136]: AVC avc: denied { perfmon } for pid=5136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.498000 audit[5136]: AVC avc: denied { perfmon } for pid=5136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.498000 audit[5136]: AVC avc: denied { perfmon } for pid=5136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.498000 audit[5136]: AVC avc: denied { bpf } for pid=5136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.498000 audit[5136]: AVC avc: denied { bpf } for pid=5136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.498000 audit: BPF prog-id=186 op=LOAD Nov 1 00:14:49.498000 audit[5136]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=5123 pid=5136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:49.498000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439303766643838396435623364626237383432393336646431656363 Nov 1 00:14:49.500000 audit[5136]: AVC avc: denied { bpf } for pid=5136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.500000 audit[5136]: AVC avc: denied { bpf } for pid=5136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.500000 audit[5136]: AVC avc: denied { perfmon } for pid=5136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.500000 audit[5136]: AVC avc: denied { perfmon } for pid=5136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.500000 audit[5136]: AVC avc: denied { perfmon } for pid=5136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.500000 audit[5136]: AVC avc: denied { perfmon } for pid=5136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.500000 audit[5136]: AVC avc: denied { perfmon } for pid=5136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.500000 audit[5136]: AVC avc: denied { bpf } for pid=5136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.500000 audit[5136]: AVC avc: denied { bpf } for pid=5136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.500000 audit: BPF prog-id=187 op=LOAD Nov 1 00:14:49.500000 audit[5136]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=5123 pid=5136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:49.500000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439303766643838396435623364626237383432393336646431656363 Nov 1 00:14:49.507000 audit: BPF prog-id=187 op=UNLOAD Nov 1 00:14:49.507000 audit: BPF prog-id=186 op=UNLOAD Nov 1 00:14:49.508000 audit[5136]: AVC avc: denied { bpf } for pid=5136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.508000 audit[5136]: AVC avc: denied { bpf } for pid=5136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.508000 audit[5136]: AVC avc: denied { bpf } for pid=5136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.508000 audit[5136]: AVC avc: denied { perfmon } for pid=5136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.508000 audit[5136]: AVC avc: denied { perfmon } for pid=5136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.508000 audit[5136]: AVC avc: denied { perfmon } for pid=5136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.508000 audit[5136]: AVC avc: denied { perfmon } for pid=5136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.508000 audit[5136]: AVC avc: denied { perfmon } for pid=5136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.508000 audit[5136]: AVC avc: denied { bpf } for pid=5136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.508000 audit[5136]: AVC avc: denied { bpf } for pid=5136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.508000 audit: BPF prog-id=188 op=LOAD Nov 1 00:14:49.508000 audit[5136]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=5123 pid=5136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:49.508000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439303766643838396435623364626237383432393336646431656363 Nov 1 00:14:49.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.554000 audit: BPF prog-id=189 op=LOAD Nov 1 00:14:49.563000 audit[5156]: AVC avc: denied { bpf } for pid=5156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.563000 audit[5156]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4969 pid=5156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:49.563000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731343563336534326163313538386339356431393730626439376336 Nov 1 00:14:49.563000 audit[5156]: AVC avc: denied { perfmon } for pid=5156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.563000 audit[5156]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4969 pid=5156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:49.563000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731343563336534326163313538386339356431393730626439376336 Nov 1 00:14:49.563000 audit[5156]: AVC avc: denied { bpf } for pid=5156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.563000 audit[5156]: AVC avc: denied { bpf } for pid=5156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.563000 audit[5156]: AVC avc: denied { bpf } for pid=5156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.563000 audit[5156]: AVC avc: denied { perfmon } for pid=5156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.563000 audit[5156]: AVC avc: denied { perfmon } for pid=5156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.563000 audit[5156]: AVC avc: denied { perfmon } for pid=5156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.563000 audit[5156]: AVC avc: denied { perfmon } for pid=5156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.563000 audit[5156]: AVC avc: denied { perfmon } for pid=5156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.563000 audit[5156]: AVC avc: denied { bpf } for pid=5156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.563000 audit[5156]: AVC avc: denied { bpf } for pid=5156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.563000 audit: BPF prog-id=190 op=LOAD Nov 1 00:14:49.563000 audit[5156]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4969 pid=5156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:49.563000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731343563336534326163313538386339356431393730626439376336 Nov 1 00:14:49.563000 audit[5156]: AVC avc: denied { bpf } for pid=5156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.563000 audit[5156]: AVC avc: denied { bpf } for pid=5156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.563000 audit[5156]: AVC avc: denied { perfmon } for pid=5156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.563000 audit[5156]: AVC avc: denied { perfmon } for pid=5156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.563000 audit[5156]: AVC avc: denied { perfmon } for pid=5156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.563000 audit[5156]: AVC avc: denied { perfmon } for pid=5156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.563000 audit[5156]: AVC avc: denied { perfmon } for pid=5156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.563000 audit[5156]: AVC avc: denied { bpf } for pid=5156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.563000 audit[5156]: AVC avc: denied { bpf } for pid=5156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.563000 audit: BPF prog-id=191 op=LOAD Nov 1 00:14:49.563000 audit[5156]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4969 pid=5156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:49.563000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731343563336534326163313538386339356431393730626439376336 Nov 1 00:14:49.563000 audit: BPF prog-id=191 op=UNLOAD Nov 1 00:14:49.563000 audit: BPF prog-id=190 op=UNLOAD Nov 1 00:14:49.563000 audit[5156]: AVC avc: denied { bpf } for pid=5156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.563000 audit[5156]: AVC avc: denied { bpf } for pid=5156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.563000 audit[5156]: AVC avc: denied { bpf } for pid=5156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.563000 audit[5156]: AVC avc: denied { perfmon } for pid=5156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.563000 audit[5156]: AVC avc: denied { perfmon } for pid=5156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.563000 audit[5156]: AVC avc: denied { perfmon } for pid=5156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.563000 audit[5156]: AVC avc: denied { perfmon } for pid=5156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.563000 audit[5156]: AVC avc: denied { perfmon } for pid=5156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.563000 audit[5156]: AVC avc: denied { bpf } for pid=5156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.563000 audit[5156]: AVC avc: denied { bpf } for pid=5156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.563000 audit: BPF prog-id=192 op=LOAD Nov 1 00:14:49.563000 audit[5156]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4969 pid=5156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:49.563000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731343563336534326163313538386339356431393730626439376336 Nov 1 00:14:49.577976 env[1824]: time="2025-11-01T00:14:49.577908184Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7758fdbbb7-7swhm,Uid:7c4dfa77-9d3c-4d7b-9cd8-e90f78821efe,Namespace:calico-system,Attempt:1,} returns sandbox id \"8caccadeaa0edc28e3abba471cf34819d550e2e177946872c6b58ccc3346f683\"" Nov 1 00:14:49.602394 env[1824]: time="2025-11-01T00:14:49.602327552Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Nov 1 00:14:49.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.639000 audit: BPF prog-id=193 op=LOAD Nov 1 00:14:49.640000 audit[5093]: AVC avc: denied { bpf } for pid=5093 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.640000 audit[5093]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=5066 pid=5093 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:49.640000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437363461346530306435393137653966326137653866383131626436 Nov 1 00:14:49.640000 audit[5093]: AVC avc: denied { perfmon } for pid=5093 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.640000 audit[5093]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=5066 pid=5093 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:49.640000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437363461346530306435393137653966326137653866383131626436 Nov 1 00:14:49.641000 audit[5093]: AVC avc: denied { bpf } for pid=5093 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.641000 audit[5093]: AVC avc: denied { bpf } for pid=5093 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.641000 audit[5093]: AVC avc: denied { bpf } for pid=5093 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.641000 audit[5093]: AVC avc: denied { perfmon } for pid=5093 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.641000 audit[5093]: AVC avc: denied { perfmon } for pid=5093 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.641000 audit[5093]: AVC avc: denied { perfmon } for pid=5093 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.641000 audit[5093]: AVC avc: denied { perfmon } for pid=5093 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.641000 audit[5093]: AVC avc: denied { perfmon } for pid=5093 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.641000 audit[5093]: AVC avc: denied { bpf } for pid=5093 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.641000 audit[5093]: AVC avc: denied { bpf } for pid=5093 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.641000 audit: BPF prog-id=194 op=LOAD Nov 1 00:14:49.641000 audit[5093]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=5066 pid=5093 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:49.641000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437363461346530306435393137653966326137653866383131626436 Nov 1 00:14:49.643000 audit[5093]: AVC avc: denied { bpf } for pid=5093 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.643000 audit[5093]: AVC avc: denied { bpf } for pid=5093 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.643000 audit[5093]: AVC avc: denied { perfmon } for pid=5093 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.643000 audit[5093]: AVC avc: denied { perfmon } for pid=5093 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.643000 audit[5093]: AVC avc: denied { perfmon } for pid=5093 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.643000 audit[5093]: AVC avc: denied { perfmon } for pid=5093 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.643000 audit[5093]: AVC avc: denied { perfmon } for pid=5093 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.643000 audit[5093]: AVC avc: denied { bpf } for pid=5093 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.643000 audit[5093]: AVC avc: denied { bpf } for pid=5093 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.643000 audit: BPF prog-id=195 op=LOAD Nov 1 00:14:49.643000 audit[5093]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=5066 pid=5093 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:49.643000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437363461346530306435393137653966326137653866383131626436 Nov 1 00:14:49.645000 audit: BPF prog-id=195 op=UNLOAD Nov 1 00:14:49.645000 audit: BPF prog-id=194 op=UNLOAD Nov 1 00:14:49.645000 audit[5093]: AVC avc: denied { bpf } for pid=5093 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.645000 audit[5093]: AVC avc: denied { bpf } for pid=5093 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.645000 audit[5093]: AVC avc: denied { bpf } for pid=5093 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.645000 audit[5093]: AVC avc: denied { perfmon } for pid=5093 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.645000 audit[5093]: AVC avc: denied { perfmon } for pid=5093 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.645000 audit[5093]: AVC avc: denied { perfmon } for pid=5093 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.645000 audit[5093]: AVC avc: denied { perfmon } for pid=5093 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.645000 audit[5093]: AVC avc: denied { perfmon } for pid=5093 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.645000 audit[5093]: AVC avc: denied { bpf } for pid=5093 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.645000 audit[5093]: AVC avc: denied { bpf } for pid=5093 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.645000 audit: BPF prog-id=196 op=LOAD Nov 1 00:14:49.645000 audit[5093]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=5066 pid=5093 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:49.645000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437363461346530306435393137653966326137653866383131626436 Nov 1 00:14:49.664774 env[1824]: time="2025-11-01T00:14:49.664612118Z" level=info msg="StartContainer for \"7145c3e42ac1588c95d1970bd97c6ddaa835992e298953ede40e04c4a0895aca\" returns successfully" Nov 1 00:14:49.677786 env[1824]: 2025-11-01 00:14:49.317 [WARNING][5049] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--146-k8s-calico--apiserver--6d9db7877d--g6gc4-eth0", GenerateName:"calico-apiserver-6d9db7877d-", Namespace:"calico-apiserver", SelfLink:"", UID:"d237b083-16fc-4661-b219-6ab46b70c3f4", ResourceVersion:"1048", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 14, 7, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6d9db7877d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-146", ContainerID:"219a217dc20b6a9e52425ce77c59d948030771ced9678727738e65076d9308b5", Pod:"calico-apiserver-6d9db7877d-g6gc4", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.60.194/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali7750a2d2588", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:14:49.677786 env[1824]: 2025-11-01 00:14:49.325 [INFO][5049] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339" Nov 1 00:14:49.677786 env[1824]: 2025-11-01 00:14:49.325 [INFO][5049] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339" iface="eth0" netns="" Nov 1 00:14:49.677786 env[1824]: 2025-11-01 00:14:49.325 [INFO][5049] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339" Nov 1 00:14:49.677786 env[1824]: 2025-11-01 00:14:49.325 [INFO][5049] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339" Nov 1 00:14:49.677786 env[1824]: 2025-11-01 00:14:49.541 [INFO][5137] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339" HandleID="k8s-pod-network.fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339" Workload="ip--172--31--27--146-k8s-calico--apiserver--6d9db7877d--g6gc4-eth0" Nov 1 00:14:49.677786 env[1824]: 2025-11-01 00:14:49.546 [INFO][5137] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:14:49.677786 env[1824]: 2025-11-01 00:14:49.546 [INFO][5137] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:14:49.677786 env[1824]: 2025-11-01 00:14:49.581 [WARNING][5137] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339" HandleID="k8s-pod-network.fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339" Workload="ip--172--31--27--146-k8s-calico--apiserver--6d9db7877d--g6gc4-eth0" Nov 1 00:14:49.677786 env[1824]: 2025-11-01 00:14:49.585 [INFO][5137] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339" HandleID="k8s-pod-network.fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339" Workload="ip--172--31--27--146-k8s-calico--apiserver--6d9db7877d--g6gc4-eth0" Nov 1 00:14:49.677786 env[1824]: 2025-11-01 00:14:49.614 [INFO][5137] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:14:49.677786 env[1824]: 2025-11-01 00:14:49.626 [INFO][5049] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339" Nov 1 00:14:49.678799 env[1824]: time="2025-11-01T00:14:49.677813355Z" level=info msg="TearDown network for sandbox \"fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339\" successfully" Nov 1 00:14:49.678799 env[1824]: time="2025-11-01T00:14:49.677857359Z" level=info msg="StopPodSandbox for \"fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339\" returns successfully" Nov 1 00:14:49.683825 env[1824]: time="2025-11-01T00:14:49.683624942Z" level=info msg="RemovePodSandbox for \"fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339\"" Nov 1 00:14:49.684023 env[1824]: time="2025-11-01T00:14:49.683824104Z" level=info msg="Forcibly stopping sandbox \"fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339\"" Nov 1 00:14:49.723991 env[1824]: time="2025-11-01T00:14:49.723830951Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6d9db7877d-dphkx,Uid:d04e8d82-e949-4962-a876-1dbd67173f6c,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"d764a4e00d5917e9f2a7e8f811bd68d13168e0652ac696c38e305d50ae452b92\"" Nov 1 00:14:49.724234 env[1824]: time="2025-11-01T00:14:49.724044140Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-57x5z,Uid:81b9363b-5132-4737-acfe-192244e24f20,Namespace:kube-system,Attempt:1,} returns sandbox id \"d907fd889d5b3dbb7842936dd1ecc06de0dbe6ac57db667b2b2d7099c12626c5\"" Nov 1 00:14:49.733000 audit[5179]: AVC avc: denied { getattr } for pid=5179 comm="coredns" path="cgroup:[4026533000]" dev="nsfs" ino=4026533000 scontext=system_u:system_r:svirt_lxc_net_t:s0:c158,c305 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Nov 1 00:14:49.733000 audit[5179]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=40000564e0 a2=400014c578 a3=0 items=0 ppid=4969 pid=5179 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c158,c305 key=(null) Nov 1 00:14:49.733000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Nov 1 00:14:49.734933 systemd-networkd[1549]: cali0cb23678c13: Gained IPv6LL Nov 1 00:14:49.761000 audit[5224]: NETFILTER_CFG table=filter:123 family=2 entries=54 op=nft_register_chain pid=5224 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:14:49.763400 env[1824]: time="2025-11-01T00:14:49.763172994Z" level=info msg="CreateContainer within sandbox \"d907fd889d5b3dbb7842936dd1ecc06de0dbe6ac57db667b2b2d7099c12626c5\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Nov 1 00:14:49.761000 audit[5224]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=25556 a0=3 a1=ffffe709d7c0 a2=0 a3=ffffb2193fa8 items=0 ppid=4273 pid=5224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:49.761000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:14:49.826017 env[1824]: time="2025-11-01T00:14:49.825925950Z" level=info msg="CreateContainer within sandbox \"d907fd889d5b3dbb7842936dd1ecc06de0dbe6ac57db667b2b2d7099c12626c5\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"650ef33f144bd3970b620eb65bf93621c95696cb3896a4d49c54299254300fbc\"" Nov 1 00:14:49.828105 env[1824]: time="2025-11-01T00:14:49.828024448Z" level=info msg="StartContainer for \"650ef33f144bd3970b620eb65bf93621c95696cb3896a4d49c54299254300fbc\"" Nov 1 00:14:49.887319 systemd[1]: Started cri-containerd-650ef33f144bd3970b620eb65bf93621c95696cb3896a4d49c54299254300fbc.scope. Nov 1 00:14:49.913435 env[1824]: time="2025-11-01T00:14:49.913367791Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:14:49.916057 env[1824]: time="2025-11-01T00:14:49.915882515Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Nov 1 00:14:49.917169 kubelet[2905]: E1101 00:14:49.916561 2905 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:14:49.917169 kubelet[2905]: E1101 00:14:49.916625 2905 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:14:49.917169 kubelet[2905]: E1101 00:14:49.917018 2905 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,loadbalancer,ValueFrom:nil,},EnvVar{Name:DISABLE_KUBE_CONTROLLERS_CONFIG_API,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:CA_CRT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/cert.pem,SubPath:ca-bundle.crt,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-9wlw4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*999,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-kube-controllers-7758fdbbb7-7swhm_calico-system(7c4dfa77-9d3c-4d7b-9cd8-e90f78821efe): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Nov 1 00:14:49.919074 env[1824]: time="2025-11-01T00:14:49.918997460Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:14:49.919879 kubelet[2905]: E1101 00:14:49.919785 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-7758fdbbb7-7swhm" podUID="7c4dfa77-9d3c-4d7b-9cd8-e90f78821efe" Nov 1 00:14:49.978000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.978000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.978000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.978000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.979000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.979000 audit: BPF prog-id=197 op=LOAD Nov 1 00:14:49.980000 audit[5245]: AVC avc: denied { bpf } for pid=5245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.980000 audit[5245]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=5123 pid=5245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:49.980000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635306566333366313434626433393730623632306562363562663933 Nov 1 00:14:49.981000 audit[5245]: AVC avc: denied { perfmon } for pid=5245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.981000 audit[5245]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=5123 pid=5245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:49.981000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635306566333366313434626433393730623632306562363562663933 Nov 1 00:14:49.982000 audit[5245]: AVC avc: denied { bpf } for pid=5245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.982000 audit[5245]: AVC avc: denied { bpf } for pid=5245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.982000 audit[5245]: AVC avc: denied { bpf } for pid=5245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.982000 audit[5245]: AVC avc: denied { perfmon } for pid=5245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.982000 audit[5245]: AVC avc: denied { perfmon } for pid=5245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.982000 audit[5245]: AVC avc: denied { perfmon } for pid=5245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.982000 audit[5245]: AVC avc: denied { perfmon } for pid=5245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.982000 audit[5245]: AVC avc: denied { perfmon } for pid=5245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.982000 audit[5245]: AVC avc: denied { bpf } for pid=5245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.982000 audit[5245]: AVC avc: denied { bpf } for pid=5245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.982000 audit: BPF prog-id=198 op=LOAD Nov 1 00:14:49.982000 audit[5245]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=5123 pid=5245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:49.982000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635306566333366313434626433393730623632306562363562663933 Nov 1 00:14:49.983000 audit[5245]: AVC avc: denied { bpf } for pid=5245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.983000 audit[5245]: AVC avc: denied { bpf } for pid=5245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.983000 audit[5245]: AVC avc: denied { perfmon } for pid=5245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.983000 audit[5245]: AVC avc: denied { perfmon } for pid=5245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.983000 audit[5245]: AVC avc: denied { perfmon } for pid=5245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.983000 audit[5245]: AVC avc: denied { perfmon } for pid=5245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.983000 audit[5245]: AVC avc: denied { perfmon } for pid=5245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.983000 audit[5245]: AVC avc: denied { bpf } for pid=5245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.983000 audit[5245]: AVC avc: denied { bpf } for pid=5245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.983000 audit: BPF prog-id=199 op=LOAD Nov 1 00:14:49.983000 audit[5245]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=5123 