Nov 1 00:10:51.010218 kernel: Booting Linux on physical CPU 0x0000000000 [0x410fd083] Nov 1 00:10:51.010256 kernel: Linux version 5.15.192-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Fri Oct 31 23:12:38 -00 2025 Nov 1 00:10:51.010279 kernel: efi: EFI v2.70 by EDK II Nov 1 00:10:51.010294 kernel: efi: SMBIOS=0x7bed0000 SMBIOS 3.0=0x7beb0000 ACPI=0x786e0000 ACPI 2.0=0x786e0014 MEMATTR=0x7affea98 MEMRESERVE=0x716fcf98 Nov 1 00:10:51.010308 kernel: ACPI: Early table checksum verification disabled Nov 1 00:10:51.010321 kernel: ACPI: RSDP 0x00000000786E0014 000024 (v02 AMAZON) Nov 1 00:10:51.010337 kernel: ACPI: XSDT 0x00000000786D00E8 000064 (v01 AMAZON AMZNFACP 00000001 01000013) Nov 1 00:10:51.010352 kernel: ACPI: FACP 0x00000000786B0000 000114 (v06 AMAZON AMZNFACP 00000001 AMZN 00000001) Nov 1 00:10:51.010365 kernel: ACPI: DSDT 0x0000000078640000 00159D (v02 AMAZON AMZNDSDT 00000001 INTL 20160527) Nov 1 00:10:51.010379 kernel: ACPI: APIC 0x00000000786C0000 000108 (v04 AMAZON AMZNAPIC 00000001 AMZN 00000001) Nov 1 00:10:51.010397 kernel: ACPI: SPCR 0x00000000786A0000 000050 (v02 AMAZON AMZNSPCR 00000001 AMZN 00000001) Nov 1 00:10:51.010410 kernel: ACPI: GTDT 0x0000000078690000 000060 (v02 AMAZON AMZNGTDT 00000001 AMZN 00000001) Nov 1 00:10:51.010424 kernel: ACPI: MCFG 0x0000000078680000 00003C (v02 AMAZON AMZNMCFG 00000001 AMZN 00000001) Nov 1 00:10:51.010438 kernel: ACPI: SLIT 0x0000000078670000 00002D (v01 AMAZON AMZNSLIT 00000001 AMZN 00000001) Nov 1 00:10:51.010455 kernel: ACPI: IORT 0x0000000078660000 000078 (v01 AMAZON AMZNIORT 00000001 AMZN 00000001) Nov 1 00:10:51.010474 kernel: ACPI: PPTT 0x0000000078650000 0000EC (v01 AMAZON AMZNPPTT 00000001 AMZN 00000001) Nov 1 00:10:51.010488 kernel: ACPI: SPCR: console: uart,mmio,0x90a0000,115200 Nov 1 00:10:51.010502 kernel: earlycon: uart0 at MMIO 0x00000000090a0000 (options '115200') Nov 1 00:10:51.010517 kernel: printk: bootconsole [uart0] enabled Nov 1 00:10:51.010531 kernel: NUMA: Failed to initialise from firmware Nov 1 00:10:51.010546 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000004b5ffffff] Nov 1 00:10:51.010560 kernel: NUMA: NODE_DATA [mem 0x4b5843900-0x4b5848fff] Nov 1 00:10:51.010574 kernel: Zone ranges: Nov 1 00:10:51.010589 kernel: DMA [mem 0x0000000040000000-0x00000000ffffffff] Nov 1 00:10:51.010603 kernel: DMA32 empty Nov 1 00:10:51.010617 kernel: Normal [mem 0x0000000100000000-0x00000004b5ffffff] Nov 1 00:10:51.010635 kernel: Movable zone start for each node Nov 1 00:10:51.010650 kernel: Early memory node ranges Nov 1 00:10:51.010664 kernel: node 0: [mem 0x0000000040000000-0x000000007862ffff] Nov 1 00:10:51.010678 kernel: node 0: [mem 0x0000000078630000-0x000000007863ffff] Nov 1 00:10:51.010693 kernel: node 0: [mem 0x0000000078640000-0x00000000786effff] Nov 1 00:10:51.010707 kernel: node 0: [mem 0x00000000786f0000-0x000000007872ffff] Nov 1 00:10:51.010721 kernel: node 0: [mem 0x0000000078730000-0x000000007bbfffff] Nov 1 00:10:51.010735 kernel: node 0: [mem 0x000000007bc00000-0x000000007bfdffff] Nov 1 00:10:51.010750 kernel: node 0: [mem 0x000000007bfe0000-0x000000007fffffff] Nov 1 00:10:51.010764 kernel: node 0: [mem 0x0000000400000000-0x00000004b5ffffff] Nov 1 00:10:51.010778 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000004b5ffffff] Nov 1 00:10:51.010792 kernel: On node 0, zone Normal: 8192 pages in unavailable ranges Nov 1 00:10:51.010811 kernel: psci: probing for conduit method from ACPI. Nov 1 00:10:51.010826 kernel: psci: PSCIv1.0 detected in firmware. Nov 1 00:10:51.010846 kernel: psci: Using standard PSCI v0.2 function IDs Nov 1 00:10:51.010862 kernel: psci: Trusted OS migration not required Nov 1 00:10:51.010877 kernel: psci: SMC Calling Convention v1.1 