pid=5245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:49.983000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635306566333366313434626433393730623632306562363562663933 Nov 1 00:14:49.985000 audit: BPF prog-id=199 op=UNLOAD Nov 1 00:14:49.985000 audit: BPF prog-id=198 op=UNLOAD Nov 1 00:14:49.986000 audit[5245]: AVC avc: denied { bpf } for pid=5245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.986000 audit[5245]: AVC avc: denied { bpf } for pid=5245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.986000 audit[5245]: AVC avc: denied { bpf } for pid=5245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.986000 audit[5245]: AVC avc: denied { perfmon } for pid=5245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.986000 audit[5245]: AVC avc: denied { perfmon } for pid=5245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.986000 audit[5245]: AVC avc: denied { perfmon } for pid=5245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.986000 audit[5245]: AVC avc: denied { perfmon } for pid=5245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.986000 audit[5245]: AVC avc: denied { perfmon } for pid=5245 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.986000 audit[5245]: AVC avc: denied { bpf } for pid=5245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.986000 audit[5245]: AVC avc: denied { bpf } for pid=5245 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:49.986000 audit: BPF prog-id=200 op=LOAD Nov 1 00:14:49.986000 audit[5245]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=5123 pid=5245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:49.986000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635306566333366313434626433393730623632306562363562663933 Nov 1 00:14:49.996559 env[1824]: 2025-11-01 00:14:49.896 [WARNING][5232] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--146-k8s-calico--apiserver--6d9db7877d--g6gc4-eth0", GenerateName:"calico-apiserver-6d9db7877d-", Namespace:"calico-apiserver", SelfLink:"", UID:"d237b083-16fc-4661-b219-6ab46b70c3f4", ResourceVersion:"1048", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 14, 7, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6d9db7877d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-146", ContainerID:"219a217dc20b6a9e52425ce77c59d948030771ced9678727738e65076d9308b5", Pod:"calico-apiserver-6d9db7877d-g6gc4", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.60.194/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali7750a2d2588", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:14:49.996559 env[1824]: 2025-11-01 00:14:49.897 [INFO][5232] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339" Nov 1 00:14:49.996559 env[1824]: 2025-11-01 00:14:49.897 [INFO][5232] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339" iface="eth0" netns="" Nov 1 00:14:49.996559 env[1824]: 2025-11-01 00:14:49.897 [INFO][5232] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339" Nov 1 00:14:49.996559 env[1824]: 2025-11-01 00:14:49.897 [INFO][5232] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339" Nov 1 00:14:49.996559 env[1824]: 2025-11-01 00:14:49.963 [INFO][5256] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339" HandleID="k8s-pod-network.fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339" Workload="ip--172--31--27--146-k8s-calico--apiserver--6d9db7877d--g6gc4-eth0" Nov 1 00:14:49.996559 env[1824]: 2025-11-01 00:14:49.963 [INFO][5256] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:14:49.996559 env[1824]: 2025-11-01 00:14:49.963 [INFO][5256] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:14:49.996559 env[1824]: 2025-11-01 00:14:49.982 [WARNING][5256] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339" HandleID="k8s-pod-network.fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339" Workload="ip--172--31--27--146-k8s-calico--apiserver--6d9db7877d--g6gc4-eth0" Nov 1 00:14:49.996559 env[1824]: 2025-11-01 00:14:49.983 [INFO][5256] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339" HandleID="k8s-pod-network.fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339" Workload="ip--172--31--27--146-k8s-calico--apiserver--6d9db7877d--g6gc4-eth0" Nov 1 00:14:49.996559 env[1824]: 2025-11-01 00:14:49.986 [INFO][5256] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:14:49.996559 env[1824]: 2025-11-01 00:14:49.993 [INFO][5232] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339" Nov 1 00:14:49.997634 env[1824]: time="2025-11-01T00:14:49.997329699Z" level=info msg="TearDown network for sandbox \"fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339\" successfully" Nov 1 00:14:50.006444 env[1824]: time="2025-11-01T00:14:50.006309852Z" level=info msg="RemovePodSandbox \"fbccc70e3f7488bafd230748279b0325b9e1c1702bd8320b323804736b48f339\" returns successfully" Nov 1 00:14:50.008238 env[1824]: time="2025-11-01T00:14:50.008083815Z" level=info msg="StopPodSandbox for \"2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654\"" Nov 1 00:14:50.041305 env[1824]: time="2025-11-01T00:14:50.041219675Z" level=info msg="StartContainer for \"650ef33f144bd3970b620eb65bf93621c95696cb3896a4d49c54299254300fbc\" returns successfully" Nov 1 00:14:50.058000 audit[5261]: AVC avc: denied { getattr } for pid=5261 comm="coredns" path="cgroup:[4026533003]" dev="nsfs" ino=4026533003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c43,c918 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Nov 1 00:14:50.058000 audit[5261]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=4000056798 a2=400014e578 a3=0 items=0 ppid=5123 pid=5261 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c43,c918 key=(null) Nov 1 00:14:50.058000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Nov 1 00:14:50.119029 systemd-networkd[1549]: cali519bebf1aed: Gained IPv6LL Nov 1 00:14:50.180527 env[1824]: 2025-11-01 00:14:50.104 [WARNING][5286] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654" WorkloadEndpoint="ip--172--31--27--146-k8s-whisker--57bcdb76fc--mdv8j-eth0" Nov 1 00:14:50.180527 env[1824]: 2025-11-01 00:14:50.104 [INFO][5286] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654" Nov 1 00:14:50.180527 env[1824]: 2025-11-01 00:14:50.104 [INFO][5286] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654" iface="eth0" netns="" Nov 1 00:14:50.180527 env[1824]: 2025-11-01 00:14:50.104 [INFO][5286] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654" Nov 1 00:14:50.180527 env[1824]: 2025-11-01 00:14:50.104 [INFO][5286] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654" Nov 1 00:14:50.180527 env[1824]: 2025-11-01 00:14:50.157 [INFO][5297] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654" HandleID="k8s-pod-network.2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654" Workload="ip--172--31--27--146-k8s-whisker--57bcdb76fc--mdv8j-eth0" Nov 1 00:14:50.180527 env[1824]: 2025-11-01 00:14:50.158 [INFO][5297] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:14:50.180527 env[1824]: 2025-11-01 00:14:50.158 [INFO][5297] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:14:50.180527 env[1824]: 2025-11-01 00:14:50.172 [WARNING][5297] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654" HandleID="k8s-pod-network.2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654" Workload="ip--172--31--27--146-k8s-whisker--57bcdb76fc--mdv8j-eth0" Nov 1 00:14:50.180527 env[1824]: 2025-11-01 00:14:50.172 [INFO][5297] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654" HandleID="k8s-pod-network.2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654" Workload="ip--172--31--27--146-k8s-whisker--57bcdb76fc--mdv8j-eth0" Nov 1 00:14:50.180527 env[1824]: 2025-11-01 00:14:50.174 [INFO][5297] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:14:50.180527 env[1824]: 2025-11-01 00:14:50.177 [INFO][5286] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654" Nov 1 00:14:50.181776 env[1824]: time="2025-11-01T00:14:50.181696993Z" level=info msg="TearDown network for sandbox \"2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654\" successfully" Nov 1 00:14:50.181984 env[1824]: time="2025-11-01T00:14:50.181908851Z" level=info msg="StopPodSandbox for \"2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654\" returns successfully" Nov 1 00:14:50.184590 env[1824]: time="2025-11-01T00:14:50.184523824Z" level=info msg="RemovePodSandbox for \"2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654\"" Nov 1 00:14:50.184836 env[1824]: time="2025-11-01T00:14:50.184760989Z" level=info msg="Forcibly stopping sandbox \"2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654\"" Nov 1 00:14:50.186038 env[1824]: time="2025-11-01T00:14:50.185018374Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:14:50.188710 env[1824]: time="2025-11-01T00:14:50.188634496Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:14:50.193165 kubelet[2905]: E1101 00:14:50.189243 2905 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:14:50.193165 kubelet[2905]: E1101 00:14:50.189331 2905 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:14:50.194230 kubelet[2905]: E1101 00:14:50.189920 2905 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-jpk9f,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-6d9db7877d-dphkx_calico-apiserver(d04e8d82-e949-4962-a876-1dbd67173f6c): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:14:50.196232 kubelet[2905]: E1101 00:14:50.195990 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6d9db7877d-dphkx" podUID="d04e8d82-e949-4962-a876-1dbd67173f6c" Nov 1 00:14:50.329408 env[1824]: 2025-11-01 00:14:50.269 [WARNING][5312] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654" WorkloadEndpoint="ip--172--31--27--146-k8s-whisker--57bcdb76fc--mdv8j-eth0" Nov 1 00:14:50.329408 env[1824]: 2025-11-01 00:14:50.269 [INFO][5312] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654" Nov 1 00:14:50.329408 env[1824]: 2025-11-01 00:14:50.269 [INFO][5312] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654" iface="eth0" netns="" Nov 1 00:14:50.329408 env[1824]: 2025-11-01 00:14:50.269 [INFO][5312] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654" Nov 1 00:14:50.329408 env[1824]: 2025-11-01 00:14:50.269 [INFO][5312] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654" Nov 1 00:14:50.329408 env[1824]: 2025-11-01 00:14:50.308 [INFO][5319] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654" HandleID="k8s-pod-network.2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654" Workload="ip--172--31--27--146-k8s-whisker--57bcdb76fc--mdv8j-eth0" Nov 1 00:14:50.329408 env[1824]: 2025-11-01 00:14:50.308 [INFO][5319] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:14:50.329408 env[1824]: 2025-11-01 00:14:50.308 [INFO][5319] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:14:50.329408 env[1824]: 2025-11-01 00:14:50.320 [WARNING][5319] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654" HandleID="k8s-pod-network.2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654" Workload="ip--172--31--27--146-k8s-whisker--57bcdb76fc--mdv8j-eth0" Nov 1 00:14:50.329408 env[1824]: 2025-11-01 00:14:50.320 [INFO][5319] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654" HandleID="k8s-pod-network.2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654" Workload="ip--172--31--27--146-k8s-whisker--57bcdb76fc--mdv8j-eth0" Nov 1 00:14:50.329408 env[1824]: 2025-11-01 00:14:50.323 [INFO][5319] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:14:50.329408 env[1824]: 2025-11-01 00:14:50.326 [INFO][5312] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654" Nov 1 00:14:50.330320 env[1824]: time="2025-11-01T00:14:50.329443526Z" level=info msg="TearDown network for sandbox \"2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654\" successfully" Nov 1 00:14:50.336012 env[1824]: time="2025-11-01T00:14:50.335943286Z" level=info msg="RemovePodSandbox \"2a2cb4c32b1dbf1f4633fe2aab6724c2f5c12189460e050cd1d929bbed2f2654\" returns successfully" Nov 1 00:14:50.488971 kubelet[2905]: E1101 00:14:50.488801 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6d9db7877d-dphkx" podUID="d04e8d82-e949-4962-a876-1dbd67173f6c" Nov 1 00:14:50.505906 kubelet[2905]: I1101 00:14:50.505836 2905 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-668d6bf9bc-57x5z" podStartSLOduration=58.505812856 podStartE2EDuration="58.505812856s" podCreationTimestamp="2025-11-01 00:13:52 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:14:50.500606428 +0000 UTC m=+63.837685974" watchObservedRunningTime="2025-11-01 00:14:50.505812856 +0000 UTC m=+63.842892414" Nov 1 00:14:50.515592 kubelet[2905]: E1101 00:14:50.515507 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-7758fdbbb7-7swhm" podUID="7c4dfa77-9d3c-4d7b-9cd8-e90f78821efe" Nov 1 00:14:50.572401 kernel: kauditd_printk_skb: 565 callbacks suppressed Nov 1 00:14:50.572571 kernel: audit: type=1325 audit(1761956090.563:1348): table=filter:124 family=2 entries=20 op=nft_register_rule pid=5326 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:14:50.563000 audit[5326]: NETFILTER_CFG table=filter:124 family=2 entries=20 op=nft_register_rule pid=5326 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:14:50.563000 audit[5326]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffc6041a60 a2=0 a3=1 items=0 ppid=3030 pid=5326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:50.563000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:14:50.595595 kernel: audit: type=1300 audit(1761956090.563:1348): arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffc6041a60 a2=0 a3=1 items=0 ppid=3030 pid=5326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:50.595747 kernel: audit: type=1327 audit(1761956090.563:1348): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:14:50.606000 audit[5326]: NETFILTER_CFG table=nat:125 family=2 entries=14 op=nft_register_rule pid=5326 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:14:50.615161 kernel: audit: type=1325 audit(1761956090.606:1349): table=nat:125 family=2 entries=14 op=nft_register_rule pid=5326 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:14:50.606000 audit[5326]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3468 a0=3 a1=ffffc6041a60 a2=0 a3=1 items=0 ppid=3030 pid=5326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:50.606000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:14:50.640262 kernel: audit: type=1300 audit(1761956090.606:1349): arch=c00000b7 syscall=211 success=yes exit=3468 a0=3 a1=ffffc6041a60 a2=0 a3=1 items=0 ppid=3030 pid=5326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:50.640408 kernel: audit: type=1327 audit(1761956090.606:1349): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:14:50.665000 kubelet[2905]: I1101 00:14:50.664916 2905 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-668d6bf9bc-9pzj4" podStartSLOduration=58.664886932 podStartE2EDuration="58.664886932s" podCreationTimestamp="2025-11-01 00:13:52 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:14:50.632460971 +0000 UTC m=+63.969540541" watchObservedRunningTime="2025-11-01 00:14:50.664886932 +0000 UTC m=+64.001966466" Nov 1 00:14:50.680000 audit[5328]: NETFILTER_CFG table=filter:126 family=2 entries=17 op=nft_register_rule pid=5328 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:14:50.680000 audit[5328]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffc08a83d0 a2=0 a3=1 items=0 ppid=3030 pid=5328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:50.699176 kernel: audit: type=1325 audit(1761956090.680:1350): table=filter:126 family=2 entries=17 op=nft_register_rule pid=5328 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:14:50.699334 kernel: audit: type=1300 audit(1761956090.680:1350): arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffc08a83d0 a2=0 a3=1 items=0 ppid=3030 pid=5328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:50.701192 kernel: audit: type=1327 audit(1761956090.680:1350): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:14:50.680000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:14:50.717000 audit[5328]: NETFILTER_CFG table=nat:127 family=2 entries=47 op=nft_register_chain pid=5328 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:14:50.717000 audit[5328]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=19860 a0=3 a1=ffffc08a83d0 a2=0 a3=1 items=0 ppid=3030 pid=5328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:50.717000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:14:50.725195 kernel: audit: type=1325 audit(1761956090.717:1351): table=nat:127 family=2 entries=47 op=nft_register_chain pid=5328 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:14:50.886472 systemd-networkd[1549]: cali99581bdfeb4: Gained IPv6LL Nov 1 00:14:50.950355 systemd-networkd[1549]: cali5461fa36da9: Gained IPv6LL Nov 1 00:14:51.346248 systemd[1]: Started sshd@8-172.31.27.146:22-147.75.109.163:48062.service. Nov 1 00:14:51.347000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.27.146:22-147.75.109.163:48062 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:51.516973 kubelet[2905]: E1101 00:14:51.516919 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-7758fdbbb7-7swhm" podUID="7c4dfa77-9d3c-4d7b-9cd8-e90f78821efe" Nov 1 00:14:51.517871 kubelet[2905]: E1101 00:14:51.517478 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6d9db7877d-dphkx" podUID="d04e8d82-e949-4962-a876-1dbd67173f6c" Nov 1 00:14:51.535000 audit[5331]: USER_ACCT pid=5331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:51.536173 sshd[5331]: Accepted publickey for core from 147.75.109.163 port 48062 ssh2: RSA SHA256:l10clL99NTgBLZDdAUsIsAniCj4DES+0hQanxvSOioM Nov 1 00:14:51.538000 audit[5331]: CRED_ACQ pid=5331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:51.539000 audit[5331]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc77c4b00 a2=3 a3=1 items=0 ppid=1 pid=5331 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:51.539000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:14:51.541637 sshd[5331]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:14:51.555464 systemd[1]: Started session-9.scope. Nov 1 00:14:51.559883 systemd-logind[1813]: New session 9 of user core. Nov 1 00:14:51.573000 audit[5331]: USER_START pid=5331 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:51.576000 audit[5333]: CRED_ACQ pid=5333 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:51.833452 sshd[5331]: pam_unix(sshd:session): session closed for user core Nov 1 00:14:51.837000 audit[5331]: USER_END pid=5331 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:51.838000 audit[5331]: CRED_DISP pid=5331 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:51.840944 systemd-logind[1813]: Session 9 logged out. Waiting for processes to exit. Nov 1 00:14:51.842978 systemd[1]: sshd@8-172.31.27.146:22-147.75.109.163:48062.service: Deactivated successfully. Nov 1 00:14:51.843000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.27.146:22-147.75.109.163:48062 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:51.844415 systemd[1]: session-9.scope: Deactivated successfully. Nov 1 00:14:51.846604 systemd-logind[1813]: Removed session 9. Nov 1 00:14:54.962929 env[1824]: time="2025-11-01T00:14:54.962499803Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Nov 1 00:14:55.228089 env[1824]: time="2025-11-01T00:14:55.227665764Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:14:55.230330 env[1824]: time="2025-11-01T00:14:55.230086374Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Nov 1 00:14:55.230577 kubelet[2905]: E1101 00:14:55.230496 2905 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:14:55.231079 kubelet[2905]: E1101 00:14:55.230614 2905 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:14:55.231079 kubelet[2905]: E1101 00:14:55.230810 2905 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.4,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:6a25b9b39c124274af2d764b4547d5b9,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-nm6d2,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-f46c6dfd5-mv69v_calico-system(720f85d9-4a79-48d4-a808-29c9ff35fbd4): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Nov 1 00:14:55.233969 env[1824]: time="2025-11-01T00:14:55.233893982Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Nov 1 00:14:55.473292 env[1824]: time="2025-11-01T00:14:55.473213402Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:14:55.475429 env[1824]: time="2025-11-01T00:14:55.475359046Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Nov 1 00:14:55.475848 kubelet[2905]: E1101 00:14:55.475754 2905 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:14:55.475964 kubelet[2905]: E1101 00:14:55.475848 2905 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:14:55.476860 kubelet[2905]: E1101 00:14:55.476671 2905 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-nm6d2,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-f46c6dfd5-mv69v_calico-system(720f85d9-4a79-48d4-a808-29c9ff35fbd4): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Nov 1 00:14:55.478300 kubelet[2905]: E1101 00:14:55.478064 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-f46c6dfd5-mv69v" podUID="720f85d9-4a79-48d4-a808-29c9ff35fbd4" Nov 1 00:14:56.861657 systemd[1]: Started sshd@9-172.31.27.146:22-147.75.109.163:48064.service. Nov 1 00:14:56.873572 kernel: kauditd_printk_skb: 13 callbacks suppressed Nov 1 00:14:56.873680 kernel: audit: type=1130 audit(1761956096.862:1361): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.27.146:22-147.75.109.163:48064 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:56.862000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.27.146:22-147.75.109.163:48064 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:57.033000 audit[5354]: USER_ACCT pid=5354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:57.033886 sshd[5354]: Accepted publickey for core from 147.75.109.163 port 48064 ssh2: RSA SHA256:l10clL99NTgBLZDdAUsIsAniCj4DES+0hQanxvSOioM Nov 1 00:14:57.045173 kernel: audit: type=1101 audit(1761956097.033:1362): pid=5354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:57.046000 audit[5354]: CRED_ACQ pid=5354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:57.047587 sshd[5354]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:14:57.062785 kernel: audit: type=1103 audit(1761956097.046:1363): pid=5354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:57.062929 kernel: audit: type=1006 audit(1761956097.046:1364): pid=5354 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Nov 1 00:14:57.063021 kernel: audit: type=1300 audit(1761956097.046:1364): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffee9dcd0 a2=3 a3=1 items=0 ppid=1 pid=5354 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:57.046000 audit[5354]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffee9dcd0 a2=3 a3=1 items=0 ppid=1 pid=5354 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:57.069049 systemd[1]: Started session-10.scope. Nov 1 00:14:57.072335 systemd-logind[1813]: New session 10 of user core. Nov 1 00:14:57.046000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:14:57.077257 kernel: audit: type=1327 audit(1761956097.046:1364): proctitle=737368643A20636F7265205B707269765D Nov 1 00:14:57.083000 audit[5354]: USER_START pid=5354 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:57.086000 audit[5356]: CRED_ACQ pid=5356 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:57.105822 kernel: audit: type=1105 audit(1761956097.083:1365): pid=5354 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:57.105899 kernel: audit: type=1103 audit(1761956097.086:1366): pid=5356 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:57.332233 sshd[5354]: pam_unix(sshd:session): session closed for user core Nov 1 00:14:57.333000 audit[5354]: USER_END pid=5354 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:57.339401 systemd[1]: session-10.scope: Deactivated successfully. Nov 1 00:14:57.341272 systemd[1]: sshd@9-172.31.27.146:22-147.75.109.163:48064.service: Deactivated successfully. Nov 1 00:14:57.346812 systemd-logind[1813]: Session 10 logged out. Waiting for processes to exit. Nov 1 00:14:57.333000 audit[5354]: CRED_DISP pid=5354 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:57.357915 kernel: audit: type=1106 audit(1761956097.333:1367): pid=5354 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:57.358042 kernel: audit: type=1104 audit(1761956097.333:1368): pid=5354 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:57.357962 systemd-logind[1813]: Removed session 10. Nov 1 00:14:57.339000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.27.146:22-147.75.109.163:48064 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:59.458441 amazon-ssm-agent[1799]: 2025-11-01 00:14:59 INFO [HealthCheck] HealthCheck reporting agent health. Nov 1 00:14:59.962059 env[1824]: time="2025-11-01T00:14:59.961994622Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Nov 1 00:15:00.198157 env[1824]: time="2025-11-01T00:15:00.197994802Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:15:00.200477 env[1824]: time="2025-11-01T00:15:00.200322661Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Nov 1 00:15:00.200721 kubelet[2905]: E1101 00:15:00.200621 2905 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:15:00.200721 kubelet[2905]: E1101 00:15:00.200695 2905 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:15:00.201363 kubelet[2905]: E1101 00:15:00.200882 2905 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-p6wq4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-666569f655-hp4nw_calico-system(2672231a-dbf2-4175-a896-3a2597610669): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Nov 1 00:15:00.202856 kubelet[2905]: E1101 00:15:00.202782 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-hp4nw" podUID="2672231a-dbf2-4175-a896-3a2597610669" Nov 1 00:15:01.961964 env[1824]: time="2025-11-01T00:15:01.961862176Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:15:02.205660 env[1824]: time="2025-11-01T00:15:02.205586251Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:15:02.207869 env[1824]: time="2025-11-01T00:15:02.207800125Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:15:02.208169 kubelet[2905]: E1101 00:15:02.208080 2905 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:15:02.208666 kubelet[2905]: E1101 00:15:02.208175 2905 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:15:02.208666 kubelet[2905]: E1101 00:15:02.208460 2905 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-pmp28,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-6d9db7877d-g6gc4_calico-apiserver(d237b083-16fc-4661-b219-6ab46b70c3f4): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:15:02.209640 env[1824]: time="2025-11-01T00:15:02.209570865Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Nov 1 00:15:02.210679 kubelet[2905]: E1101 00:15:02.210602 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6d9db7877d-g6gc4" podUID="d237b083-16fc-4661-b219-6ab46b70c3f4" Nov 1 00:15:02.361869 systemd[1]: Started sshd@10-172.31.27.146:22-147.75.109.163:39700.service. Nov 1 00:15:02.361000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.27.146:22-147.75.109.163:39700 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:02.365167 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:15:02.365272 kernel: audit: type=1130 audit(1761956102.361:1370): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.27.146:22-147.75.109.163:39700 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:02.450604 env[1824]: time="2025-11-01T00:15:02.450492635Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:15:02.452785 env[1824]: time="2025-11-01T00:15:02.452714297Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Nov 1 00:15:02.453408 kubelet[2905]: E1101 00:15:02.453047 2905 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:15:02.453408 kubelet[2905]: E1101 00:15:02.453144 2905 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:15:02.453408 kubelet[2905]: E1101 00:15:02.453310 2905 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.30.4,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-b66ts,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-89sjk_calico-system(7a8f56d2-ec05-443a-b8e9-9b53fb320745): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Nov 1 00:15:02.457463 env[1824]: time="2025-11-01T00:15:02.457400105Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Nov 1 00:15:02.540000 audit[5370]: USER_ACCT pid=5370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:02.546698 sshd[5370]: Accepted publickey for core from 147.75.109.163 port 39700 ssh2: RSA SHA256:l10clL99NTgBLZDdAUsIsAniCj4DES+0hQanxvSOioM Nov 1 00:15:02.548906 sshd[5370]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:15:02.546000 audit[5370]: CRED_ACQ pid=5370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:02.562464 kernel: audit: type=1101 audit(1761956102.540:1371): pid=5370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:02.562569 kernel: audit: type=1103 audit(1761956102.546:1372): pid=5370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:02.569266 kernel: audit: type=1006 audit(1761956102.546:1373): pid=5370 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Nov 1 00:15:02.546000 audit[5370]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc1358e40 a2=3 a3=1 items=0 ppid=1 pid=5370 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:02.581386 kernel: audit: type=1300 audit(1761956102.546:1373): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc1358e40 a2=3 a3=1 items=0 ppid=1 pid=5370 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:02.546000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:15:02.588432 kernel: audit: type=1327 audit(1761956102.546:1373): proctitle=737368643A20636F7265205B707269765D Nov 1 00:15:02.587458 systemd-logind[1813]: New session 11 of user core. Nov 1 00:15:02.588673 systemd[1]: Started session-11.scope. Nov 1 00:15:02.597000 audit[5370]: USER_START pid=5370 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:02.612716 kernel: audit: type=1105 audit(1761956102.597:1374): pid=5370 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:02.610000 audit[5372]: CRED_ACQ pid=5372 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:02.625189 kernel: audit: type=1103 audit(1761956102.610:1375): pid=5372 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:02.716019 env[1824]: time="2025-11-01T00:15:02.715901830Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:15:02.718519 env[1824]: time="2025-11-01T00:15:02.718397572Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Nov 1 00:15:02.718904 kubelet[2905]: E1101 00:15:02.718846 2905 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:15:02.719015 kubelet[2905]: E1101 00:15:02.718918 2905 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:15:02.719175 kubelet[2905]: E1101 00:15:02.719082 2905 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-b66ts,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-89sjk_calico-system(7a8f56d2-ec05-443a-b8e9-9b53fb320745): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Nov 1 00:15:02.721413 kubelet[2905]: E1101 00:15:02.721306 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-89sjk" podUID="7a8f56d2-ec05-443a-b8e9-9b53fb320745" Nov 1 00:15:02.882913 sshd[5370]: pam_unix(sshd:session): session closed for user core Nov 1 00:15:02.884000 audit[5370]: USER_END pid=5370 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:02.887000 audit[5370]: CRED_DISP pid=5370 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:02.907545 kernel: audit: type=1106 audit(1761956102.884:1376): pid=5370 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:02.907673 kernel: audit: type=1104 audit(1761956102.887:1377): pid=5370 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:02.898672 systemd[1]: sshd@10-172.31.27.146:22-147.75.109.163:39700.service: Deactivated successfully. Nov 1 00:15:02.899937 systemd[1]: session-11.scope: Deactivated successfully. Nov 1 00:15:02.902325 systemd-logind[1813]: Session 11 logged out. Waiting for processes to exit. Nov 1 00:15:02.896000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.27.146:22-147.75.109.163:39700 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:02.913020 systemd-logind[1813]: Removed session 11. Nov 1 00:15:02.918000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.27.146:22-147.75.109.163:39716 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:02.919809 systemd[1]: Started sshd@11-172.31.27.146:22-147.75.109.163:39716.service. Nov 1 00:15:03.094000 audit[5383]: USER_ACCT pid=5383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:03.095879 sshd[5383]: Accepted publickey for core from 147.75.109.163 port 39716 ssh2: RSA SHA256:l10clL99NTgBLZDdAUsIsAniCj4DES+0hQanxvSOioM Nov 1 00:15:03.096000 audit[5383]: CRED_ACQ pid=5383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:03.097000 audit[5383]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffb7d6160 a2=3 a3=1 items=0 ppid=1 pid=5383 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:03.097000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:15:03.099301 sshd[5383]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:15:03.107693 systemd-logind[1813]: New session 12 of user core. Nov 1 00:15:03.108390 systemd[1]: Started session-12.scope. Nov 1 00:15:03.119000 audit[5383]: USER_START pid=5383 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:03.122000 audit[5385]: CRED_ACQ pid=5385 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:03.454533 sshd[5383]: pam_unix(sshd:session): session closed for user core Nov 1 00:15:03.456000 audit[5383]: USER_END pid=5383 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:03.457000 audit[5383]: CRED_DISP pid=5383 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:03.461773 systemd[1]: sshd@11-172.31.27.146:22-147.75.109.163:39716.service: Deactivated successfully. Nov 1 00:15:03.461000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.27.146:22-147.75.109.163:39716 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:03.463701 systemd[1]: session-12.scope: Deactivated successfully. Nov 1 00:15:03.465422 systemd-logind[1813]: Session 12 logged out. Waiting for processes to exit. Nov 1 00:15:03.467677 systemd-logind[1813]: Removed session 12. Nov 1 00:15:03.496233 systemd[1]: Started sshd@12-172.31.27.146:22-147.75.109.163:39718.service. Nov 1 00:15:03.495000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.27.146:22-147.75.109.163:39718 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:03.673000 audit[5393]: USER_ACCT pid=5393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:03.674603 sshd[5393]: Accepted publickey for core from 147.75.109.163 port 39718 ssh2: RSA SHA256:l10clL99NTgBLZDdAUsIsAniCj4DES+0hQanxvSOioM Nov 1 00:15:03.675000 audit[5393]: CRED_ACQ pid=5393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:03.675000 audit[5393]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe6141f90 a2=3 a3=1 items=0 ppid=1 pid=5393 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:03.675000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:15:03.677768 sshd[5393]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:15:03.687671 systemd[1]: Started session-13.scope. Nov 1 00:15:03.688814 systemd-logind[1813]: New session 13 of user core. Nov 1 00:15:03.700000 audit[5393]: USER_START pid=5393 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:03.703000 audit[5395]: CRED_ACQ pid=5395 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:03.966487 sshd[5393]: pam_unix(sshd:session): session closed for user core Nov 1 00:15:03.967000 audit[5393]: USER_END pid=5393 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:03.968000 audit[5393]: CRED_DISP pid=5393 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:03.971639 systemd[1]: session-13.scope: Deactivated successfully. Nov 1 00:15:03.972000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.27.146:22-147.75.109.163:39718 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:03.972930 systemd-logind[1813]: Session 13 logged out. Waiting for processes to exit. Nov 1 00:15:03.973381 systemd[1]: sshd@12-172.31.27.146:22-147.75.109.163:39718.service: Deactivated successfully. Nov 1 00:15:03.977467 systemd-logind[1813]: Removed session 13. Nov 1 00:15:05.962399 env[1824]: time="2025-11-01T00:15:05.961888871Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:15:05.963934 kubelet[2905]: E1101 00:15:05.963776 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-f46c6dfd5-mv69v" podUID="720f85d9-4a79-48d4-a808-29c9ff35fbd4" Nov 1 00:15:06.212106 env[1824]: time="2025-11-01T00:15:06.212027722Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:15:06.214477 env[1824]: time="2025-11-01T00:15:06.214302117Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:15:06.214890 kubelet[2905]: E1101 00:15:06.214820 2905 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:15:06.215090 kubelet[2905]: E1101 00:15:06.215054 2905 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:15:06.215489 kubelet[2905]: E1101 00:15:06.215414 2905 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-jpk9f,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-6d9db7877d-dphkx_calico-apiserver(d04e8d82-e949-4962-a876-1dbd67173f6c): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:15:06.217271 kubelet[2905]: E1101 00:15:06.217155 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6d9db7877d-dphkx" podUID="d04e8d82-e949-4962-a876-1dbd67173f6c" Nov 1 00:15:06.962729 env[1824]: time="2025-11-01T00:15:06.962658120Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Nov 1 00:15:07.215444 env[1824]: time="2025-11-01T00:15:07.215262436Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:15:07.218054 env[1824]: time="2025-11-01T00:15:07.217966373Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Nov 1 00:15:07.218404 kubelet[2905]: E1101 00:15:07.218349 2905 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:15:07.218966 kubelet[2905]: E1101 00:15:07.218929 2905 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:15:07.219357 kubelet[2905]: E1101 00:15:07.219271 2905 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,loadbalancer,ValueFrom:nil,},EnvVar{Name:DISABLE_KUBE_CONTROLLERS_CONFIG_API,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:CA_CRT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/cert.pem,SubPath:ca-bundle.crt,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-9wlw4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*999,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-kube-controllers-7758fdbbb7-7swhm_calico-system(7c4dfa77-9d3c-4d7b-9cd8-e90f78821efe): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Nov 1 00:15:07.221384 kubelet[2905]: E1101 00:15:07.221327 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-7758fdbbb7-7swhm" podUID="7c4dfa77-9d3c-4d7b-9cd8-e90f78821efe" Nov 1 00:15:08.994000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.27.146:22-147.75.109.163:39722 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:08.995712 systemd[1]: Started sshd@13-172.31.27.146:22-147.75.109.163:39722.service. Nov 1 00:15:09.000086 kernel: kauditd_printk_skb: 23 callbacks suppressed Nov 1 00:15:09.000247 kernel: audit: type=1130 audit(1761956108.994:1397): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.27.146:22-147.75.109.163:39722 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:09.178896 sshd[5411]: Accepted publickey for core from 147.75.109.163 port 39722 ssh2: RSA SHA256:l10clL99NTgBLZDdAUsIsAniCj4DES+0hQanxvSOioM Nov 1 00:15:09.177000 audit[5411]: USER_ACCT pid=5411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:09.191210 kernel: audit: type=1101 audit(1761956109.177:1398): pid=5411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:09.192153 sshd[5411]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:15:09.190000 audit[5411]: CRED_ACQ pid=5411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:09.212234 systemd-logind[1813]: New session 14 of user core. Nov 1 00:15:09.220485 kernel: audit: type=1103 audit(1761956109.190:1399): pid=5411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:09.220637 kernel: audit: type=1006 audit(1761956109.190:1400): pid=5411 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Nov 1 00:15:09.215160 systemd[1]: Started session-14.scope. Nov 1 00:15:09.190000 audit[5411]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffe9dd9c0 a2=3 a3=1 items=0 ppid=1 pid=5411 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:09.190000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:15:09.249440 kernel: audit: type=1300 audit(1761956109.190:1400): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffe9dd9c0 a2=3 a3=1 items=0 ppid=1 pid=5411 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:09.254275 kernel: audit: type=1327 audit(1761956109.190:1400): proctitle=737368643A20636F7265205B707269765D Nov 1 00:15:09.243000 audit[5411]: USER_START pid=5411 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:09.246000 audit[5413]: CRED_ACQ pid=5413 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:09.283695 kernel: audit: type=1105 audit(1761956109.243:1401): pid=5411 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:09.283828 kernel: audit: type=1103 audit(1761956109.246:1402): pid=5413 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:09.560286 sshd[5411]: pam_unix(sshd:session): session closed for user core Nov 1 00:15:09.561000 audit[5411]: USER_END pid=5411 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:09.565689 systemd[1]: session-14.scope: Deactivated successfully. Nov 1 00:15:09.566801 systemd[1]: sshd@13-172.31.27.146:22-147.75.109.163:39722.service: Deactivated successfully. Nov 1 00:15:09.562000 audit[5411]: CRED_DISP pid=5411 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:09.576391 systemd-logind[1813]: Session 14 logged out. Waiting for processes to exit. Nov 1 00:15:09.586330 kernel: audit: type=1106 audit(1761956109.561:1403): pid=5411 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:09.586473 kernel: audit: type=1104 audit(1761956109.562:1404): pid=5411 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:09.566000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.27.146:22-147.75.109.163:39722 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:09.587757 systemd-logind[1813]: Removed session 14. Nov 1 00:15:12.961346 kubelet[2905]: E1101 00:15:12.961277 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6d9db7877d-g6gc4" podUID="d237b083-16fc-4661-b219-6ab46b70c3f4" Nov 1 00:15:13.962356 kubelet[2905]: E1101 00:15:13.962269 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-hp4nw" podUID="2672231a-dbf2-4175-a896-3a2597610669" Nov 1 00:15:14.591363 systemd[1]: Started sshd@14-172.31.27.146:22-147.75.109.163:54958.service. Nov 1 00:15:14.591000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.27.146:22-147.75.109.163:54958 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:14.594961 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:15:14.595085 kernel: audit: type=1130 audit(1761956114.591:1406): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.27.146:22-147.75.109.163:54958 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:14.780379 sshd[5450]: Accepted publickey for core from 147.75.109.163 port 54958 ssh2: RSA SHA256:l10clL99NTgBLZDdAUsIsAniCj4DES+0hQanxvSOioM Nov 1 00:15:14.779000 audit[5450]: USER_ACCT pid=5450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:14.783596 sshd[5450]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:15:14.781000 audit[5450]: CRED_ACQ pid=5450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:14.801465 kernel: audit: type=1101 audit(1761956114.779:1407): pid=5450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:14.801619 kernel: audit: type=1103 audit(1761956114.781:1408): pid=5450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:14.813211 kernel: audit: type=1006 audit(1761956114.781:1409): pid=5450 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Nov 1 00:15:14.781000 audit[5450]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe1725700 a2=3 a3=1 items=0 ppid=1 pid=5450 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:14.815428 systemd-logind[1813]: New session 15 of user core. Nov 1 00:15:14.826168 systemd[1]: Started session-15.scope. Nov 1 00:15:14.781000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:15:14.831498 kernel: audit: type=1300 audit(1761956114.781:1409): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe1725700 a2=3 a3=1 items=0 ppid=1 pid=5450 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:14.831611 kernel: audit: type=1327 audit(1761956114.781:1409): proctitle=737368643A20636F7265205B707269765D Nov 1 00:15:14.842000 audit[5450]: USER_START pid=5450 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:14.855000 audit[5452]: CRED_ACQ pid=5452 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:14.867761 kernel: audit: type=1105 audit(1761956114.842:1410): pid=5450 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:14.867868 kernel: audit: type=1103 audit(1761956114.855:1411): pid=5452 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:15.108453 sshd[5450]: pam_unix(sshd:session): session closed for user core Nov 1 00:15:15.110000 audit[5450]: USER_END pid=5450 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:15.114654 systemd[1]: session-15.scope: Deactivated successfully. Nov 1 00:15:15.116086 systemd[1]: sshd@14-172.31.27.146:22-147.75.109.163:54958.service: Deactivated successfully. Nov 1 00:15:15.124697 systemd-logind[1813]: Session 15 logged out. Waiting for processes to exit. Nov 1 00:15:15.110000 audit[5450]: CRED_DISP pid=5450 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:15.134812 kernel: audit: type=1106 audit(1761956115.110:1412): pid=5450 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:15.134925 kernel: audit: type=1104 audit(1761956115.110:1413): pid=5450 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:15.115000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.27.146:22-147.75.109.163:54958 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:15.137380 systemd-logind[1813]: Removed session 15. Nov 1 00:15:16.967394 env[1824]: time="2025-11-01T00:15:16.967341786Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Nov 1 00:15:17.215451 env[1824]: time="2025-11-01T00:15:17.215388128Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:15:17.218018 env[1824]: time="2025-11-01T00:15:17.217816135Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Nov 1 00:15:17.218880 kubelet[2905]: E1101 00:15:17.218805 2905 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:15:17.219544 kubelet[2905]: E1101 00:15:17.219491 2905 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:15:17.219883 kubelet[2905]: E1101 00:15:17.219825 2905 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.4,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:6a25b9b39c124274af2d764b4547d5b9,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-nm6d2,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-f46c6dfd5-mv69v_calico-system(720f85d9-4a79-48d4-a808-29c9ff35fbd4): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Nov 1 00:15:17.223023 env[1824]: time="2025-11-01T00:15:17.222974660Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Nov 1 00:15:17.465541 env[1824]: time="2025-11-01T00:15:17.465440196Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:15:17.467967 env[1824]: time="2025-11-01T00:15:17.467850552Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Nov 1 00:15:17.468390 kubelet[2905]: E1101 00:15:17.468239 2905 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:15:17.468390 kubelet[2905]: E1101 00:15:17.468311 2905 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:15:17.468569 kubelet[2905]: E1101 00:15:17.468469 2905 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-nm6d2,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-f46c6dfd5-mv69v_calico-system(720f85d9-4a79-48d4-a808-29c9ff35fbd4): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Nov 1 00:15:17.470264 kubelet[2905]: E1101 00:15:17.470185 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-f46c6dfd5-mv69v" podUID="720f85d9-4a79-48d4-a808-29c9ff35fbd4" Nov 1 00:15:17.963032 kubelet[2905]: E1101 00:15:17.962934 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-89sjk" podUID="7a8f56d2-ec05-443a-b8e9-9b53fb320745" Nov 1 00:15:19.961409 kubelet[2905]: E1101 00:15:19.961337 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6d9db7877d-dphkx" podUID="d04e8d82-e949-4962-a876-1dbd67173f6c" Nov 1 00:15:20.144401 systemd[1]: Started sshd@15-172.31.27.146:22-147.75.109.163:47014.service. Nov 1 00:15:20.157100 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:15:20.157256 kernel: audit: type=1130 audit(1761956120.143:1415): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.27.146:22-147.75.109.163:47014 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:20.143000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.27.146:22-147.75.109.163:47014 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:20.319000 audit[5464]: USER_ACCT pid=5464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:20.323930 sshd[5464]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:15:20.326950 sshd[5464]: Accepted publickey for core from 147.75.109.163 port 47014 ssh2: RSA SHA256:l10clL99NTgBLZDdAUsIsAniCj4DES+0hQanxvSOioM Nov 1 00:15:20.320000 audit[5464]: CRED_ACQ pid=5464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:20.348174 kernel: audit: type=1101 audit(1761956120.319:1416): pid=5464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:20.348313 kernel: audit: type=1103 audit(1761956120.320:1417): pid=5464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:20.348359 kernel: audit: type=1006 audit(1761956120.320:1418): pid=5464 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Nov 1 00:15:20.362161 kernel: audit: type=1300 audit(1761956120.320:1418): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc9ce33b0 a2=3 a3=1 items=0 ppid=1 pid=5464 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:20.320000 audit[5464]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc9ce33b0 a2=3 a3=1 items=0 ppid=1 pid=5464 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:20.356871 systemd[1]: Started session-16.scope. Nov 1 00:15:20.364962 systemd-logind[1813]: New session 16 of user core. Nov 1 00:15:20.320000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:15:20.372980 kernel: audit: type=1327 audit(1761956120.320:1418): proctitle=737368643A20636F7265205B707269765D Nov 1 00:15:20.387000 audit[5464]: USER_START pid=5464 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:20.407342 kernel: audit: type=1105 audit(1761956120.387:1419): pid=5464 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:20.407466 kernel: audit: type=1103 audit(1761956120.399:1420): pid=5466 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:20.399000 audit[5466]: CRED_ACQ pid=5466 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:20.721716 sshd[5464]: pam_unix(sshd:session): session closed for user core Nov 1 00:15:20.722000 audit[5464]: USER_END pid=5464 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:20.736668 systemd[1]: sshd@15-172.31.27.146:22-147.75.109.163:47014.service: Deactivated successfully. Nov 1 00:15:20.738040 systemd[1]: session-16.scope: Deactivated successfully. Nov 1 00:15:20.739804 systemd-logind[1813]: Session 16 logged out. Waiting for processes to exit. Nov 1 00:15:20.723000 audit[5464]: CRED_DISP pid=5464 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:20.751797 kernel: audit: type=1106 audit(1761956120.722:1421): pid=5464 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:20.751955 