Nov 1 00:10:51.010896 kernel: smccc: KVM: hypervisor services detected (0x00000000 0x00000000 0x00000000 0x00000001) Nov 1 00:10:51.010911 kernel: ACPI: SRAT not present Nov 1 00:10:51.010927 kernel: percpu: Embedded 30 pages/cpu s83032 r8192 d31656 u122880 Nov 1 00:10:51.010942 kernel: pcpu-alloc: s83032 r8192 d31656 u122880 alloc=30*4096 Nov 1 00:10:51.010957 kernel: pcpu-alloc: [0] 0 [0] 1 Nov 1 00:10:51.010993 kernel: Detected PIPT I-cache on CPU0 Nov 1 00:10:51.011011 kernel: CPU features: detected: GIC system register CPU interface Nov 1 00:10:51.011027 kernel: CPU features: detected: Spectre-v2 Nov 1 00:10:51.011042 kernel: CPU features: detected: Spectre-v3a Nov 1 00:10:51.011057 kernel: CPU features: detected: Spectre-BHB Nov 1 00:10:51.011073 kernel: CPU features: kernel page table isolation forced ON by KASLR Nov 1 00:10:51.011093 kernel: CPU features: detected: Kernel page table isolation (KPTI) Nov 1 00:10:51.011109 kernel: CPU features: detected: ARM erratum 1742098 Nov 1 00:10:51.011124 kernel: CPU features: detected: ARM errata 1165522, 1319367, or 1530923 Nov 1 00:10:51.011139 kernel: Built 1 zonelists, mobility grouping on. Total pages: 991872 Nov 1 00:10:51.011154 kernel: Policy zone: Normal Nov 1 00:10:51.011172 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlycon flatcar.first_boot=detected acpi=force flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=284392058f112e827cd7c521dcce1be27e1367d0030df494642d12e41e342e29 Nov 1 00:10:51.011188 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Nov 1 00:10:51.011204 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Nov 1 00:10:51.011219 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Nov 1 00:10:51.011234 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Nov 1 00:10:51.011253 kernel: software IO TLB: mapped [mem 0x000000007c000000-0x0000000080000000] (64MB) Nov 1 00:10:51.011269 kernel: Memory: 3824460K/4030464K available (9792K kernel code, 2094K rwdata, 7592K rodata, 36416K init, 777K bss, 206004K reserved, 0K cma-reserved) Nov 1 00:10:51.011285 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Nov 1 00:10:51.011300 kernel: trace event string verifier disabled Nov 1 00:10:51.011315 kernel: rcu: Preemptible hierarchical RCU implementation. Nov 1 00:10:51.011331 kernel: rcu: RCU event tracing is enabled. Nov 1 00:10:51.011347 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Nov 1 00:10:51.011362 kernel: Trampoline variant of Tasks RCU enabled. Nov 1 00:10:51.011378 kernel: Tracing variant of Tasks RCU enabled. Nov 1 00:10:51.011393 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Nov 1 00:10:51.011408 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Nov 1 00:10:51.011423 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Nov 1 00:10:51.011442 kernel: GICv3: 96 SPIs implemented Nov 1 00:10:51.011457 kernel: GICv3: 0 Extended SPIs implemented Nov 1 00:10:51.011472 kernel: GICv3: Distributor has no Range Selector support Nov 1 00:10:51.011486 kernel: Root IRQ handler: gic_handle_irq Nov 1 00:10:51.011501 kernel: GICv3: 16 PPIs implemented Nov 1 00:10:51.011516 kernel: GICv3: CPU0: found redistributor 0 region 0:0x0000000010200000 Nov 1 00:10:51.011531 kernel: ACPI: SRAT not present Nov 1 00:10:51.011546 kernel: ITS [mem 0x10080000-0x1009ffff] Nov 1 00:10:51.011561 kernel: ITS@0x0000000010080000: allocated 8192 Devices @400090000 (indirect, esz 8, psz 64K, shr 1) Nov 1 00:10:51.011576 kernel: ITS@0x0000000010080000: allocated 8192 Interrupt Collections @4000a0000 (flat, esz 8, psz 64K, shr 1) Nov 1 00:10:51.011591 kernel: GICv3: using LPI property table @0x00000004000b0000 Nov 1 00:10:51.011610 kernel: ITS: Using hypervisor restricted LPI range [128] Nov 