kernel: audit: type=1104 audit(1761956120.723:1422): pid=5464 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:20.752729 systemd-logind[1813]: Removed session 16. Nov 1 00:15:20.735000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.27.146:22-147.75.109.163:47014 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:20.961366 kubelet[2905]: E1101 00:15:20.961311 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-7758fdbbb7-7swhm" podUID="7c4dfa77-9d3c-4d7b-9cd8-e90f78821efe" Nov 1 00:15:25.749000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.27.146:22-147.75.109.163:47028 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:25.749793 systemd[1]: Started sshd@16-172.31.27.146:22-147.75.109.163:47028.service. Nov 1 00:15:25.752202 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:15:25.752311 kernel: audit: type=1130 audit(1761956125.749:1424): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.27.146:22-147.75.109.163:47028 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:25.941000 audit[5484]: USER_ACCT pid=5484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:25.944522 sshd[5484]: Accepted publickey for core from 147.75.109.163 port 47028 ssh2: RSA SHA256:l10clL99NTgBLZDdAUsIsAniCj4DES+0hQanxvSOioM Nov 1 00:15:25.955200 kernel: audit: type=1101 audit(1761956125.941:1425): pid=5484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:25.953000 audit[5484]: CRED_ACQ pid=5484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:25.956547 sshd[5484]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:15:25.966161 kernel: audit: type=1103 audit(1761956125.953:1426): pid=5484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:25.967431 systemd[1]: Started session-17.scope. Nov 1 00:15:25.970391 systemd-logind[1813]: New session 17 of user core. Nov 1 00:15:25.954000 audit[5484]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcf510180 a2=3 a3=1 items=0 ppid=1 pid=5484 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:25.973443 kernel: audit: type=1006 audit(1761956125.954:1427): pid=5484 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Nov 1 00:15:25.984578 env[1824]: time="2025-11-01T00:15:25.977252895Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:15:25.954000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:15:25.989520 kernel: audit: type=1300 audit(1761956125.954:1427): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcf510180 a2=3 a3=1 items=0 ppid=1 pid=5484 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:25.989657 kernel: audit: type=1327 audit(1761956125.954:1427): proctitle=737368643A20636F7265205B707269765D Nov 1 00:15:25.998000 audit[5484]: USER_START pid=5484 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:26.001000 audit[5486]: CRED_ACQ pid=5486 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:26.021990 kernel: audit: type=1105 audit(1761956125.998:1428): pid=5484 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:26.022217 kernel: audit: type=1103 audit(1761956126.001:1429): pid=5486 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:26.255370 env[1824]: time="2025-11-01T00:15:26.255286960Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:15:26.258447 env[1824]: time="2025-11-01T00:15:26.258335248Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:15:26.258932 kubelet[2905]: E1101 00:15:26.258882 2905 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:15:26.259616 kubelet[2905]: E1101 00:15:26.259576 2905 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:15:26.267420 sshd[5484]: pam_unix(sshd:session): session closed for user core Nov 1 00:15:26.270109 kubelet[2905]: E1101 00:15:26.270015 2905 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-pmp28,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-6d9db7877d-g6gc4_calico-apiserver(d237b083-16fc-4661-b219-6ab46b70c3f4): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:15:26.270000 audit[5484]: USER_END pid=5484 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:26.273027 kubelet[2905]: E1101 00:15:26.272976 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6d9db7877d-g6gc4" podUID="d237b083-16fc-4661-b219-6ab46b70c3f4" Nov 1 00:15:26.274849 systemd[1]: session-17.scope: Deactivated successfully. Nov 1 00:15:26.276233 systemd[1]: sshd@16-172.31.27.146:22-147.75.109.163:47028.service: Deactivated successfully. Nov 1 00:15:26.271000 audit[5484]: CRED_DISP pid=5484 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:26.294525 kernel: audit: type=1106 audit(1761956126.270:1430): pid=5484 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:26.294680 kernel: audit: type=1104 audit(1761956126.271:1431): pid=5484 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:26.293808 systemd-logind[1813]: Session 17 logged out. Waiting for processes to exit. Nov 1 00:15:26.275000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.27.146:22-147.75.109.163:47028 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:26.296301 systemd-logind[1813]: Removed session 17. Nov 1 00:15:27.961887 env[1824]: time="2025-11-01T00:15:27.961452539Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Nov 1 00:15:28.195658 env[1824]: time="2025-11-01T00:15:28.195579009Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:15:28.198063 env[1824]: time="2025-11-01T00:15:28.197972285Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Nov 1 00:15:28.198641 kubelet[2905]: E1101 00:15:28.198579 2905 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:15:28.199261 kubelet[2905]: E1101 00:15:28.198652 2905 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:15:28.199490 kubelet[2905]: E1101 00:15:28.199393 2905 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-p6wq4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-666569f655-hp4nw_calico-system(2672231a-dbf2-4175-a896-3a2597610669): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Nov 1 00:15:28.200758 kubelet[2905]: E1101 00:15:28.200684 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-hp4nw" podUID="2672231a-dbf2-4175-a896-3a2597610669" Nov 1 00:15:28.963234 env[1824]: time="2025-11-01T00:15:28.963155161Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Nov 1 00:15:29.224874 env[1824]: time="2025-11-01T00:15:29.224695298Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:15:29.226996 env[1824]: time="2025-11-01T00:15:29.226914921Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Nov 1 00:15:29.227368 kubelet[2905]: E1101 00:15:29.227310 2905 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:15:29.227941 kubelet[2905]: E1101 00:15:29.227383 2905 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:15:29.227941 kubelet[2905]: E1101 00:15:29.227581 2905 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.30.4,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-b66ts,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-89sjk_calico-system(7a8f56d2-ec05-443a-b8e9-9b53fb320745): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Nov 1 00:15:29.232906 env[1824]: time="2025-11-01T00:15:29.232841305Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Nov 1 00:15:29.473564 env[1824]: time="2025-11-01T00:15:29.473471018Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:15:29.476224 env[1824]: time="2025-11-01T00:15:29.475999704Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Nov 1 00:15:29.477029 kubelet[2905]: E1101 00:15:29.476953 2905 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:15:29.477226 kubelet[2905]: E1101 00:15:29.477036 2905 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:15:29.477320 kubelet[2905]: E1101 00:15:29.477218 2905 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-b66ts,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-89sjk_calico-system(7a8f56d2-ec05-443a-b8e9-9b53fb320745): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Nov 1 00:15:29.478986 kubelet[2905]: E1101 00:15:29.478892 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-89sjk" podUID="7a8f56d2-ec05-443a-b8e9-9b53fb320745" Nov 1 00:15:29.962686 kubelet[2905]: E1101 00:15:29.962550 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-f46c6dfd5-mv69v" podUID="720f85d9-4a79-48d4-a808-29c9ff35fbd4" Nov 1 00:15:31.291359 systemd[1]: Started sshd@17-172.31.27.146:22-147.75.109.163:50510.service. Nov 1 00:15:31.290000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.27.146:22-147.75.109.163:50510 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:31.293756 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:15:31.293836 kernel: audit: type=1130 audit(1761956131.290:1433): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.27.146:22-147.75.109.163:50510 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:31.468000 audit[5498]: USER_ACCT pid=5498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:31.469786 sshd[5498]: Accepted publickey for core from 147.75.109.163 port 50510 ssh2: RSA SHA256:l10clL99NTgBLZDdAUsIsAniCj4DES+0hQanxvSOioM Nov 1 00:15:31.473101 sshd[5498]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:15:31.471000 audit[5498]: CRED_ACQ pid=5498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:31.483482 systemd[1]: Started session-18.scope. Nov 1 00:15:31.485438 systemd-logind[1813]: New session 18 of user core. Nov 1 00:15:31.490078 kernel: audit: type=1101 audit(1761956131.468:1434): pid=5498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:31.490251 kernel: audit: type=1103 audit(1761956131.471:1435): pid=5498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:31.497305 kernel: audit: type=1006 audit(1761956131.471:1436): pid=5498 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 Nov 1 00:15:31.497434 kernel: audit: type=1300 audit(1761956131.471:1436): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdab60600 a2=3 a3=1 items=0 ppid=1 pid=5498 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:31.471000 audit[5498]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdab60600 a2=3 a3=1 items=0 ppid=1 pid=5498 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:31.471000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:15:31.511100 kernel: audit: type=1327 audit(1761956131.471:1436): proctitle=737368643A20636F7265205B707269765D Nov 1 00:15:31.511261 kernel: audit: type=1105 audit(1761956131.497:1437): pid=5498 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:31.497000 audit[5498]: USER_START pid=5498 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:31.500000 audit[5500]: CRED_ACQ pid=5500 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:31.531778 kernel: audit: type=1103 audit(1761956131.500:1438): pid=5500 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:31.743590 sshd[5498]: pam_unix(sshd:session): session closed for user core Nov 1 00:15:31.744000 audit[5498]: USER_END pid=5498 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:31.750005 systemd-logind[1813]: Session 18 logged out. Waiting for processes to exit. Nov 1 00:15:31.752293 systemd[1]: session-18.scope: Deactivated successfully. Nov 1 00:15:31.754673 systemd-logind[1813]: Removed session 18. Nov 1 00:15:31.756098 systemd[1]: sshd@17-172.31.27.146:22-147.75.109.163:50510.service: Deactivated successfully. Nov 1 00:15:31.744000 audit[5498]: CRED_DISP pid=5498 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:31.768762 kernel: audit: type=1106 audit(1761956131.744:1439): pid=5498 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:31.768915 kernel: audit: type=1104 audit(1761956131.744:1440): pid=5498 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:31.754000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.27.146:22-147.75.109.163:50510 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:31.778076 systemd[1]: Started sshd@18-172.31.27.146:22-147.75.109.163:50522.service. Nov 1 00:15:31.778000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.27.146:22-147.75.109.163:50522 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:31.951000 audit[5510]: USER_ACCT pid=5510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:31.953206 sshd[5510]: Accepted publickey for core from 147.75.109.163 port 50522 ssh2: RSA SHA256:l10clL99NTgBLZDdAUsIsAniCj4DES+0hQanxvSOioM Nov 1 00:15:31.953000 audit[5510]: CRED_ACQ pid=5510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:31.954000 audit[5510]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdceb1130 a2=3 a3=1 items=0 ppid=1 pid=5510 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:31.954000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:15:31.956606 sshd[5510]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:15:31.966273 systemd-logind[1813]: New session 19 of user core. Nov 1 00:15:31.966400 systemd[1]: Started session-19.scope. Nov 1 00:15:31.975000 audit[5510]: USER_START pid=5510 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:31.978000 audit[5512]: CRED_ACQ pid=5512 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:32.455535 sshd[5510]: pam_unix(sshd:session): session closed for user core Nov 1 00:15:32.457000 audit[5510]: USER_END pid=5510 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:32.457000 audit[5510]: CRED_DISP pid=5510 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:32.461412 systemd-logind[1813]: Session 19 logged out. Waiting for processes to exit. Nov 1 00:15:32.462136 systemd[1]: sshd@18-172.31.27.146:22-147.75.109.163:50522.service: Deactivated successfully. Nov 1 00:15:32.461000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.27.146:22-147.75.109.163:50522 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:32.463599 systemd[1]: session-19.scope: Deactivated successfully. Nov 1 00:15:32.465800 systemd-logind[1813]: Removed session 19. Nov 1 00:15:32.483889 systemd[1]: Started sshd@19-172.31.27.146:22-147.75.109.163:50538.service. Nov 1 00:15:32.483000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.27.146:22-147.75.109.163:50538 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:32.674000 audit[5520]: USER_ACCT pid=5520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:32.675994 sshd[5520]: Accepted publickey for core from 147.75.109.163 port 50538 ssh2: RSA SHA256:l10clL99NTgBLZDdAUsIsAniCj4DES+0hQanxvSOioM Nov 1 00:15:32.677000 audit[5520]: CRED_ACQ pid=5520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:32.677000 audit[5520]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff7ddcbb0 a2=3 a3=1 items=0 ppid=1 pid=5520 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:32.677000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:15:32.679007 sshd[5520]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:15:32.688229 systemd-logind[1813]: New session 20 of user core. Nov 1 00:15:32.688728 systemd[1]: Started session-20.scope. Nov 1 00:15:32.698000 audit[5520]: USER_START pid=5520 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:32.701000 audit[5522]: CRED_ACQ pid=5522 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:33.663000 audit[5532]: NETFILTER_CFG table=filter:128 family=2 entries=26 op=nft_register_rule pid=5532 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:15:33.663000 audit[5532]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14176 a0=3 a1=ffffeb5ce220 a2=0 a3=1 items=0 ppid=3030 pid=5532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:33.663000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:15:33.671000 audit[5532]: NETFILTER_CFG table=nat:129 family=2 entries=20 op=nft_register_rule pid=5532 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:15:33.671000 audit[5532]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=ffffeb5ce220 a2=0 a3=1 items=0 ppid=3030 pid=5532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:33.671000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:15:33.686324 sshd[5520]: pam_unix(sshd:session): session closed for user core Nov 1 00:15:33.688000 audit[5520]: USER_END pid=5520 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:33.688000 audit[5520]: CRED_DISP pid=5520 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:33.692000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.27.146:22-147.75.109.163:50538 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:33.693049 systemd-logind[1813]: Session 20 logged out. Waiting for processes to exit. Nov 1 00:15:33.693460 systemd[1]: sshd@19-172.31.27.146:22-147.75.109.163:50538.service: Deactivated successfully. Nov 1 00:15:33.694865 systemd[1]: session-20.scope: Deactivated successfully. Nov 1 00:15:33.697717 systemd-logind[1813]: Removed session 20. Nov 1 00:15:33.716980 systemd[1]: Started sshd@20-172.31.27.146:22-147.75.109.163:50546.service. Nov 1 00:15:33.716000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.27.146:22-147.75.109.163:50546 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:33.762000 audit[5538]: NETFILTER_CFG table=filter:130 family=2 entries=38 op=nft_register_rule pid=5538 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:15:33.762000 audit[5538]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14176 a0=3 a1=ffffed4ec8a0 a2=0 a3=1 items=0 ppid=3030 pid=5538 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:33.762000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:15:33.768000 audit[5538]: NETFILTER_CFG table=nat:131 family=2 entries=20 op=nft_register_rule pid=5538 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:15:33.768000 audit[5538]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=ffffed4ec8a0 a2=0 a3=1 items=0 ppid=3030 pid=5538 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:33.768000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:15:33.899080 sshd[5536]: Accepted publickey for core from 147.75.109.163 port 50546 ssh2: RSA SHA256:l10clL99NTgBLZDdAUsIsAniCj4DES+0hQanxvSOioM Nov 1 00:15:33.897000 audit[5536]: USER_ACCT pid=5536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:33.900000 audit[5536]: CRED_ACQ pid=5536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:33.900000 audit[5536]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe44b3060 a2=3 a3=1 items=0 ppid=1 pid=5536 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:33.900000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:15:33.902815 sshd[5536]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:15:33.910845 systemd-logind[1813]: New session 21 of user core. Nov 1 00:15:33.912284 systemd[1]: Started session-21.scope. Nov 1 00:15:33.921000 audit[5536]: USER_START pid=5536 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:33.925000 audit[5539]: CRED_ACQ pid=5539 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:33.968771 env[1824]: time="2025-11-01T00:15:33.968697245Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Nov 1 00:15:34.205151 env[1824]: time="2025-11-01T00:15:34.204944130Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:15:34.207371 env[1824]: time="2025-11-01T00:15:34.207282425Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Nov 1 00:15:34.207910 kubelet[2905]: E1101 00:15:34.207833 2905 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:15:34.208612 kubelet[2905]: E1101 00:15:34.208557 2905 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:15:34.209341 env[1824]: time="2025-11-01T00:15:34.209268949Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:15:34.209806 kubelet[2905]: E1101 00:15:34.209657 2905 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,loadbalancer,ValueFrom:nil,},EnvVar{Name:DISABLE_KUBE_CONTROLLERS_CONFIG_API,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:CA_CRT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/cert.pem,SubPath:ca-bundle.crt,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-9wlw4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*999,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-kube-controllers-7758fdbbb7-7swhm_calico-system(7c4dfa77-9d3c-4d7b-9cd8-e90f78821efe): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Nov 1 00:15:34.211633 kubelet[2905]: E1101 00:15:34.211460 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-7758fdbbb7-7swhm" podUID="7c4dfa77-9d3c-4d7b-9cd8-e90f78821efe" Nov 1 00:15:34.422587 sshd[5536]: pam_unix(sshd:session): session closed for user core Nov 1 00:15:34.424000 audit[5536]: USER_END pid=5536 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:34.424000 audit[5536]: CRED_DISP pid=5536 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:34.429000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.27.146:22-147.75.109.163:50546 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:34.429450 systemd-logind[1813]: Session 21 logged out. Waiting for processes to exit. Nov 1 00:15:34.429847 systemd[1]: sshd@20-172.31.27.146:22-147.75.109.163:50546.service: Deactivated successfully. Nov 1 00:15:34.431955 systemd[1]: session-21.scope: Deactivated successfully. Nov 1 00:15:34.433803 systemd-logind[1813]: Removed session 21. Nov 1 00:15:34.452000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.27.146:22-147.75.109.163:50550 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:34.453314 systemd[1]: Started sshd@21-172.31.27.146:22-147.75.109.163:50550.service. Nov 1 00:15:34.459414 env[1824]: time="2025-11-01T00:15:34.457804035Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:15:34.460199 env[1824]: time="2025-11-01T00:15:34.460062326Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:15:34.461425 kubelet[2905]: E1101 00:15:34.461359 2905 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:15:34.461592 kubelet[2905]: E1101 00:15:34.461430 2905 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:15:34.461690 kubelet[2905]: E1101 00:15:34.461608 2905 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-jpk9f,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-6d9db7877d-dphkx_calico-apiserver(d04e8d82-e949-4962-a876-1dbd67173f6c): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:15:34.467472 kubelet[2905]: E1101 00:15:34.467388 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6d9db7877d-dphkx" podUID="d04e8d82-e949-4962-a876-1dbd67173f6c" Nov 1 00:15:34.630269 sshd[5546]: Accepted publickey for core from 147.75.109.163 port 50550 ssh2: RSA SHA256:l10clL99NTgBLZDdAUsIsAniCj4DES+0hQanxvSOioM Nov 1 00:15:34.629000 audit[5546]: USER_ACCT pid=5546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:34.630000 audit[5546]: CRED_ACQ pid=5546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:34.631000 audit[5546]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffecd06f70 a2=3 a3=1 items=0 ppid=1 pid=5546 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:34.631000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:15:34.633429 sshd[5546]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:15:34.642561 systemd[1]: Started session-22.scope. Nov 1 00:15:34.643409 systemd-logind[1813]: New session 22 of user core. Nov 1 00:15:34.654000 audit[5546]: USER_START pid=5546 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:34.657000 audit[5548]: CRED_ACQ pid=5548 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:34.900918 sshd[5546]: pam_unix(sshd:session): session closed for user core Nov 1 00:15:34.902000 audit[5546]: USER_END pid=5546 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:34.903000 audit[5546]: CRED_DISP pid=5546 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:34.906701 systemd[1]: session-22.scope: Deactivated successfully. Nov 1 00:15:34.907000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.27.146:22-147.75.109.163:50550 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:34.908229 systemd-logind[1813]: Session 22 logged out. Waiting for processes to exit. Nov 1 00:15:34.908577 systemd[1]: sshd@21-172.31.27.146:22-147.75.109.163:50550.service: Deactivated successfully. Nov 1 00:15:34.912328 systemd-logind[1813]: Removed session 22. Nov 1 00:15:39.930338 systemd[1]: Started sshd@22-172.31.27.146:22-147.75.109.163:50564.service. Nov 1 00:15:39.942556 kernel: kauditd_printk_skb: 57 callbacks suppressed Nov 1 00:15:39.942701 kernel: audit: type=1130 audit(1761956139.931:1482): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.27.146:22-147.75.109.163:50564 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:39.931000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.27.146:22-147.75.109.163:50564 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:39.967158 kubelet[2905]: E1101 00:15:39.965458 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6d9db7877d-g6gc4" podUID="d237b083-16fc-4661-b219-6ab46b70c3f4" Nov 1 00:15:40.103000 audit[5557]: USER_ACCT pid=5557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:40.104313 sshd[5557]: Accepted publickey for core from 147.75.109.163 port 50564 ssh2: RSA SHA256:l10clL99NTgBLZDdAUsIsAniCj4DES+0hQanxvSOioM Nov 1 00:15:40.107680 sshd[5557]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:15:40.106000 audit[5557]: CRED_ACQ pid=5557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:40.124915 kernel: audit: type=1101 audit(1761956140.103:1483): pid=5557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:40.125044 kernel: audit: type=1103 audit(1761956140.106:1484): pid=5557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:40.131878 kernel: audit: type=1006 audit(1761956140.106:1485): pid=5557 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Nov 1 00:15:40.106000 audit[5557]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdbeebdf0 a2=3 a3=1 items=0 ppid=1 pid=5557 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:40.142442 kernel: audit: type=1300 audit(1761956140.106:1485): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdbeebdf0 a2=3 a3=1 items=0 ppid=1 pid=5557 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:40.106000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:15:40.146694 kernel: audit: type=1327 audit(1761956140.106:1485): proctitle=737368643A20636F7265205B707269765D Nov 1 00:15:40.148236 