1 00:10:51.011625 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000004000d0000 Nov 1 00:10:51.011640 kernel: arch_timer: cp15 timer(s) running at 83.33MHz (virt). Nov 1 00:10:51.011655 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x13381ebeec, max_idle_ns: 440795203145 ns Nov 1 00:10:51.011670 kernel: sched_clock: 56 bits at 83MHz, resolution 12ns, wraps every 4398046511100ns Nov 1 00:10:51.011686 kernel: Console: colour dummy device 80x25 Nov 1 00:10:51.011701 kernel: printk: console [tty1] enabled Nov 1 00:10:51.011717 kernel: ACPI: Core revision 20210730 Nov 1 00:10:51.011733 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 166.66 BogoMIPS (lpj=83333) Nov 1 00:10:51.011749 kernel: pid_max: default: 32768 minimum: 301 Nov 1 00:10:51.011768 kernel: LSM: Security Framework initializing Nov 1 00:10:51.011784 kernel: SELinux: Initializing. Nov 1 00:10:51.011799 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Nov 1 00:10:51.011815 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Nov 1 00:10:51.011830 kernel: rcu: Hierarchical SRCU implementation. Nov 1 00:10:51.011846 kernel: Platform MSI: ITS@0x10080000 domain created Nov 1 00:10:51.011861 kernel: PCI/MSI: ITS@0x10080000 domain created Nov 1 00:10:51.011876 kernel: Remapping and enabling EFI services. Nov 1 00:10:51.011892 kernel: smp: Bringing up secondary CPUs ... Nov 1 00:10:51.011907 kernel: Detected PIPT I-cache on CPU1 Nov 1 00:10:51.011926 kernel: GICv3: CPU1: found redistributor 1 region 0:0x0000000010220000 Nov 1 00:10:51.011942 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000004000e0000 Nov 1 00:10:51.011958 kernel: CPU1: Booted secondary processor 0x0000000001 [0x410fd083] Nov 1 00:10:51.011992 kernel: smp: Brought up 1 node, 2 CPUs Nov 1 00:10:51.014048 kernel: SMP: Total of 2 processors activated. Nov 1 00:10:51.014065 kernel: CPU features: detected: 32-bit EL0 Support Nov 1 00:10:51.014082 kernel: CPU features: detected: 32-bit EL1 Support Nov 1 00:10:51.014097 kernel: CPU features: detected: CRC32 instructions Nov 1 00:10:51.014113 kernel: CPU: All CPU(s) started at EL1 Nov 1 00:10:51.014135 kernel: alternatives: patching kernel code Nov 1 00:10:51.014151 kernel: devtmpfs: initialized Nov 1 00:10:51.014177 kernel: KASLR disabled due to lack of seed Nov 1 00:10:51.014198 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Nov 1 00:10:51.014214 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Nov 1 00:10:51.014230 kernel: pinctrl core: initialized pinctrl subsystem Nov 1 00:10:51.014246 kernel: SMBIOS 3.0.0 present. Nov 1 00:10:51.014262 kernel: DMI: Amazon EC2 a1.large/, BIOS 1.0 11/1/2018 Nov 1 00:10:51.014278 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Nov 1 00:10:51.014294 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Nov 1 00:10:51.014311 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Nov 1 00:10:51.014331 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Nov 1 00:10:51.014347 kernel: audit: initializing netlink subsys (disabled) Nov 1 00:10:51.014364 kernel: audit: type=2000 audit(0.294:1): state=initialized audit_enabled=0 res=1 Nov 1 00:10:51.014380 kernel: thermal_sys: Registered thermal governor 'step_wise' Nov 1 00:10:51.014396 kernel: cpuidle: using governor menu Nov 1 00:10:51.014417 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Nov 1 00:10:51.014433 kernel: ASID allocator initialised with 32768 entries Nov 1 00:10:51.014449 kernel: ACPI: bus type PCI registered Nov 1 00:10:51.014465 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Nov 1 00:10:51.014481 kernel: Serial: AMBA PL011 UART driver Nov 1 00:10:51.014498 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Nov 1 00:10:51.014514 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Nov 1 00:10:51.014530 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Nov 1 00:10:51.014546 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Nov 1 00:10:51.014566 kernel: cryptd: max_cpu_qlen set to 1000 Nov 1 00:10:51.014582 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Nov 1 00:10:51.014598 kernel: ACPI: Added _OSI(Module Device) Nov 1 00:10:51.014614 kernel: ACPI: Added _OSI(Processor Device) Nov 1 00:10:51.014630 kernel: ACPI: Added _OSI(Processor Aggregator Device) Nov 1 00:10:51.014646 kernel: ACPI: Added _OSI(Linux-Dell-Video) Nov 1 00:10:51.014662 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Nov 1 00:10:51.014679 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Nov 1 00:10:51.014695 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Nov 1 00:10:51.014711 kernel: ACPI: Interpreter enabled Nov 1 00:10:51.014731 kernel: ACPI: Using GIC for interrupt routing Nov 1 00:10:51.014746 kernel: ACPI: MCFG table detected, 1 entries Nov 1 00:10:51.014762 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-0f]) Nov 1 00:10:51.016036 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Nov 1 00:10:51.016247 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Nov 1 00:10:51.016440 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Nov 1 00:10:51.016652 kernel: acpi PNP0A08:00: ECAM area [mem 0x20000000-0x20ffffff] reserved by PNP0C02:00 Nov 1 00:10:51.016852 kernel: acpi PNP0A08:00: ECAM at [mem 0x20000000-0x20ffffff] for [bus 00-0f] Nov 1 00:10:51.016875 kernel: ACPI: Remapped I/O 0x000000001fff0000 to [io 0x0000-0xffff window] Nov 1 00:10:51.016893 kernel: acpiphp: Slot [1] registered Nov 1 00:10:51.016909 kernel: acpiphp: Slot [2] registered Nov 1 00:10:51.016925 kernel: acpiphp: Slot [3] registered Nov 1 00:10:51.016942 kernel: acpiphp: Slot [4] registered Nov 1 00:10:51.016958 kernel: acpiphp: Slot [5] registered Nov 1 00:10:51.016998 kernel: acpiphp: Slot [6] registered Nov 1 00:10:51.017017 kernel: acpiphp: Slot [7] registered Nov 1 00:10:51.017039 kernel: acpiphp: Slot [8] registered Nov 1 00:10:51.017055 kernel: acpiphp: Slot [9] registered Nov 1 00:10:51.017071 kernel: acpiphp: Slot [10] registered Nov 1 00:10:51.017087 kernel: acpiphp: Slot [11] registered Nov 1 00:10:51.017103 kernel: acpiphp: Slot [12] registered Nov 1 00:10:51.017119 kernel: acpiphp: Slot [13] registered Nov 1 00:10:51.017135 kernel: acpiphp: Slot [14] registered Nov 1 00:10:51.017151 kernel: acpiphp: Slot [15] registered Nov 1 00:10:51.017167 kernel: acpiphp: Slot [16] registered Nov 1 00:10:51.017187 kernel: acpiphp: Slot [17] registered Nov 1 00:10:51.017204 kernel: acpiphp: Slot [18] registered Nov 1 00:10:51.017220 kernel: acpiphp: Slot [19] registered Nov 1 00:10:51.017236 kernel: acpiphp: Slot [20] registered Nov 1 00:10:51.017252 kernel: acpiphp: Slot [21] registered Nov 1 00:10:51.017268 kernel: acpiphp: Slot [22] registered Nov 1 00:10:51.017284 kernel: acpiphp: Slot [23] registered Nov 1 00:10:51.017300 kernel: acpiphp: Slot [24] registered Nov 1 00:10:51.017316 kernel: acpiphp: Slot [25] registered Nov 1 00:10:51.017332 kernel: acpiphp: Slot [26] registered Nov 1 00:10:51.017352 kernel: acpiphp: Slot [27] registered Nov 1 00:10:51.017368 kernel: acpiphp: Slot [28] registered Nov 1 00:10:51.017383 kernel: acpiphp: Slot [29] registered Nov 1 00:10:51.017399 kernel: acpiphp: Slot [30] registered Nov 1 00:10:51.017415 kernel: acpiphp: Slot [31] registered Nov 1 00:10:51.017431 kernel: PCI host bridge to bus 0000:00 Nov 1 00:10:51.017628 kernel: pci_bus 0000:00: root bus resource [mem 0x80000000-0xffffffff window] Nov 1 00:10:51.017804 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Nov 1 00:10:51.021050 