systemd-logind[1813]: New session 23 of user core. Nov 1 00:15:40.150397 systemd[1]: Started session-23.scope. Nov 1 00:15:40.160000 audit[5557]: USER_START pid=5557 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:40.174395 kernel: audit: type=1105 audit(1761956140.160:1486): pid=5557 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:40.174505 kernel: audit: type=1103 audit(1761956140.173:1487): pid=5559 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:40.173000 audit[5559]: CRED_ACQ pid=5559 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:40.400892 sshd[5557]: pam_unix(sshd:session): session closed for user core Nov 1 00:15:40.403000 audit[5557]: USER_END pid=5557 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:40.406528 systemd[1]: session-23.scope: Deactivated successfully. Nov 1 00:15:40.407853 systemd[1]: sshd@22-172.31.27.146:22-147.75.109.163:50564.service: Deactivated successfully. Nov 1 00:15:40.404000 audit[5557]: CRED_DISP pid=5557 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:40.425475 kernel: audit: type=1106 audit(1761956140.403:1488): pid=5557 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:40.425615 kernel: audit: type=1104 audit(1761956140.404:1489): pid=5557 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:40.408000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.27.146:22-147.75.109.163:50564 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:40.425921 systemd-logind[1813]: Session 23 logged out. Waiting for processes to exit. Nov 1 00:15:40.428375 systemd-logind[1813]: Removed session 23. Nov 1 00:15:40.961697 kubelet[2905]: E1101 00:15:40.961632 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-hp4nw" podUID="2672231a-dbf2-4175-a896-3a2597610669" Nov 1 00:15:42.158000 audit[2573]: AVC avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=5907 scontext=system_u:system_r:svirt_lxc_net_t:s0:c567,c697 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:15:42.158000 audit[2573]: AVC avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7160 scontext=system_u:system_r:svirt_lxc_net_t:s0:c567,c697 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:15:42.158000 audit[2573]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4003659b80 a2=fc6 a3=0 items=0 ppid=2411 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c567,c697 key=(null) Nov 1 00:15:42.158000 audit[2573]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4003709cb0 a2=fc6 a3=0 items=0 ppid=2411 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c567,c697 key=(null) Nov 1 00:15:42.158000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:15:42.158000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:15:42.589000 audit[2585]: AVC avc: denied { watch } for pid=2585 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7160 scontext=system_u:system_r:svirt_lxc_net_t:s0:c230,c788 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:15:42.589000 audit[2585]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=78 a1=40111c0210 a2=fc6 a3=0 items=0 ppid=2430 pid=2585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c230,c788 key=(null) Nov 1 00:15:42.589000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313436002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Nov 1 00:15:42.602000 audit[2585]: AVC avc: denied { watch } for pid=2585 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=5907 scontext=system_u:system_r:svirt_lxc_net_t:s0:c230,c788 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:15:42.602000 audit[2585]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=78 a1=400fe22980 a2=fc6 a3=0 items=0 ppid=2430 pid=2585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c230,c788 key=(null) Nov 1 00:15:42.602000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313436002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Nov 1 00:15:42.607000 audit[5590]: NETFILTER_CFG table=filter:132 family=2 entries=26 op=nft_register_rule pid=5590 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:15:42.607000 audit[5590]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffe2cde880 a2=0 a3=1 items=0 ppid=3030 pid=5590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:42.607000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:15:42.618000 audit[5590]: NETFILTER_CFG table=nat:133 family=2 entries=104 op=nft_register_chain pid=5590 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:15:42.618000 audit[5590]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=48684 a0=3 a1=ffffe2cde880 a2=0 a3=1 items=0 ppid=3030 pid=5590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:42.618000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:15:42.619000 audit[2585]: AVC avc: denied { watch } for pid=2585 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=5910 scontext=system_u:system_r:svirt_lxc_net_t:s0:c230,c788 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:15:42.619000 audit[2585]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=78 a1=40111c02a0 a2=fc6 a3=0 items=0 ppid=2430 pid=2585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c230,c788 key=(null) Nov 1 00:15:42.619000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313436002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Nov 1 00:15:42.723000 audit[2585]: AVC avc: denied { watch } for pid=2585 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=5907 scontext=system_u:system_r:svirt_lxc_net_t:s0:c230,c788 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:15:42.723000 audit[2585]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=78 a1=400feaf480 a2=fc6 a3=0 items=0 ppid=2430 pid=2585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c230,c788 key=(null) Nov 1 00:15:42.723000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313436002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Nov 1 00:15:42.724000 audit[2585]: AVC avc: denied { watch } for pid=2585 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7160 scontext=system_u:system_r:svirt_lxc_net_t:s0:c230,c788 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:15:42.724000 audit[2585]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=78 a1=40111c03c0 a2=fc6 a3=0 items=0 ppid=2430 pid=2585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c230,c788 key=(null) Nov 1 00:15:42.724000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313436002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Nov 1 00:15:42.724000 audit[2585]: AVC avc: denied { watch } for pid=2585 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=7162 scontext=system_u:system_r:svirt_lxc_net_t:s0:c230,c788 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:15:42.724000 audit[2585]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=78 a1=40111c0420 a2=fc6 a3=0 items=0 ppid=2430 pid=2585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c230,c788 key=(null) Nov 1 00:15:42.724000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313436002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Nov 1 00:15:43.962574 kubelet[2905]: E1101 00:15:43.962502 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-f46c6dfd5-mv69v" podUID="720f85d9-4a79-48d4-a808-29c9ff35fbd4" Nov 1 00:15:44.971180 kubelet[2905]: E1101 00:15:44.971046 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-89sjk" podUID="7a8f56d2-ec05-443a-b8e9-9b53fb320745" Nov 1 00:15:45.435000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.27.146:22-147.75.109.163:45722 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:45.435546 systemd[1]: Started sshd@23-172.31.27.146:22-147.75.109.163:45722.service. Nov 1 00:15:45.437970 kernel: kauditd_printk_skb: 31 callbacks suppressed Nov 1 00:15:45.438110 kernel: audit: type=1130 audit(1761956145.435:1501): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.27.146:22-147.75.109.163:45722 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:45.646856 sshd[5592]: Accepted publickey for core from 147.75.109.163 port 45722 ssh2: RSA SHA256:l10clL99NTgBLZDdAUsIsAniCj4DES+0hQanxvSOioM Nov 1 00:15:45.646000 audit[5592]: USER_ACCT pid=5592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:45.658000 audit[5592]: CRED_ACQ pid=5592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:45.669045 kernel: audit: type=1101 audit(1761956145.646:1502): pid=5592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:45.669216 kernel: audit: type=1103 audit(1761956145.658:1503): pid=5592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:45.659297 sshd[5592]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:15:45.676641 kernel: audit: type=1006 audit(1761956145.658:1504): pid=5592 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Nov 1 00:15:45.658000 audit[5592]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffee899230 a2=3 a3=1 items=0 ppid=1 pid=5592 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:45.686584 systemd-logind[1813]: New session 24 of user core. Nov 1 00:15:45.689085 systemd[1]: Started session-24.scope. Nov 1 00:15:45.705328 kernel: audit: type=1300 audit(1761956145.658:1504): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffee899230 a2=3 a3=1 items=0 ppid=1 pid=5592 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:45.658000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:15:45.719185 kernel: audit: type=1327 audit(1761956145.658:1504): proctitle=737368643A20636F7265205B707269765D Nov 1 00:15:45.718000 audit[5592]: USER_START pid=5592 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:45.731000 audit[5594]: CRED_ACQ pid=5594 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:45.747946 kernel: audit: type=1105 audit(1761956145.718:1505): pid=5592 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:45.748111 kernel: audit: type=1103 audit(1761956145.731:1506): pid=5594 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:46.012705 sshd[5592]: pam_unix(sshd:session): session closed for user core Nov 1 00:15:46.014000 audit[5592]: USER_END pid=5592 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:46.027515 systemd[1]: sshd@23-172.31.27.146:22-147.75.109.163:45722.service: Deactivated successfully. Nov 1 00:15:46.028859 systemd[1]: session-24.scope: Deactivated successfully. Nov 1 00:15:46.014000 audit[5592]: CRED_DISP pid=5592 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:46.040312 kernel: audit: type=1106 audit(1761956146.014:1507): pid=5592 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:46.040473 kernel: audit: type=1104 audit(1761956146.014:1508): pid=5592 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:46.027000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.27.146:22-147.75.109.163:45722 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:46.040802 systemd-logind[1813]: Session 24 logged out. Waiting for processes to exit. Nov 1 00:15:46.043030 systemd-logind[1813]: Removed session 24. Nov 1 00:15:46.969958 kubelet[2905]: E1101 00:15:46.969900 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-7758fdbbb7-7swhm" podUID="7c4dfa77-9d3c-4d7b-9cd8-e90f78821efe" Nov 1 00:15:48.719000 audit[2573]: AVC avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=5907 scontext=system_u:system_r:svirt_lxc_net_t:s0:c567,c697 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:15:48.719000 audit[2573]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40017bb1a0 a2=fc6 a3=0 items=0 ppid=2411 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c567,c697 key=(null) Nov 1 00:15:48.719000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:15:48.734000 audit[2573]: AVC avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=5907 scontext=system_u:system_r:svirt_lxc_net_t:s0:c567,c697 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:15:48.734000 audit[2573]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40017bb1c0 a2=fc6 a3=0 items=0 ppid=2411 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c567,c697 key=(null) Nov 1 00:15:48.734000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:15:48.735000 audit[2573]: AVC avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=5907 scontext=system_u:system_r:svirt_lxc_net_t:s0:c567,c697 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:15:48.735000 audit[2573]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002482b20 a2=fc6 a3=0 items=0 ppid=2411 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c567,c697 key=(null) Nov 1 00:15:48.735000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:15:48.736000 audit[2573]: AVC avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=5907 scontext=system_u:system_r:svirt_lxc_net_t:s0:c567,c697 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:15:48.736000 audit[2573]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002482d60 a2=fc6 a3=0 items=0 ppid=2411 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c567,c697 key=(null) Nov 1 00:15:48.736000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:15:48.961410 kubelet[2905]: E1101 00:15:48.961359 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6d9db7877d-dphkx" podUID="d04e8d82-e949-4962-a876-1dbd67173f6c" Nov 1 00:15:50.342063 env[1824]: time="2025-11-01T00:15:50.341986270Z" level=info msg="StopPodSandbox for \"7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d\"" Nov 1 00:15:50.521442 env[1824]: 2025-11-01 00:15:50.451 [WARNING][5614] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--146-k8s-goldmane--666569f655--hp4nw-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"2672231a-dbf2-4175-a896-3a2597610669", ResourceVersion:"1458", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 14, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-146", ContainerID:"9d4fd562e98c27c73e2fdbf54395d731aa9d0730493b783ff69990d3db8c0176", Pod:"goldmane-666569f655-hp4nw", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.60.196/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calic7947145fc3", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:15:50.521442 env[1824]: 2025-11-01 00:15:50.451 [INFO][5614] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d" Nov 1 00:15:50.521442 env[1824]: 2025-11-01 00:15:50.451 [INFO][5614] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d" iface="eth0" netns="" Nov 1 00:15:50.521442 env[1824]: 2025-11-01 00:15:50.451 [INFO][5614] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d" Nov 1 00:15:50.521442 env[1824]: 2025-11-01 00:15:50.451 [INFO][5614] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d" Nov 1 00:15:50.521442 env[1824]: 2025-11-01 00:15:50.497 [INFO][5621] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d" HandleID="k8s-pod-network.7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d" Workload="ip--172--31--27--146-k8s-goldmane--666569f655--hp4nw-eth0" Nov 1 00:15:50.521442 env[1824]: 2025-11-01 00:15:50.498 [INFO][5621] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:15:50.521442 env[1824]: 2025-11-01 00:15:50.498 [INFO][5621] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:15:50.521442 env[1824]: 2025-11-01 00:15:50.512 [WARNING][5621] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d" HandleID="k8s-pod-network.7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d" Workload="ip--172--31--27--146-k8s-goldmane--666569f655--hp4nw-eth0" Nov 1 00:15:50.521442 env[1824]: 2025-11-01 00:15:50.513 [INFO][5621] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d" HandleID="k8s-pod-network.7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d" Workload="ip--172--31--27--146-k8s-goldmane--666569f655--hp4nw-eth0" Nov 1 00:15:50.521442 env[1824]: 2025-11-01 00:15:50.515 [INFO][5621] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:15:50.521442 env[1824]: 2025-11-01 00:15:50.518 [INFO][5614] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d" Nov 1 00:15:50.522556 env[1824]: time="2025-11-01T00:15:50.522486722Z" level=info msg="TearDown network for sandbox \"7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d\" successfully" Nov 1 00:15:50.522721 env[1824]: time="2025-11-01T00:15:50.522683933Z" level=info msg="StopPodSandbox for \"7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d\" returns successfully" Nov 1 00:15:50.523671 env[1824]: time="2025-11-01T00:15:50.523617593Z" level=info msg="RemovePodSandbox for \"7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d\"" Nov 1 00:15:50.523819 env[1824]: time="2025-11-01T00:15:50.523680714Z" level=info msg="Forcibly stopping sandbox \"7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d\"" Nov 1 00:15:50.694180 env[1824]: 2025-11-01 00:15:50.612 [WARNING][5635] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--146-k8s-goldmane--666569f655--hp4nw-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"2672231a-dbf2-4175-a896-3a2597610669", ResourceVersion:"1458", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 14, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-146", ContainerID:"9d4fd562e98c27c73e2fdbf54395d731aa9d0730493b783ff69990d3db8c0176", Pod:"goldmane-666569f655-hp4nw", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.60.196/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calic7947145fc3", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:15:50.694180 env[1824]: 2025-11-01 00:15:50.613 [INFO][5635] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d" Nov 1 00:15:50.694180 env[1824]: 2025-11-01 00:15:50.613 [INFO][5635] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d" iface="eth0" netns="" Nov 1 00:15:50.694180 env[1824]: 2025-11-01 00:15:50.613 [INFO][5635] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d" Nov 1 00:15:50.694180 env[1824]: 2025-11-01 00:15:50.613 [INFO][5635] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d" Nov 1 00:15:50.694180 env[1824]: 2025-11-01 00:15:50.670 [INFO][5642] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d" HandleID="k8s-pod-network.7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d" Workload="ip--172--31--27--146-k8s-goldmane--666569f655--hp4nw-eth0" Nov 1 00:15:50.694180 env[1824]: 2025-11-01 00:15:50.670 [INFO][5642] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:15:50.694180 env[1824]: 2025-11-01 00:15:50.670 [INFO][5642] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:15:50.694180 env[1824]: 2025-11-01 00:15:50.683 [WARNING][5642] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d" HandleID="k8s-pod-network.7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d" Workload="ip--172--31--27--146-k8s-goldmane--666569f655--hp4nw-eth0" Nov 1 00:15:50.694180 env[1824]: 2025-11-01 00:15:50.683 [INFO][5642] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d" HandleID="k8s-pod-network.7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d" Workload="ip--172--31--27--146-k8s-goldmane--666569f655--hp4nw-eth0" Nov 1 00:15:50.694180 env[1824]: 2025-11-01 00:15:50.686 [INFO][5642] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:15:50.694180 env[1824]: 2025-11-01 00:15:50.689 [INFO][5635] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d" Nov 1 00:15:50.696092 env[1824]: time="2025-11-01T00:15:50.694098253Z" level=info msg="TearDown network for sandbox \"7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d\" successfully" Nov 1 00:15:50.702645 env[1824]: time="2025-11-01T00:15:50.702555949Z" level=info msg="RemovePodSandbox \"7a8c69d569ee5c131914839d958330d75c68b98087780a5e2bdcc3f69fead25d\" returns successfully" Nov 1 00:15:50.703424 env[1824]: time="2025-11-01T00:15:50.703361339Z" level=info msg="StopPodSandbox for \"5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee\"" Nov 1 00:15:50.904825 env[1824]: 2025-11-01 00:15:50.799 [WARNING][5656] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--146-k8s-calico--apiserver--6d9db7877d--dphkx-eth0", GenerateName:"calico-apiserver-6d9db7877d-", Namespace:"calico-apiserver", SelfLink:"", UID:"d04e8d82-e949-4962-a876-1dbd67173f6c", ResourceVersion:"1508", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 14, 7, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6d9db7877d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-146", ContainerID:"d764a4e00d5917e9f2a7e8f811bd68d13168e0652ac696c38e305d50ae452b92", Pod:"calico-apiserver-6d9db7877d-dphkx", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.60.199/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali5461fa36da9", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:15:50.904825 env[1824]: 2025-11-01 00:15:50.800 [INFO][5656] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee" Nov 1 00:15:50.904825 env[1824]: 2025-11-01 00:15:50.800 [INFO][5656] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee" iface="eth0" netns="" Nov 1 00:15:50.904825 env[1824]: 2025-11-01 00:15:50.800 [INFO][5656] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee" Nov 1 00:15:50.904825 env[1824]: 2025-11-01 00:15:50.800 [INFO][5656] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee" Nov 1 00:15:50.904825 env[1824]: 2025-11-01 00:15:50.867 [INFO][5663] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee" HandleID="k8s-pod-network.5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee" Workload="ip--172--31--27--146-k8s-calico--apiserver--6d9db7877d--dphkx-eth0" Nov 1 00:15:50.904825 env[1824]: 2025-11-01 00:15:50.872 [INFO][5663] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:15:50.904825 env[1824]: 2025-11-01 00:15:50.872 [INFO][5663] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:15:50.904825 env[1824]: 2025-11-01 00:15:50.896 [WARNING][5663] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee" HandleID="k8s-pod-network.5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee" Workload="ip--172--31--27--146-k8s-calico--apiserver--6d9db7877d--dphkx-eth0" Nov 1 00:15:50.904825 env[1824]: 2025-11-01 00:15:50.896 [INFO][5663] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee" HandleID="k8s-pod-network.5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee" Workload="ip--172--31--27--146-k8s-calico--apiserver--6d9db7877d--dphkx-eth0" Nov 1 00:15:50.904825 env[1824]: 2025-11-01 00:15:50.899 [INFO][5663] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:15:50.904825 env[1824]: 2025-11-01 00:15:50.902 [INFO][5656] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee" Nov 1 00:15:50.905991 env[1824]: time="2025-11-01T00:15:50.905936098Z" level=info msg="TearDown network for sandbox \"5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee\" successfully" Nov 1 00:15:50.906184 env[1824]: time="2025-11-01T00:15:50.906147061Z" level=info msg="StopPodSandbox for \"5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee\" returns successfully" Nov 1 00:15:50.906982 env[1824]: time="2025-11-01T00:15:50.906935327Z" level=info msg="RemovePodSandbox for \"5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee\"" Nov 1 00:15:50.907455 env[1824]: time="2025-11-01T00:15:50.907279191Z" level=info msg="Forcibly stopping sandbox \"5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee\"" Nov 1 00:15:51.046749 kernel: kauditd_printk_skb: 13 callbacks suppressed Nov 1 00:15:51.046913 kernel: audit: type=1130 audit(1761956151.043:1514): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.27.146:22-147.75.109.163:39326 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:51.043000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.27.146:22-147.75.109.163:39326 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:51.043453 systemd[1]: Started sshd@24-172.31.27.146:22-147.75.109.163:39326.service. Nov 1 00:15:51.134380 env[1824]: 2025-11-01 00:15:51.025 [WARNING][5677] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--146-k8s-calico--apiserver--6d9db7877d--dphkx-eth0", GenerateName:"calico-apiserver-6d9db7877d-", Namespace:"calico-apiserver", SelfLink:"", UID:"d04e8d82-e949-4962-a876-1dbd67173f6c", ResourceVersion:"1508", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 14, 7, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6d9db7877d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-146", ContainerID:"d764a4e00d5917e9f2a7e8f811bd68d13168e0652ac696c38e305d50ae452b92", Pod:"calico-apiserver-6d9db7877d-dphkx", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.60.199/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali5461fa36da9", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:15:51.134380 env[1824]: 2025-11-01 00:15:51.026 [INFO][5677] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee" Nov 1 00:15:51.134380 env[1824]: 2025-11-01 00:15:51.026 [INFO][5677] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee" iface="eth0" netns="" Nov 1 00:15:51.134380 env[1824]: 2025-11-01 00:15:51.026 [INFO][5677] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee" Nov 1 00:15:51.134380 env[1824]: 2025-11-01 00:15:51.026 [INFO][5677] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee" Nov 1 00:15:51.134380 env[1824]: 2025-11-01 00:15:51.112 [INFO][5683] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee" HandleID="k8s-pod-network.5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee" Workload="ip--172--31--27--146-k8s-calico--apiserver--6d9db7877d--dphkx-eth0" Nov 1 00:15:51.134380 env[1824]: 2025-11-01 00:15:51.113 [INFO][5683] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:15:51.134380 env[1824]: 2025-11-01 00:15:51.113 [INFO][5683] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:15:51.134380 env[1824]: 2025-11-01 00:15:51.126 [WARNING][5683] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee" HandleID="k8s-pod-network.5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee" Workload="ip--172--31--27--146-k8s-calico--apiserver--6d9db7877d--dphkx-eth0" Nov 1 00:15:51.134380 env[1824]: 2025-11-01 00:15:51.126 [INFO][5683] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee" HandleID="k8s-pod-network.5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee" Workload="ip--172--31--27--146-k8s-calico--apiserver--6d9db7877d--dphkx-eth0" Nov 1 00:15:51.134380 env[1824]: 2025-11-01 00:15:51.128 [INFO][5683] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:15:51.134380 env[1824]: 2025-11-01 00:15:51.131 [INFO][5677] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee" Nov 1 00:15:51.140308 env[1824]: time="2025-11-01T00:15:51.140247825Z" level=info msg="TearDown network for sandbox \"5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee\" successfully" Nov 1 00:15:51.149021 env[1824]: time="2025-11-01T00:15:51.148899709Z" level=info msg="RemovePodSandbox \"5cd1193ad7d2aa390f5c7c6f891933148d269ff67b74674613635ecc5a4894ee\" returns successfully" Nov 1 00:15:51.150411 env[1824]: time="2025-11-01T00:15:51.150356684Z" level=info msg="StopPodSandbox for \"7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e\"" Nov 1 00:15:51.257000 audit[5688]: USER_ACCT pid=5688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:51.259853 sshd[5688]: Accepted publickey for core from 147.75.109.163 port 39326 ssh2: RSA SHA256:l10clL99NTgBLZDdAUsIsAniCj4DES+0hQanxvSOioM Nov 1 00:15:51.270360 sshd[5688]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:15:51.268000 audit[5688]: CRED_ACQ pid=5688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:51.282546 kernel: audit: type=1101 audit(1761956151.257:1515): pid=5688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:51.282726 kernel: audit: type=1103 audit(1761956151.268:1516): pid=5688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:51.289805 systemd-logind[1813]: New session 25 of user core. Nov 1 00:15:51.291329 systemd[1]: Started session-25.scope. Nov 1 00:15:51.304653 kernel: audit: type=1006 audit(1761956151.269:1517): pid=5688 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Nov 1 00:15:51.269000 audit[5688]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc03c76f0 a2=3 a3=1 items=0 ppid=1 pid=5688 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:51.329725 kernel: audit: type=1300 audit(1761956151.269:1517): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc03c76f0 a2=3 a3=1 items=0 ppid=1 pid=5688 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:51.269000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:15:51.340706 kernel: audit: type=1327 audit(1761956151.269:1517): proctitle=737368643A20636F7265205B707269765D Nov 1 00:15:51.311000 audit[5688]: USER_START pid=5688 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:51.357710 kernel: audit: type=1105 audit(1761956151.311:1518): pid=5688 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:51.314000 audit[5713]: CRED_ACQ pid=5713 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:51.369139 kernel: audit: type=1103 audit(1761956151.314:1519): pid=5713 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:51.379499 env[1824]: 2025-11-01 00:15:51.253 [WARNING][5701] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--146-k8s-coredns--668d6bf9bc--57x5z-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"81b9363b-5132-4737-acfe-192244e24f20", ResourceVersion:"1114", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 13, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-146", ContainerID:"d907fd889d5b3dbb7842936dd1ecc06de0dbe6ac57db667b2b2d7099c12626c5", Pod:"coredns-668d6bf9bc-57x5z", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.60.200/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali99581bdfeb4", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:15:51.379499 env[1824]: 2025-11-01 00:15:51.254 [INFO][5701] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e" Nov 1 00:15:51.379499 env[1824]: 2025-11-01 00:15:51.254 [INFO][5701] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e" iface="eth0" netns="" Nov 1 00:15:51.379499 env[1824]: 2025-11-01 00:15:51.254 [INFO][5701] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e" Nov 1 00:15:51.379499 env[1824]: 2025-11-01 00:15:51.254 [INFO][5701] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e" Nov 1 00:15:51.379499 env[1824]: 2025-11-01 00:15:51.335 [INFO][5708] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e" HandleID="k8s-pod-network.7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e" Workload="ip--172--31--27--146-k8s-coredns--668d6bf9bc--57x5z-eth0" Nov 1 00:15:51.379499 env[1824]: 2025-11-01 00:15:51.336 [INFO][5708] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:15:51.379499 env[1824]: 2025-11-01 00:15:51.336 [INFO][5708] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:15:51.379499 env[1824]: 2025-11-01 00:15:51.371 [WARNING][5708] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e" HandleID="k8s-pod-network.7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e" Workload="ip--172--31--27--146-k8s-coredns--668d6bf9bc--57x5z-eth0" Nov 1 00:15:51.379499 env[1824]: 2025-11-01 00:15:51.372 [INFO][5708] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e" HandleID="k8s-pod-network.7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e" Workload="ip--172--31--27--146-k8s-coredns--668d6bf9bc--57x5z-eth0" Nov 1 00:15:51.379499 env[1824]: 2025-11-01 00:15:51.374 [INFO][5708] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:15:51.379499 env[1824]: 2025-11-01 00:15:51.377 [INFO][5701] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e" Nov 1 00:15:51.382946 env[1824]: time="2025-11-01T00:15:51.380278779Z" level=info msg="TearDown network for sandbox \"7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e\" successfully" Nov 1 00:15:51.382946 env[1824]: time="2025-11-01T00:15:51.380328148Z" level=info msg="StopPodSandbox for \"7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e\" returns successfully" Nov 1 00:15:51.382946 env[1824]: time="2025-11-01T00:15:51.381045265Z" level=info msg="RemovePodSandbox for \"7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e\"" Nov 1 00:15:51.382946 env[1824]: time="2025-11-01T00:15:51.381094154Z" level=info msg="Forcibly stopping sandbox \"7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e\"" Nov 1 00:15:51.678807 env[1824]: 2025-11-01 00:15:51.529 [WARNING][5724] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--146-k8s-coredns--668d6bf9bc--57x5z-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"81b9363b-5132-4737-acfe-192244e24f20", ResourceVersion:"1114", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 13, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-146", ContainerID:"d907fd889d5b3dbb7842936dd1ecc06de0dbe6ac57db667b2b2d7099c12626c5", Pod:"coredns-668d6bf9bc-57x5z", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.60.200/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali99581bdfeb4", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:15:51.678807 env[1824]: 2025-11-01 00:15:51.529 [INFO][5724] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e" Nov 1 00:15:51.678807 env[1824]: 2025-11-01 00:15:51.529 [INFO][5724] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e" iface="eth0" netns="" Nov 1 00:15:51.678807 env[1824]: 2025-11-01 00:15:51.529 [INFO][5724] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e" Nov 1 00:15:51.678807 env[1824]: 2025-11-01 00:15:51.529 [INFO][5724] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e" Nov 1 00:15:51.678807 env[1824]: 2025-11-01 00:15:51.640 [INFO][5737] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e" HandleID="k8s-pod-network.7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e" Workload="ip--172--31--27--146-k8s-coredns--668d6bf9bc--57x5z-eth0" Nov 1 00:15:51.678807 env[1824]: 2025-11-01 00:15:51.640 [INFO][5737] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:15:51.678807 env[1824]: 2025-11-01 00:15:51.641 [INFO][5737] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:15:51.678807 env[1824]: 2025-11-01 00:15:51.670 [WARNING][5737] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e" HandleID="k8s-pod-network.7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e" Workload="ip--172--31--27--146-k8s-coredns--668d6bf9bc--57x5z-eth0" Nov 1 00:15:51.678807 env[1824]: 2025-11-01 00:15:51.670 [INFO][5737] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e" HandleID="k8s-pod-network.7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e" Workload="ip--172--31--27--146-k8s-coredns--668d6bf9bc--57x5z-eth0" Nov 1 00:15:51.678807 env[1824]: 2025-11-01 00:15:51.673 [INFO][5737] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:15:51.678807 env[1824]: 2025-11-01 00:15:51.676 [INFO][5724] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e" Nov 1 00:15:51.679734 env[1824]: time="2025-11-01T00:15:51.678849202Z" level=info msg="TearDown network for sandbox \"7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e\" successfully" Nov 1 00:15:51.680522 sshd[5688]: pam_unix(sshd:session): session closed for user core Nov 1 00:15:51.683000 audit[5688]: USER_END pid=5688 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:51.698080 systemd-logind[1813]: Session 25 logged out. Waiting for processes to exit. Nov 1 00:15:51.698459 systemd[1]: sshd@24-172.31.27.146:22-147.75.109.163:39326.service: Deactivated successfully. Nov 1 00:15:51.699822 systemd[1]: session-25.scope: Deactivated successfully. Nov 1 00:15:51.703384 systemd-logind[1813]: Removed session 25. Nov 1 00:15:51.683000 audit[5688]: CRED_DISP pid=5688 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:51.714546 kernel: audit: type=1106 audit(1761956151.683:1520): pid=5688 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:51.714697 kernel: audit: type=1104 audit(1761956151.683:1521): pid=5688 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:51.719134 env[1824]: time="2025-11-01T00:15:51.719007697Z" level=info msg="RemovePodSandbox \"7dde1cf26a98cc7d3f29fcc545befc80769a3c650704dbd568f58de92847984e\" returns successfully" Nov 1 00:15:51.720070 env[1824]: time="2025-11-01T00:15:51.719968945Z" level=info msg="StopPodSandbox for \"a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac\"" Nov 1 00:15:51.698000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.27.146:22-147.75.109.163:39326 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:51.961313 kubelet[2905]: E1101 00:15:51.961094 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-hp4nw" podUID="2672231a-dbf2-4175-a896-3a2597610669" Nov 1 00:15:51.969640 env[1824]: 2025-11-01 00:15:51.870 [WARNING][5754] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--146-k8s-calico--kube--controllers--7758fdbbb7--7swhm-eth0", GenerateName:"calico-kube-controllers-7758fdbbb7-", Namespace:"calico-system", SelfLink:"", UID:"7c4dfa77-9d3c-4d7b-9cd8-e90f78821efe", ResourceVersion:"1496", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 14, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7758fdbbb7", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-146", ContainerID:"8caccadeaa0edc28e3abba471cf34819d550e2e177946872c6b58ccc3346f683", Pod:"calico-kube-controllers-7758fdbbb7-7swhm", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.60.198/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali0cb23678c13", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:15:51.969640 env[1824]: 2025-11-01 00:15:51.870 [INFO][5754] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac" Nov 1 00:15:51.969640 env[1824]: 2025-11-01 00:15:51.870 [INFO][5754] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac" iface="eth0" netns="" Nov 1 00:15:51.969640 env[1824]: 2025-11-01 00:15:51.870 [INFO][5754] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac" Nov 1 00:15:51.969640 env[1824]: 2025-11-01 00:15:51.870 [INFO][5754] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac" Nov 1 00:15:51.969640 env[1824]: 2025-11-01 00:15:51.925 [INFO][5761] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac" HandleID="k8s-pod-network.a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac" Workload="ip--172--31--27--146-k8s-calico--kube--controllers--7758fdbbb7--7swhm-eth0" Nov 1 00:15:51.969640 env[1824]: 2025-11-01 00:15:51.926 [INFO][5761] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:15:51.969640 env[1824]: 2025-11-01 00:15:51.926 [INFO][5761] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:15:51.969640 env[1824]: 2025-11-01 00:15:51.954 [WARNING][5761] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac" HandleID="k8s-pod-network.a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac" Workload="ip--172--31--27--146-k8s-calico--kube--controllers--7758fdbbb7--7swhm-eth0" Nov 1 00:15:51.969640 env[1824]: 2025-11-01 00:15:51.954 [INFO][5761] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac" HandleID="k8s-pod-network.a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac" Workload="ip--172--31--27--146-k8s-calico--kube--controllers--7758fdbbb7--7swhm-eth0" Nov 1 00:15:51.969640 env[1824]: 2025-11-01 00:15:51.959 [INFO][5761] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:15:51.969640 env[1824]: 2025-11-01 00:15:51.965 [INFO][5754] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac" Nov 1 00:15:51.970670 env[1824]: time="2025-11-01T00:15:51.969682608Z" level=info msg="TearDown network for sandbox \"a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac\" successfully" Nov 1 00:15:51.970670 env[1824]: time="2025-11-01T00:15:51.969727884Z" level=info msg="StopPodSandbox for \"a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac\" returns successfully" Nov 1 00:15:51.971577 env[1824]: time="2025-11-01T00:15:51.971496011Z" level=info msg="RemovePodSandbox for \"a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac\"" Nov 1 00:15:51.971739 env[1824]: time="2025-11-01T00:15:51.971588137Z" level=info msg="Forcibly stopping sandbox \"a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac\"" Nov 1 00:15:52.147863 env[1824]: 2025-11-01 00:15:52.068 [WARNING][5777] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--146-k8s-calico--kube--controllers--7758fdbbb7--7swhm-eth0", GenerateName:"calico-kube-controllers-7758fdbbb7-", Namespace:"calico-system", SelfLink:"", UID:"7c4dfa77-9d3c-4d7b-9cd8-e90f78821efe", ResourceVersion:"1496", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 14, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7758fdbbb7", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-146", ContainerID:"8caccadeaa0edc28e3abba471cf34819d550e2e177946872c6b58ccc3346f683", Pod:"calico-kube-controllers-7758fdbbb7-7swhm", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.60.198/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali0cb23678c13", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:15:52.147863 env[1824]: 2025-11-01 00:15:52.069 [INFO][5777] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac" Nov 1 00:15:52.147863 env[1824]: 2025-11-01 00:15:52.069 [INFO][5777] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac" iface="eth0" netns="" Nov 1 00:15:52.147863 env[1824]: 2025-11-01 00:15:52.069 [INFO][5777] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac" Nov 1 00:15:52.147863 env[1824]: 2025-11-01 00:15:52.069 [INFO][5777] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac" Nov 1 00:15:52.147863 env[1824]: 2025-11-01 00:15:52.123 [INFO][5784] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac" HandleID="k8s-pod-network.a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac" Workload="ip--172--31--27--146-k8s-calico--kube--controllers--7758fdbbb7--7swhm-eth0" Nov 1 00:15:52.147863 env[1824]: 2025-11-01 00:15:52.124 [INFO][5784] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:15:52.147863 env[1824]: 2025-11-01 00:15:52.124 [INFO][5784] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:15:52.147863 env[1824]: 2025-11-01 00:15:52.139 [WARNING][5784] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac" HandleID="k8s-pod-network.a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac" Workload="ip--172--31--27--146-k8s-calico--kube--controllers--7758fdbbb7--7swhm-eth0" Nov 1 00:15:52.147863 env[1824]: 2025-11-01 00:15:52.139 [INFO][5784] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac" HandleID="k8s-pod-network.a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac" Workload="ip--172--31--27--146-k8s-calico--kube--controllers--7758fdbbb7--7swhm-eth0" Nov 1 00:15:52.147863 env[1824]: 2025-11-01 00:15:52.142 [INFO][5784] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:15:52.147863 env[1824]: 2025-11-01 00:15:52.145 [INFO][5777] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac" Nov 1 00:15:52.148939 env[1824]: time="2025-11-01T00:15:52.148888203Z" level=info msg="TearDown network for sandbox \"a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac\" successfully" Nov 1 00:15:52.156698 env[1824]: time="2025-11-01T00:15:52.156584227Z" level=info msg="RemovePodSandbox \"a9970b4a66ff6fc2229dfd0d599c3ee74c61fa5683bdabf8da593b95c0065bac\" returns successfully" Nov 1 00:15:52.157627 env[1824]: time="2025-11-01T00:15:52.157531928Z" level=info msg="StopPodSandbox for \"6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf\"" Nov 1 00:15:52.305266 env[1824]: 2025-11-01 00:15:52.232 [WARNING][5800] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--146-k8s-coredns--668d6bf9bc--9pzj4-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"4b6be88e-2b28-4afc-b9bf-475fed78cc30", ResourceVersion:"1120", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 13, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-146", ContainerID:"645c9167c93a9195302a61585b604c239467700cf87342dc98e8e4129962cbdb", Pod:"coredns-668d6bf9bc-9pzj4", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.60.197/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali519bebf1aed", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:15:52.305266 env[1824]: 2025-11-01 00:15:52.232 [INFO][5800] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf" Nov 1 00:15:52.305266 env[1824]: 2025-11-01 00:15:52.232 [INFO][5800] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf" iface="eth0" netns="" Nov 1 00:15:52.305266 env[1824]: 2025-11-01 00:15:52.232 [INFO][5800] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf" Nov 1 00:15:52.305266 env[1824]: 2025-11-01 00:15:52.232 [INFO][5800] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf" Nov 1 00:15:52.305266 env[1824]: 2025-11-01 00:15:52.283 [INFO][5807] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf" HandleID="k8s-pod-network.6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf" Workload="ip--172--31--27--146-k8s-coredns--668d6bf9bc--9pzj4-eth0" Nov 1 00:15:52.305266 env[1824]: 2025-11-01 00:15:52.284 [INFO][5807] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:15:52.305266 env[1824]: 2025-11-01 00:15:52.284 [INFO][5807] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:15:52.305266 env[1824]: 2025-11-01 00:15:52.297 [WARNING][5807] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf" HandleID="k8s-pod-network.6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf" Workload="ip--172--31--27--146-k8s-coredns--668d6bf9bc--9pzj4-eth0" Nov 1 00:15:52.305266 env[1824]: 2025-11-01 00:15:52.297 [INFO][5807] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf" HandleID="k8s-pod-network.6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf" Workload="ip--172--31--27--146-k8s-coredns--668d6bf9bc--9pzj4-eth0" Nov 1 00:15:52.305266 env[1824]: 2025-11-01 00:15:52.300 [INFO][5807] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:15:52.305266 env[1824]: 2025-11-01 00:15:52.302 [INFO][5800] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf" Nov 1 00:15:52.306287 env[1824]: time="2025-11-01T00:15:52.306235037Z" level=info msg="TearDown network for sandbox \"6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf\" successfully" Nov 1 00:15:52.306446 env[1824]: time="2025-11-01T00:15:52.306410791Z" level=info msg="StopPodSandbox for \"6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf\" returns successfully" Nov 1 00:15:52.307438 env[1824]: time="2025-11-01T00:15:52.307368595Z" level=info msg="RemovePodSandbox for \"6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf\"" Nov 1 00:15:52.307727 env[1824]: time="2025-11-01T00:15:52.307637939Z" level=info msg="Forcibly stopping sandbox \"6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf\"" Nov 1 00:15:52.433087 env[1824]: 2025-11-01 00:15:52.374 [WARNING][5822] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--27--146-k8s-coredns--668d6bf9bc--9pzj4-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"4b6be88e-2b28-4afc-b9bf-475fed78cc30", ResourceVersion:"1120", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 13, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-27-146", ContainerID:"645c9167c93a9195302a61585b604c239467700cf87342dc98e8e4129962cbdb", Pod:"coredns-668d6bf9bc-9pzj4", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.60.197/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali519bebf1aed", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:15:52.433087 env[1824]: 2025-11-01 00:15:52.375 [INFO][5822] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf" Nov 1 00:15:52.433087 env[1824]: 2025-11-01 00:15:52.375 [INFO][5822] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf" iface="eth0" netns="" Nov 1 00:15:52.433087 env[1824]: 2025-11-01 00:15:52.375 [INFO][5822] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf" Nov 1 00:15:52.433087 env[1824]: 2025-11-01 00:15:52.375 [INFO][5822] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf" Nov 1 00:15:52.433087 env[1824]: 2025-11-01 00:15:52.413 [INFO][5829] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf" HandleID="k8s-pod-network.6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf" Workload="ip--172--31--27--146-k8s-coredns--668d6bf9bc--9pzj4-eth0" Nov 1 00:15:52.433087 env[1824]: 2025-11-01 00:15:52.413 [INFO][5829] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:15:52.433087 env[1824]: 2025-11-01 00:15:52.413 [INFO][5829] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:15:52.433087 env[1824]: 2025-11-01 00:15:52.425 [WARNING][5829] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf" HandleID="k8s-pod-network.6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf" Workload="ip--172--31--27--146-k8s-coredns--668d6bf9bc--9pzj4-eth0" Nov 1 00:15:52.433087 env[1824]: 2025-11-01 00:15:52.425 [INFO][5829] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf" HandleID="k8s-pod-network.6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf" Workload="ip--172--31--27--146-k8s-coredns--668d6bf9bc--9pzj4-eth0" Nov 1 00:15:52.433087 env[1824]: 2025-11-01 00:15:52.428 [INFO][5829] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:15:52.433087 env[1824]: 2025-11-01 00:15:52.430 [INFO][5822] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf" Nov 1 00:15:52.436553 env[1824]: time="2025-11-01T00:15:52.434250476Z" level=info msg="TearDown network for sandbox \"6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf\" successfully" Nov 1 00:15:52.441206 env[1824]: time="2025-11-01T00:15:52.441048744Z" level=info msg="RemovePodSandbox \"6ef460c4aedee5bc741ba8845fdc87a70306bf875dbc78e6efeda97214c244bf\" returns successfully" Nov 1 00:15:53.961182 kubelet[2905]: E1101 00:15:53.961076 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6d9db7877d-g6gc4" podUID="d237b083-16fc-4661-b219-6ab46b70c3f4" Nov 1 00:15:55.963290 kubelet[2905]: E1101 00:15:55.963097 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-89sjk" podUID="7a8f56d2-ec05-443a-b8e9-9b53fb320745" Nov 1 00:15:56.709000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.27.146:22-147.75.109.163:39330 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:56.710543 systemd[1]: Started sshd@25-172.31.27.146:22-147.75.109.163:39330.service. Nov 1 00:15:56.712966 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:15:56.713043 kernel: audit: type=1130 audit(1761956156.709:1523): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.27.146:22-147.75.109.163:39330 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:56.896408 sshd[5838]: Accepted publickey for core from 147.75.109.163 port 39330 ssh2: RSA SHA256:l10clL99NTgBLZDdAUsIsAniCj4DES+0hQanxvSOioM Nov 1 00:15:56.895000 audit[5838]: USER_ACCT pid=5838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:56.908147 sshd[5838]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:15:56.906000 audit[5838]: CRED_ACQ pid=5838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:56.919056 kernel: audit: type=1101 audit(1761956156.895:1524): pid=5838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:56.919217 kernel: audit: type=1103 audit(1761956156.906:1525): pid=5838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:56.927063 kernel: audit: type=1006 audit(1761956156.906:1526): pid=5838 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Nov 1 00:15:56.906000 audit[5838]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffa0886c0 a2=3 a3=1 items=0 ppid=1 pid=5838 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:56.937999 kernel: audit: type=1300 audit(1761956156.906:1526): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffa0886c0 a2=3 a3=1 items=0 ppid=1 pid=5838 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:15:56.906000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:15:56.942060 kernel: audit: type=1327 audit(1761956156.906:1526): proctitle=737368643A20636F7265205B707269765D Nov 1 00:15:56.945458 systemd-logind[1813]: New session 26 of user core. Nov 1 00:15:56.947670 systemd[1]: Started session-26.scope. Nov 1 00:15:56.956000 audit[5838]: USER_START pid=5838 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:56.971000 audit[5840]: CRED_ACQ pid=5840 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:56.986747 kernel: audit: type=1105 audit(1761956156.956:1527): pid=5838 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:56.986884 kernel: audit: type=1103 audit(1761956156.971:1528): pid=5840 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:57.230346 sshd[5838]: pam_unix(sshd:session): session closed for user core Nov 1 00:15:57.232000 audit[5838]: USER_END pid=5838 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:57.236466 systemd[1]: session-26.scope: Deactivated successfully. Nov 1 00:15:57.237648 systemd[1]: sshd@25-172.31.27.146:22-147.75.109.163:39330.service: Deactivated successfully. Nov 1 00:15:57.246963 systemd-logind[1813]: Session 26 logged out. Waiting for processes to exit. Nov 1 00:15:57.248776 systemd-logind[1813]: Removed session 26. Nov 1 00:15:57.233000 audit[5838]: CRED_DISP pid=5838 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:57.260976 kernel: audit: type=1106 audit(1761956157.232:1529): pid=5838 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:57.261162 kernel: audit: type=1104 audit(1761956157.233:1530): pid=5838 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:15:57.236000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.27.146:22-147.75.109.163:39330 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:15:58.962093 env[1824]: time="2025-11-01T00:15:58.962012437Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Nov 1 00:15:59.200627 env[1824]: time="2025-11-01T00:15:59.200548725Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:15:59.202899 env[1824]: time="2025-11-01T00:15:59.202796189Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Nov 1 00:15:59.203239 kubelet[2905]: E1101 00:15:59.203159 2905 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:15:59.203735 kubelet[2905]: E1101 00:15:59.203238 2905 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:15:59.203735 kubelet[2905]: E1101 00:15:59.203397 2905 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.4,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:6a25b9b39c124274af2d764b4547d5b9,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-nm6d2,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-f46c6dfd5-mv69v_calico-system(720f85d9-4a79-48d4-a808-29c9ff35fbd4): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Nov 1 00:15:59.206814 env[1824]: time="2025-11-01T00:15:59.206736959Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Nov 1 00:15:59.469324 env[1824]: time="2025-11-01T00:15:59.469228943Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:15:59.471559 env[1824]: time="2025-11-01T00:15:59.471380045Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Nov 1 00:15:59.471816 kubelet[2905]: E1101 00:15:59.471730 2905 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:15:59.471816 kubelet[2905]: E1101 00:15:59.471802 2905 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:15:59.472079 kubelet[2905]: E1101 00:15:59.471983 2905 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-nm6d2,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-f46c6dfd5-mv69v_calico-system(720f85d9-4a79-48d4-a808-29c9ff35fbd4): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Nov 1 00:15:59.473845 kubelet[2905]: E1101 00:15:59.473720 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-f46c6dfd5-mv69v" podUID="720f85d9-4a79-48d4-a808-29c9ff35fbd4" Nov 1 00:16:00.960748 kubelet[2905]: E1101 00:16:00.960682 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-7758fdbbb7-7swhm" podUID="7c4dfa77-9d3c-4d7b-9cd8-e90f78821efe" Nov 1 00:16:02.265609 systemd[1]: Started sshd@26-172.31.27.146:22-147.75.109.163:60792.service. Nov 1 00:16:02.264000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.27.146:22-147.75.109.163:60792 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:16:02.268807 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:16:02.268887 kernel: audit: type=1130 audit(1761956162.264:1532): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.27.146:22-147.75.109.163:60792 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:16:02.444000 audit[5851]: USER_ACCT pid=5851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:16:02.448468 sshd[5851]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:16:02.449483 sshd[5851]: Accepted publickey for core from 147.75.109.163 port 60792 ssh2: RSA SHA256:l10clL99NTgBLZDdAUsIsAniCj4DES+0hQanxvSOioM Nov 1 00:16:02.446000 audit[5851]: CRED_ACQ pid=5851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:16:02.466391 kernel: audit: type=1101 audit(1761956162.444:1533): pid=5851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:16:02.466537 kernel: audit: type=1103 audit(1761956162.446:1534): pid=5851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:16:02.472926 kernel: audit: type=1006 audit(1761956162.446:1535): pid=5851 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Nov 1 00:16:02.446000 audit[5851]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe5f764e0 a2=3 a3=1 items=0 ppid=1 pid=5851 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:02.484107 kernel: audit: type=1300 audit(1761956162.446:1535): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe5f764e0 a2=3 a3=1 items=0 ppid=1 pid=5851 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:02.485435 kernel: audit: type=1327 audit(1761956162.446:1535): proctitle=737368643A20636F7265205B707269765D Nov 1 00:16:02.446000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:16:02.493015 systemd-logind[1813]: New session 27 of user core. Nov 1 00:16:02.494025 systemd[1]: Started session-27.scope. Nov 1 00:16:02.505000 audit[5851]: USER_START pid=5851 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:16:02.508000 audit[5853]: CRED_ACQ pid=5853 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:16:02.527663 kernel: audit: type=1105 audit(1761956162.505:1536): pid=5851 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:16:02.527806 kernel: audit: type=1103 audit(1761956162.508:1537): pid=5853 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:16:02.792338 sshd[5851]: pam_unix(sshd:session): session closed for user core Nov 1 00:16:02.794000 audit[5851]: USER_END pid=5851 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:16:02.810860 systemd-logind[1813]: Session 27 logged out. Waiting for processes to exit. Nov 1 00:16:02.811293 systemd[1]: sshd@26-172.31.27.146:22-147.75.109.163:60792.service: Deactivated successfully. Nov 1 00:16:02.812590 systemd[1]: session-27.scope: Deactivated successfully. Nov 1 00:16:02.794000 audit[5851]: CRED_DISP pid=5851 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:16:02.813211 kernel: audit: type=1106 audit(1761956162.794:1538): pid=5851 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:16:02.814534 systemd-logind[1813]: Removed session 27. Nov 1 00:16:02.810000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.27.146:22-147.75.109.163:60792 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:16:02.829158 kernel: audit: type=1104 audit(1761956162.794:1539): pid=5851 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:16:02.964964 kubelet[2905]: E1101 00:16:02.964897 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-hp4nw" podUID="2672231a-dbf2-4175-a896-3a2597610669" Nov 1 00:16:03.961611 kubelet[2905]: E1101 00:16:03.961549 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6d9db7877d-dphkx" podUID="d04e8d82-e949-4962-a876-1dbd67173f6c" Nov 1 00:16:06.965967 env[1824]: time="2025-11-01T00:16:06.965897499Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:16:07.214001 env[1824]: time="2025-11-01T00:16:07.213903419Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:16:07.216720 env[1824]: time="2025-11-01T00:16:07.216511441Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:16:07.217259 kubelet[2905]: E1101 00:16:07.217203 2905 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:16:07.217975 kubelet[2905]: E1101 00:16:07.217928 2905 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:16:07.218896 kubelet[2905]: E1101 00:16:07.218812 2905 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-pmp28,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-6d9db7877d-g6gc4_calico-apiserver(d237b083-16fc-4661-b219-6ab46b70c3f4): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:16:07.220469 kubelet[2905]: E1101 00:16:07.220408 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6d9db7877d-g6gc4" podUID="d237b083-16fc-4661-b219-6ab46b70c3f4" Nov 1 00:16:07.838240 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:16:07.838399 kernel: audit: type=1130 audit(1761956167.825:1541): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.27.146:22-147.75.109.163:60802 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:16:07.825000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.27.146:22-147.75.109.163:60802 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:16:07.826771 systemd[1]: Started sshd@27-172.31.27.146:22-147.75.109.163:60802.service. Nov 1 00:16:08.008000 audit[5869]: USER_ACCT pid=5869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:16:08.012520 sshd[5869]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:16:08.020973 sshd[5869]: Accepted publickey for core from 147.75.109.163 port 60802 ssh2: RSA SHA256:l10clL99NTgBLZDdAUsIsAniCj4DES+0hQanxvSOioM Nov 1 00:16:08.008000 audit[5869]: CRED_ACQ pid=5869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:16:08.036990 kernel: audit: type=1101 audit(1761956168.008:1542): pid=5869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:16:08.037152 kernel: audit: type=1103 audit(1761956168.008:1543): pid=5869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:16:08.040783 systemd-logind[1813]: New session 28 of user core. Nov 1 00:16:08.041787 systemd[1]: Started session-28.scope. Nov 1 00:16:08.052733 kernel: audit: type=1006 audit(1761956168.008:1544): pid=5869 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Nov 1 00:16:08.008000 audit[5869]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffedf8cfc0 a2=3 a3=1 items=0 ppid=1 pid=5869 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:08.086727 kernel: audit: type=1300 audit(1761956168.008:1544): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffedf8cfc0 a2=3 a3=1 items=0 ppid=1 pid=5869 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:08.086885 kernel: audit: type=1327 audit(1761956168.008:1544): proctitle=737368643A20636F7265205B707269765D Nov 1 00:16:08.008000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:16:08.104173 kernel: audit: type=1105 audit(1761956168.074:1545): pid=5869 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:16:08.074000 audit[5869]: USER_START pid=5869 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:16:08.077000 audit[5871]: CRED_ACQ pid=5871 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:16:08.116844 kernel: audit: type=1103 audit(1761956168.077:1546): pid=5871 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:16:08.373690 sshd[5869]: pam_unix(sshd:session): session closed for user core Nov 1 00:16:08.375000 audit[5869]: USER_END pid=5869 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:16:08.378700 systemd[1]: session-28.scope: Deactivated successfully. Nov 1 00:16:08.379921 systemd[1]: sshd@27-172.31.27.146:22-147.75.109.163:60802.service: Deactivated successfully. Nov 1 00:16:08.389710 systemd-logind[1813]: Session 28 logged out. Waiting for processes to exit. Nov 1 00:16:08.375000 audit[5869]: CRED_DISP pid=5869 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:16:08.400160 kernel: audit: type=1106 audit(1761956168.375:1547): pid=5869 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:16:08.400328 kernel: audit: type=1104 audit(1761956168.375:1548): pid=5869 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:16:08.375000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.27.146:22-147.75.109.163:60802 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:16:08.401088 systemd-logind[1813]: Removed session 28. Nov 1 00:16:09.961897 env[1824]: time="2025-11-01T00:16:09.961385867Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Nov 1 00:16:10.206846 env[1824]: time="2025-11-01T00:16:10.206758632Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:16:10.209458 env[1824]: time="2025-11-01T00:16:10.209313037Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Nov 1 00:16:10.210058 kubelet[2905]: E1101 00:16:10.209991 2905 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:16:10.210646 kubelet[2905]: E1101 00:16:10.210065 2905 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:16:10.210646 kubelet[2905]: E1101 00:16:10.210277 2905 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.30.4,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-b66ts,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-89sjk_calico-system(7a8f56d2-ec05-443a-b8e9-9b53fb320745): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Nov 1 00:16:10.215078 env[1824]: time="2025-11-01T00:16:10.214166293Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Nov 1 00:16:10.462008 env[1824]: time="2025-11-01T00:16:10.461941557Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:16:10.464486 env[1824]: time="2025-11-01T00:16:10.464406177Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Nov 1 00:16:10.465001 kubelet[2905]: E1101 00:16:10.464930 2905 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:16:10.465300 kubelet[2905]: E1101 00:16:10.465184 2905 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:16:10.465697 kubelet[2905]: E1101 00:16:10.465603 2905 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-b66ts,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-89sjk_calico-system(7a8f56d2-ec05-443a-b8e9-9b53fb320745): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Nov 1 00:16:10.467320 kubelet[2905]: E1101 00:16:10.467186 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-89sjk" podUID="7a8f56d2-ec05-443a-b8e9-9b53fb320745" Nov 1 00:16:10.962541 kubelet[2905]: E1101 00:16:10.962469 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-f46c6dfd5-mv69v" podUID="720f85d9-4a79-48d4-a808-29c9ff35fbd4" Nov 1 00:16:11.365352 systemd[1]: run-containerd-runc-k8s.io-3fe994d432b892068922190cf6b1b03544f272d39b07330d9e465c7b6dbec6cf-runc.L0JcOP.mount: Deactivated successfully. Nov 1 00:16:13.400524 systemd[1]: Started sshd@28-172.31.27.146:22-147.75.109.163:53464.service. Nov 1 00:16:13.409000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.27.146:22-147.75.109.163:53464 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:16:13.413266 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:16:13.413369 kernel: audit: type=1130 audit(1761956173.409:1550): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.27.146:22-147.75.109.163:53464 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:16:13.574000 audit[5904]: USER_ACCT pid=5904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:16:13.575789 sshd[5904]: Accepted publickey for core from 147.75.109.163 port 53464 ssh2: RSA SHA256:l10clL99NTgBLZDdAUsIsAniCj4DES+0hQanxvSOioM Nov 1 00:16:13.578983 sshd[5904]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:16:13.574000 audit[5904]: CRED_ACQ pid=5904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:16:13.600070 kernel: audit: type=1101 audit(1761956173.574:1551): pid=5904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:16:13.600259 kernel: audit: type=1103 audit(1761956173.574:1552): pid=5904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:16:13.601679 systemd-logind[1813]: New session 29 of user core. Nov 1 00:16:13.603098 systemd[1]: Started session-29.scope. Nov 1 00:16:13.623282 kernel: audit: type=1006 audit(1761956173.574:1553): pid=5904 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=29 res=1 Nov 1 00:16:13.623434 kernel: audit: type=1300 audit(1761956173.574:1553): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffce767620 a2=3 a3=1 items=0 ppid=1 pid=5904 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.574000 audit[5904]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffce767620 a2=3 a3=1 items=0 ppid=1 pid=5904 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:13.574000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:16:13.645807 kernel: audit: type=1327 audit(1761956173.574:1553): proctitle=737368643A20636F7265205B707269765D Nov 1 00:16:13.645949 kernel: audit: type=1105 audit(1761956173.615:1554): pid=5904 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:16:13.615000 audit[5904]: USER_START pid=5904 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:16:13.616000 audit[5906]: CRED_ACQ pid=5906 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:16:13.673618 kernel: audit: type=1103 audit(1761956173.616:1555): pid=5906 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:16:13.903486 sshd[5904]: pam_unix(sshd:session): session closed for user core Nov 1 00:16:13.904000 audit[5904]: USER_END pid=5904 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:16:13.908512 systemd[1]: session-29.scope: Deactivated successfully. Nov 1 00:16:13.909770 systemd[1]: sshd@28-172.31.27.146:22-147.75.109.163:53464.service: Deactivated successfully. Nov 1 00:16:13.919106 systemd-logind[1813]: Session 29 logged out. Waiting for processes to exit. Nov 1 00:16:13.920901 systemd-logind[1813]: Removed session 29. Nov 1 00:16:13.904000 audit[5904]: CRED_DISP pid=5904 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:16:13.933439 kernel: audit: type=1106 audit(1761956173.904:1556): pid=5904 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:16:13.933597 kernel: audit: type=1104 audit(1761956173.904:1557): pid=5904 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:16:13.909000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.27.146:22-147.75.109.163:53464 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:16:13.962535 env[1824]: time="2025-11-01T00:16:13.961962153Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Nov 1 00:16:14.218565 env[1824]: time="2025-11-01T00:16:14.218388735Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:16:14.220733 env[1824]: time="2025-11-01T00:16:14.220629120Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Nov 1 00:16:14.221078 kubelet[2905]: E1101 00:16:14.220986 2905 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:16:14.221685 kubelet[2905]: E1101 00:16:14.221088 2905 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:16:14.221685 kubelet[2905]: E1101 00:16:14.221420 2905 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-p6wq4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-666569f655-hp4nw_calico-system(2672231a-dbf2-4175-a896-3a2597610669): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Nov 1 00:16:14.223449 kubelet[2905]: E1101 00:16:14.223367 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-hp4nw" podUID="2672231a-dbf2-4175-a896-3a2597610669" Nov 1 00:16:15.962370 env[1824]: time="2025-11-01T00:16:15.961834819Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Nov 1 00:16:16.218233 env[1824]: time="2025-11-01T00:16:16.218008649Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:16:16.220553 env[1824]: time="2025-11-01T00:16:16.220431690Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Nov 1 00:16:16.220991 kubelet[2905]: E1101 00:16:16.220925 2905 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:16:16.221550 kubelet[2905]: E1101 00:16:16.221018 2905 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:16:16.221550 kubelet[2905]: E1101 00:16:16.221310 2905 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,loadbalancer,ValueFrom:nil,},EnvVar{Name:DISABLE_KUBE_CONTROLLERS_CONFIG_API,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:CA_CRT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/cert.pem,SubPath:ca-bundle.crt,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-9wlw4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*999,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-kube-controllers-7758fdbbb7-7swhm_calico-system(7c4dfa77-9d3c-4d7b-9cd8-e90f78821efe): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Nov 1 00:16:16.223242 kubelet[2905]: E1101 00:16:16.223148 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-7758fdbbb7-7swhm" podUID="7c4dfa77-9d3c-4d7b-9cd8-e90f78821efe" Nov 1 00:16:17.961641 env[1824]: time="2025-11-01T00:16:17.961588050Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:16:18.204196 env[1824]: time="2025-11-01T00:16:18.204112601Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:16:18.206674 env[1824]: time="2025-11-01T00:16:18.206598751Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:16:18.207456 kubelet[2905]: E1101 00:16:18.207076 2905 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:16:18.207456 kubelet[2905]: E1101 00:16:18.207177 2905 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:16:18.207456 kubelet[2905]: E1101 00:16:18.207360 2905 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-jpk9f,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-6d9db7877d-dphkx_calico-apiserver(d04e8d82-e949-4962-a876-1dbd67173f6c): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:16:18.208665 kubelet[2905]: E1101 00:16:18.208598 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6d9db7877d-dphkx" podUID="d04e8d82-e949-4962-a876-1dbd67173f6c" Nov 1 00:16:20.963266 kubelet[2905]: E1101 00:16:20.963204 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-89sjk" podUID="7a8f56d2-ec05-443a-b8e9-9b53fb320745" Nov 1 00:16:21.961703 kubelet[2905]: E1101 00:16:21.961621 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6d9db7877d-g6gc4" podUID="d237b083-16fc-4661-b219-6ab46b70c3f4" Nov 1 00:16:21.963560 kubelet[2905]: E1101 00:16:21.963456 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-f46c6dfd5-mv69v" podUID="720f85d9-4a79-48d4-a808-29c9ff35fbd4" Nov 1 00:16:26.960940 kubelet[2905]: E1101 00:16:26.960872 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-hp4nw" podUID="2672231a-dbf2-4175-a896-3a2597610669" Nov 1 00:16:27.584000 audit: BPF prog-id=114 op=UNLOAD Nov 1 00:16:27.584864 systemd[1]: cri-containerd-5a09e5d3da8e3f03d18d504281c235962b3c7aaeaeda6fee4f0355b84e1b6d15.scope: Deactivated successfully. Nov 1 00:16:27.585465 systemd[1]: cri-containerd-5a09e5d3da8e3f03d18d504281c235962b3c7aaeaeda6fee4f0355b84e1b6d15.scope: Consumed 26.091s CPU time. Nov 1 00:16:27.587623 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:16:27.587724 kernel: audit: type=1334 audit(1761956187.584:1559): prog-id=114 op=UNLOAD Nov 1 00:16:27.591000 audit: BPF prog-id=117 op=UNLOAD Nov 1 00:16:27.597158 kernel: audit: type=1334 audit(1761956187.591:1560): prog-id=117 op=UNLOAD Nov 1 00:16:27.630007 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-5a09e5d3da8e3f03d18d504281c235962b3c7aaeaeda6fee4f0355b84e1b6d15-rootfs.mount: Deactivated successfully. Nov 1 00:16:27.655476 env[1824]: time="2025-11-01T00:16:27.655407549Z" level=info msg="shim disconnected" id=5a09e5d3da8e3f03d18d504281c235962b3c7aaeaeda6fee4f0355b84e1b6d15 Nov 1 00:16:27.656292 env[1824]: time="2025-11-01T00:16:27.655478350Z" level=warning msg="cleaning up after shim disconnected" id=5a09e5d3da8e3f03d18d504281c235962b3c7aaeaeda6fee4f0355b84e1b6d15 namespace=k8s.io Nov 1 00:16:27.656292 env[1824]: time="2025-11-01T00:16:27.655500959Z" level=info msg="cleaning up dead shim" Nov 1 00:16:27.672762 env[1824]: time="2025-11-01T00:16:27.672704934Z" level=warning msg="cleanup warnings time=\"2025-11-01T00:16:27Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5951 runtime=io.containerd.runc.v2\n" Nov 1 00:16:27.829470 kubelet[2905]: I1101 00:16:27.829401 2905 scope.go:117] "RemoveContainer" containerID="5a09e5d3da8e3f03d18d504281c235962b3c7aaeaeda6fee4f0355b84e1b6d15" Nov 1 00:16:27.832932 env[1824]: time="2025-11-01T00:16:27.832839127Z" level=info msg="CreateContainer within sandbox \"1def874f0562b182e405c50131408a89d440a60d9ad22050bf0ffa302d22940f\" for container &ContainerMetadata{Name:tigera-operator,Attempt:1,}" Nov 1 00:16:27.859861 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2441042002.mount: Deactivated successfully. Nov 1 00:16:27.866829 env[1824]: time="2025-11-01T00:16:27.866747425Z" level=info msg="CreateContainer within sandbox \"1def874f0562b182e405c50131408a89d440a60d9ad22050bf0ffa302d22940f\" for &ContainerMetadata{Name:tigera-operator,Attempt:1,} returns container id \"b802063ce6e4fe654877fa58c067d351616eaf6b463a8d75e95830acc304048b\"" Nov 1 00:16:27.867762 env[1824]: time="2025-11-01T00:16:27.867719549Z" level=info msg="StartContainer for \"b802063ce6e4fe654877fa58c067d351616eaf6b463a8d75e95830acc304048b\"" Nov 1 00:16:27.903960 systemd[1]: Started cri-containerd-b802063ce6e4fe654877fa58c067d351616eaf6b463a8d75e95830acc304048b.scope. Nov 1 00:16:27.944000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:27.944000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:27.960930 kernel: audit: type=1400 audit(1761956187.944:1561): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:27.961047 kernel: audit: type=1400 audit(1761956187.944:1562): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:27.944000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:27.944000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:27.970160 kernel: audit: type=1400 audit(1761956187.944:1563): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:27.944000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:27.979248 kernel: audit: type=1400 audit(1761956187.944:1564): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:27.944000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:27.995611 kernel: audit: type=1400 audit(1761956187.944:1565): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:27.995734 kernel: audit: type=1400 audit(1761956187.944:1566): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:27.944000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:28.004805 kernel: audit: type=1400 audit(1761956187.944:1567): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:27.944000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:28.013715 kernel: audit: type=1400 audit(1761956187.944:1568): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:27.944000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:27.952000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:27.952000 audit: BPF prog-id=201 op=LOAD Nov 1 00:16:27.960000 audit[5971]: AVC avc: denied { bpf } for pid=5971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:27.960000 audit[5971]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=3017 pid=5971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:27.960000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238303230363363653665346665363534383737666135386330363764 Nov 1 00:16:27.960000 audit[5971]: AVC avc: denied { perfmon } for pid=5971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:27.960000 audit[5971]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=3017 pid=5971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:27.960000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238303230363363653665346665363534383737666135386330363764 Nov 1 00:16:27.960000 audit[5971]: AVC avc: denied { bpf } for pid=5971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:27.960000 audit[5971]: AVC avc: denied { bpf } for pid=5971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:27.960000 audit[5971]: AVC avc: denied { bpf } for pid=5971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:27.960000 audit[5971]: AVC avc: denied { perfmon } for pid=5971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:27.960000 audit[5971]: AVC avc: denied { perfmon } for pid=5971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:27.960000 audit[5971]: AVC avc: denied { perfmon } for pid=5971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:27.960000 audit[5971]: AVC avc: denied { perfmon } for pid=5971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:27.960000 audit[5971]: AVC avc: denied { perfmon } for pid=5971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:27.960000 audit[5971]: AVC avc: denied { bpf } for pid=5971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:27.960000 audit[5971]: AVC avc: denied { bpf } for pid=5971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:27.960000 audit: BPF prog-id=202 op=LOAD Nov 1 00:16:27.960000 audit[5971]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=3017 pid=5971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:27.960000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238303230363363653665346665363534383737666135386330363764 Nov 1 00:16:27.960000 audit[5971]: AVC avc: denied { bpf } for pid=5971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:27.960000 audit[5971]: AVC avc: denied { bpf } for pid=5971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:27.960000 audit[5971]: AVC avc: denied { perfmon } for pid=5971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:27.960000 audit[5971]: AVC avc: denied { perfmon } for pid=5971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:27.960000 audit[5971]: AVC avc: denied { perfmon } for pid=5971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:27.960000 audit[5971]: AVC avc: denied { perfmon } for pid=5971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:27.960000 audit[5971]: AVC avc: denied { perfmon } for pid=5971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:27.960000 audit[5971]: AVC avc: denied { bpf } for pid=5971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:27.960000 audit[5971]: AVC avc: denied { bpf } for pid=5971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:27.960000 audit: BPF prog-id=203 op=LOAD Nov 1 00:16:27.960000 audit[5971]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=3017 pid=5971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:27.960000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238303230363363653665346665363534383737666135386330363764 Nov 1 00:16:27.960000 audit: BPF prog-id=203 op=UNLOAD Nov 1 00:16:27.960000 audit: BPF prog-id=202 op=UNLOAD Nov 1 00:16:27.960000 audit[5971]: AVC avc: denied { bpf } for pid=5971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:27.960000 audit[5971]: AVC avc: denied { bpf } for pid=5971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:27.960000 audit[5971]: AVC avc: denied { bpf } for pid=5971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:27.960000 audit[5971]: AVC avc: denied { perfmon } for pid=5971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:27.960000 audit[5971]: AVC avc: denied { perfmon } for pid=5971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:27.960000 audit[5971]: AVC avc: denied { perfmon } for pid=5971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:27.960000 audit[5971]: AVC avc: denied { perfmon } for pid=5971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:27.960000 audit[5971]: AVC avc: denied { perfmon } for pid=5971 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:27.960000 audit[5971]: AVC avc: denied { bpf } for pid=5971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:27.960000 audit[5971]: AVC avc: denied { bpf } for pid=5971 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:27.960000 audit: BPF prog-id=204 op=LOAD Nov 1 00:16:27.960000 audit[5971]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=3017 pid=5971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:27.960000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238303230363363653665346665363534383737666135386330363764 Nov 1 00:16:28.037802 env[1824]: time="2025-11-01T00:16:28.037736139Z" level=info msg="StartContainer for \"b802063ce6e4fe654877fa58c067d351616eaf6b463a8d75e95830acc304048b\" returns successfully" Nov 1 00:16:28.073690 systemd[1]: cri-containerd-16f05e0f7163d2682c3fce0129181c6d2bb4303ee7933eed51fc08de25524c66.scope: Deactivated successfully. Nov 1 00:16:28.074343 systemd[1]: cri-containerd-16f05e0f7163d2682c3fce0129181c6d2bb4303ee7933eed51fc08de25524c66.scope: Consumed 5.287s CPU time. Nov 1 00:16:28.076000 audit: BPF prog-id=73 op=UNLOAD Nov 1 00:16:28.076000 audit: BPF prog-id=99 op=UNLOAD Nov 1 00:16:28.155277 env[1824]: time="2025-11-01T00:16:28.155088488Z" level=info msg="shim disconnected" id=16f05e0f7163d2682c3fce0129181c6d2bb4303ee7933eed51fc08de25524c66 Nov 1 00:16:28.159278 env[1824]: time="2025-11-01T00:16:28.156288279Z" level=warning msg="cleaning up after shim disconnected" id=16f05e0f7163d2682c3fce0129181c6d2bb4303ee7933eed51fc08de25524c66 namespace=k8s.io Nov 1 00:16:28.159278 env[1824]: time="2025-11-01T00:16:28.156351820Z" level=info msg="cleaning up dead shim" Nov 1 00:16:28.184066 env[1824]: time="2025-11-01T00:16:28.183991748Z" level=warning msg="cleanup warnings time=\"2025-11-01T00:16:28Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6011 runtime=io.containerd.runc.v2\n" Nov 1 00:16:28.629825 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-16f05e0f7163d2682c3fce0129181c6d2bb4303ee7933eed51fc08de25524c66-rootfs.mount: Deactivated successfully. Nov 1 00:16:28.834646 kubelet[2905]: I1101 00:16:28.834610 2905 scope.go:117] "RemoveContainer" containerID="16f05e0f7163d2682c3fce0129181c6d2bb4303ee7933eed51fc08de25524c66" Nov 1 00:16:28.839195 env[1824]: time="2025-11-01T00:16:28.839099948Z" level=info msg="CreateContainer within sandbox \"72a22307a6f172eccc21a231154a5e47414d62586757d4d897afb0f53a8916ce\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Nov 1 00:16:28.870069 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2805456574.mount: Deactivated successfully. Nov 1 00:16:28.878142 env[1824]: time="2025-11-01T00:16:28.878030110Z" level=info msg="CreateContainer within sandbox \"72a22307a6f172eccc21a231154a5e47414d62586757d4d897afb0f53a8916ce\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"8ac4a0d548d8b14785e119cc733b45f2b83a5a80a98a39484721beccf0e3b8c7\"" Nov 1 00:16:28.879171 env[1824]: time="2025-11-01T00:16:28.879087231Z" level=info msg="StartContainer for \"8ac4a0d548d8b14785e119cc733b45f2b83a5a80a98a39484721beccf0e3b8c7\"" Nov 1 00:16:28.930472 systemd[1]: Started cri-containerd-8ac4a0d548d8b14785e119cc733b45f2b83a5a80a98a39484721beccf0e3b8c7.scope. Nov 1 00:16:28.971000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:28.971000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:28.971000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:28.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:28.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:28.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:28.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:28.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:28.971000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:28.971000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:28.971000 audit: BPF prog-id=205 op=LOAD Nov 1 00:16:28.974421 kubelet[2905]: E1101 00:16:28.972464 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-7758fdbbb7-7swhm" podUID="7c4dfa77-9d3c-4d7b-9cd8-e90f78821efe" Nov 1 00:16:28.973000 audit[6033]: AVC avc: denied { bpf } for pid=6033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:28.973000 audit[6033]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=2411 pid=6033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:28.973000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861633461306435343864386231343738356531313963633733336234 Nov 1 00:16:28.974000 audit[6033]: AVC avc: denied { perfmon } for pid=6033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:28.974000 audit[6033]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=2411 pid=6033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:28.974000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861633461306435343864386231343738356531313963633733336234 Nov 1 00:16:28.974000 audit[6033]: AVC avc: denied { bpf } for pid=6033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:28.974000 audit[6033]: AVC avc: denied { bpf } for pid=6033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:28.974000 audit[6033]: AVC avc: denied { bpf } for pid=6033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:28.974000 audit[6033]: AVC avc: denied { perfmon } for pid=6033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:28.974000 audit[6033]: AVC avc: denied { perfmon } for pid=6033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:28.974000 audit[6033]: AVC avc: denied { perfmon } for pid=6033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:28.974000 audit[6033]: AVC avc: denied { perfmon } for pid=6033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:28.974000 audit[6033]: AVC avc: denied { perfmon } for pid=6033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:28.974000 audit[6033]: AVC avc: denied { bpf } for pid=6033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:28.974000 audit[6033]: AVC avc: denied { bpf } for pid=6033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:28.974000 audit: BPF prog-id=206 op=LOAD Nov 1 00:16:28.974000 audit[6033]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=2411 pid=6033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:28.974000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861633461306435343864386231343738356531313963633733336234 Nov 1 00:16:28.976000 audit[6033]: AVC avc: denied { bpf } for pid=6033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:28.976000 audit[6033]: AVC avc: denied { bpf } for pid=6033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:28.976000 audit[6033]: AVC avc: denied { perfmon } for pid=6033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:28.976000 audit[6033]: AVC avc: denied { perfmon } for pid=6033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:28.976000 audit[6033]: AVC avc: denied { perfmon } for pid=6033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:28.976000 audit[6033]: AVC avc: denied { perfmon } for pid=6033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:28.976000 audit[6033]: AVC avc: denied { perfmon } for pid=6033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:28.976000 audit[6033]: AVC avc: denied { bpf } for pid=6033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:28.976000 audit[6033]: AVC avc: denied { bpf } for pid=6033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:28.976000 audit: BPF prog-id=207 op=LOAD Nov 1 00:16:28.976000 audit[6033]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=2411 pid=6033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:28.976000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861633461306435343864386231343738356531313963633733336234 Nov 1 00:16:28.977000 audit: BPF prog-id=207 op=UNLOAD Nov 1 00:16:28.977000 audit: BPF prog-id=206 op=UNLOAD Nov 1 00:16:28.977000 audit[6033]: AVC avc: denied { bpf } for pid=6033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:28.977000 audit[6033]: AVC avc: denied { bpf } for pid=6033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:28.977000 audit[6033]: AVC avc: denied { bpf } for pid=6033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:28.977000 audit[6033]: AVC avc: denied { perfmon } for pid=6033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:28.977000 audit[6033]: AVC avc: denied { perfmon } for pid=6033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:28.977000 audit[6033]: AVC avc: denied { perfmon } for pid=6033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:28.977000 audit[6033]: AVC avc: denied { perfmon } for pid=6033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:28.977000 audit[6033]: AVC avc: denied { perfmon } for pid=6033 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:28.977000 audit[6033]: AVC avc: denied { bpf } for pid=6033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:28.977000 audit[6033]: AVC avc: denied { bpf } for pid=6033 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:28.977000 audit: BPF prog-id=208 op=LOAD Nov 1 00:16:28.977000 audit[6033]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=2411 pid=6033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:28.977000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861633461306435343864386231343738356531313963633733336234 Nov 1 00:16:29.029169 env[1824]: time="2025-11-01T00:16:29.028328884Z" level=info msg="StartContainer for \"8ac4a0d548d8b14785e119cc733b45f2b83a5a80a98a39484721beccf0e3b8c7\" returns successfully" Nov 1 00:16:30.173395 kubelet[2905]: E1101 00:16:30.173332 2905 controller.go:195] "Failed to update lease" err="Put \"https://172.31.27.146:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-27-146?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Nov 1 00:16:31.916000 audit[6043]: AVC avc: denied { watch } for pid=6043 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7160 scontext=system_u:system_r:svirt_lxc_net_t:s0:c567,c697 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:16:31.916000 audit[6043]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=40002c5ce0 a2=fc6 a3=0 items=0 ppid=2411 pid=6043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c567,c697 key=(null) Nov 1 00:16:31.916000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:16:31.917000 audit[6043]: AVC avc: denied { watch } for pid=6043 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=5907 scontext=system_u:system_r:svirt_lxc_net_t:s0:c567,c697 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:16:31.917000 audit[6043]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=400040d900 a2=fc6 a3=0 items=0 ppid=2411 pid=6043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c567,c697 key=(null) Nov 1 00:16:31.917000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:16:31.960493 kubelet[2905]: E1101 00:16:31.960433 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6d9db7877d-dphkx" podUID="d04e8d82-e949-4962-a876-1dbd67173f6c" Nov 1 00:16:33.961038 kubelet[2905]: E1101 00:16:33.960975 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6d9db7877d-g6gc4" podUID="d237b083-16fc-4661-b219-6ab46b70c3f4" Nov 1 00:16:33.962716 kubelet[2905]: E1101 00:16:33.962650 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-89sjk" podUID="7a8f56d2-ec05-443a-b8e9-9b53fb320745" Nov 1 00:16:34.015503 systemd[1]: cri-containerd-418b8d1055771f87746954d8bae649e4e9fd1fb6283202b98340ceb5eef867bb.scope: Deactivated successfully. Nov 1 00:16:34.016051 systemd[1]: cri-containerd-418b8d1055771f87746954d8bae649e4e9fd1fb6283202b98340ceb5eef867bb.scope: Consumed 5.895s CPU time. Nov 1 00:16:34.019000 audit: BPF prog-id=81 op=UNLOAD Nov 1 00:16:34.022803 kernel: kauditd_printk_skb: 114 callbacks suppressed Nov 1 00:16:34.022965 kernel: audit: type=1334 audit(1761956194.019:1601): prog-id=81 op=UNLOAD Nov 1 00:16:34.019000 audit: BPF prog-id=100 op=UNLOAD Nov 1 00:16:34.028595 kernel: audit: type=1334 audit(1761956194.019:1602): prog-id=100 op=UNLOAD Nov 1 00:16:34.057919 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-418b8d1055771f87746954d8bae649e4e9fd1fb6283202b98340ceb5eef867bb-rootfs.mount: Deactivated successfully. Nov 1 00:16:34.088313 env[1824]: time="2025-11-01T00:16:34.088251847Z" level=info msg="shim disconnected" id=418b8d1055771f87746954d8bae649e4e9fd1fb6283202b98340ceb5eef867bb Nov 1 00:16:34.089075 env[1824]: time="2025-11-01T00:16:34.089035807Z" level=warning msg="cleaning up after shim disconnected" id=418b8d1055771f87746954d8bae649e4e9fd1fb6283202b98340ceb5eef867bb namespace=k8s.io Nov 1 00:16:34.089232 env[1824]: time="2025-11-01T00:16:34.089204314Z" level=info msg="cleaning up dead shim" Nov 1 00:16:34.104654 env[1824]: time="2025-11-01T00:16:34.104574844Z" level=warning msg="cleanup warnings time=\"2025-11-01T00:16:34Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6073 runtime=io.containerd.runc.v2\n" Nov 1 00:16:34.863864 kubelet[2905]: I1101 00:16:34.863815 2905 scope.go:117] "RemoveContainer" containerID="418b8d1055771f87746954d8bae649e4e9fd1fb6283202b98340ceb5eef867bb" Nov 1 00:16:34.866730 env[1824]: time="2025-11-01T00:16:34.866666941Z" level=info msg="CreateContainer within sandbox \"90b4b55aa35a7814f1d4fd666e8d1f16df659bb47f39a6f691e74fec4f8f8d63\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" Nov 1 00:16:34.893954 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount684976135.mount: Deactivated successfully. Nov 1 00:16:34.903848 env[1824]: time="2025-11-01T00:16:34.903784376Z" level=info msg="CreateContainer within sandbox \"90b4b55aa35a7814f1d4fd666e8d1f16df659bb47f39a6f691e74fec4f8f8d63\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"b1738aa718aeb0bd4fc0f679f3eeb02b7ca8a6d4eb069b45fbd1f0cb69b3c89f\"" Nov 1 00:16:34.904797 env[1824]: time="2025-11-01T00:16:34.904738247Z" level=info msg="StartContainer for \"b1738aa718aeb0bd4fc0f679f3eeb02b7ca8a6d4eb069b45fbd1f0cb69b3c89f\"" Nov 1 00:16:34.940547 systemd[1]: Started cri-containerd-b1738aa718aeb0bd4fc0f679f3eeb02b7ca8a6d4eb069b45fbd1f0cb69b3c89f.scope. Nov 1 00:16:34.985000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:34.985000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:35.001671 kernel: audit: type=1400 audit(1761956194.985:1603): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:35.001826 kernel: audit: type=1400 audit(1761956194.985:1604): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:35.009846 kernel: audit: type=1400 audit(1761956194.985:1605): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:34.985000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:34.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:35.018405 kernel: audit: type=1400 audit(1761956194.985:1606): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:34.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:35.027259 kernel: audit: type=1400 audit(1761956194.985:1607): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:34.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:34.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:35.043829 kernel: audit: type=1400 audit(1761956194.985:1608): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:35.043942 kernel: audit: type=1400 audit(1761956194.985:1609): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:34.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:35.052180 kernel: audit: type=1400 audit(1761956194.985:1610): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:34.985000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:34.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:34.993000 audit: BPF prog-id=209 op=LOAD Nov 1 00:16:35.001000 audit[6094]: AVC avc: denied { bpf } for pid=6094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:35.001000 audit[6094]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2456 pid=6094 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:35.001000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231373338616137313861656230626434666330663637396633656562 Nov 1 00:16:35.001000 audit[6094]: AVC avc: denied { perfmon } for pid=6094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:35.001000 audit[6094]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2456 pid=6094 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:35.001000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231373338616137313861656230626434666330663637396633656562 Nov 1 00:16:35.001000 audit[6094]: AVC avc: denied { bpf } for pid=6094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:35.001000 audit[6094]: AVC avc: denied { bpf } for pid=6094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:35.001000 audit[6094]: AVC avc: denied { bpf } for pid=6094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:35.001000 audit[6094]: AVC avc: denied { perfmon } for pid=6094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:35.001000 audit[6094]: AVC avc: denied { perfmon } for pid=6094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:35.001000 audit[6094]: AVC avc: denied { perfmon } for pid=6094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:35.001000 audit[6094]: AVC avc: denied { perfmon } for pid=6094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:35.001000 audit[6094]: AVC avc: denied { perfmon } for pid=6094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:35.001000 audit[6094]: AVC avc: denied { bpf } for pid=6094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:35.001000 audit[6094]: AVC avc: denied { bpf } for pid=6094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:35.001000 audit: BPF prog-id=210 op=LOAD Nov 1 00:16:35.001000 audit[6094]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2456 pid=6094 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:35.001000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231373338616137313861656230626434666330663637396633656562 Nov 1 00:16:35.008000 audit[6094]: AVC avc: denied { bpf } for pid=6094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:35.008000 audit[6094]: AVC avc: denied { bpf } for pid=6094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:35.008000 audit[6094]: AVC avc: denied { perfmon } for pid=6094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:35.008000 audit[6094]: AVC avc: denied { perfmon } for pid=6094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:35.008000 audit[6094]: AVC avc: denied { perfmon } for pid=6094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:35.008000 audit[6094]: AVC avc: denied { perfmon } for pid=6094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:35.008000 audit[6094]: AVC avc: denied { perfmon } for pid=6094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:35.008000 audit[6094]: AVC avc: denied { bpf } for pid=6094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:35.008000 audit[6094]: AVC avc: denied { bpf } for pid=6094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:35.008000 audit: BPF prog-id=211 op=LOAD Nov 1 00:16:35.008000 audit[6094]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2456 pid=6094 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:35.008000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231373338616137313861656230626434666330663637396633656562 Nov 1 00:16:35.009000 audit: BPF prog-id=211 op=UNLOAD Nov 1 00:16:35.009000 audit: BPF prog-id=210 op=UNLOAD Nov 1 00:16:35.009000 audit[6094]: AVC avc: denied { bpf } for pid=6094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:35.009000 audit[6094]: AVC avc: denied { bpf } for pid=6094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:35.009000 audit[6094]: AVC avc: denied { bpf } for pid=6094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:35.009000 audit[6094]: AVC avc: denied { perfmon } for pid=6094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:35.009000 audit[6094]: AVC avc: denied { perfmon } for pid=6094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:35.009000 audit[6094]: AVC avc: denied { perfmon } for pid=6094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:35.009000 audit[6094]: AVC avc: denied { perfmon } for pid=6094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:35.009000 audit[6094]: AVC avc: denied { perfmon } for pid=6094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:35.009000 audit[6094]: AVC avc: denied { bpf } for pid=6094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:35.009000 audit[6094]: AVC avc: denied { bpf } for pid=6094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:16:35.009000 audit: BPF prog-id=212 op=LOAD Nov 1 00:16:35.009000 audit[6094]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2456 pid=6094 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:16:35.009000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231373338616137313861656230626434666330663637396633656562 Nov 1 00:16:35.085874 env[1824]: time="2025-11-01T00:16:35.085801457Z" level=info msg="StartContainer for \"b1738aa718aeb0bd4fc0f679f3eeb02b7ca8a6d4eb069b45fbd1f0cb69b3c89f\" returns successfully" Nov 1 00:16:36.965456 kubelet[2905]: E1101 00:16:36.965384 2905 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-f46c6dfd5-mv69v" podUID="720f85d9-4a79-48d4-a808-29c9ff35fbd4"