kernel: pci_bus 0000:00: root bus resource [mem 0x400000000000-0x407fffffffff window] Nov 1 00:10:51.021280 kernel: pci_bus 0000:00: root bus resource [bus 00-0f] Nov 1 00:10:51.021508 kernel: pci 0000:00:00.0: [1d0f:0200] type 00 class 0x060000 Nov 1 00:10:51.021769 kernel: pci 0000:00:01.0: [1d0f:8250] type 00 class 0x070003 Nov 1 00:10:51.022030 kernel: pci 0000:00:01.0: reg 0x10: [mem 0x80118000-0x80118fff] Nov 1 00:10:51.022252 kernel: pci 0000:00:04.0: [1d0f:8061] type 00 class 0x010802 Nov 1 00:10:51.023165 kernel: pci 0000:00:04.0: reg 0x10: [mem 0x80114000-0x80117fff] Nov 1 00:10:51.029460 kernel: pci 0000:00:04.0: PME# supported from D0 D1 D2 D3hot D3cold Nov 1 00:10:51.029709 kernel: pci 0000:00:05.0: [1d0f:ec20] type 00 class 0x020000 Nov 1 00:10:51.029914 kernel: pci 0000:00:05.0: reg 0x10: [mem 0x80110000-0x80113fff] Nov 1 00:10:51.030154 kernel: pci 0000:00:05.0: reg 0x18: [mem 0x80000000-0x800fffff pref] Nov 1 00:10:51.030359 kernel: pci 0000:00:05.0: reg 0x20: [mem 0x80100000-0x8010ffff] Nov 1 00:10:51.030556 kernel: pci 0000:00:05.0: PME# supported from D0 D1 D2 D3hot D3cold Nov 1 00:10:51.030761 kernel: pci 0000:00:05.0: BAR 2: assigned [mem 0x80000000-0x800fffff pref] Nov 1 00:10:51.030959 kernel: pci 0000:00:05.0: BAR 4: assigned [mem 0x80100000-0x8010ffff] Nov 1 00:10:51.031199 kernel: pci 0000:00:04.0: BAR 0: assigned [mem 0x80110000-0x80113fff] Nov 1 00:10:51.031403 kernel: pci 0000:00:05.0: BAR 0: assigned [mem 0x80114000-0x80117fff] Nov 1 00:10:51.031606 kernel: pci 0000:00:01.0: BAR 0: assigned [mem 0x80118000-0x80118fff] Nov 1 00:10:51.031795 kernel: pci_bus 0000:00: resource 4 [mem 0x80000000-0xffffffff window] Nov 1 00:10:51.045160 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Nov 1 00:10:51.045385 kernel: pci_bus 0000:00: resource 6 [mem 0x400000000000-0x407fffffffff window] Nov 1 00:10:51.045409 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Nov 1 00:10:51.045427 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Nov 1 00:10:51.045444 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Nov 1 00:10:51.045461 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Nov 1 00:10:51.045478 kernel: iommu: Default domain type: Translated Nov 1 00:10:51.045494 kernel: iommu: DMA domain TLB invalidation policy: strict mode Nov 1 00:10:51.045511 kernel: vgaarb: loaded Nov 1 00:10:51.045527 kernel: pps_core: LinuxPPS API ver. 1 registered Nov 1 00:10:51.045548 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Nov 1 00:10:51.045564 kernel: PTP clock support registered Nov 1 00:10:51.045581 kernel: Registered efivars operations Nov 1 00:10:51.045597 kernel: clocksource: Switched to clocksource arch_sys_counter Nov 1 00:10:51.045614 kernel: VFS: Disk quotas dquot_6.6.0 Nov 1 00:10:51.045630 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Nov 1 00:10:51.045646 kernel: pnp: PnP ACPI init Nov 1 00:10:51.045847 kernel: system 00:00: [mem 0x20000000-0x2fffffff] could not be reserved Nov 1 00:10:51.045876 kernel: pnp: PnP ACPI: found 1 devices Nov 1 00:10:51.045893 kernel: NET: Registered PF_INET protocol family Nov 1 00:10:51.045910 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Nov 1 00:10:51.045927 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Nov 1 00:10:51.045943 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Nov 1 00:10:51.045960 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Nov 1 00:10:51.046009 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Nov 1 00:10:51.046029 kernel: TCP: Hash tables configured (established 32768 bind 32768) Nov 1 00:10:51.046046 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Nov 1 00:10:51.046068 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Nov 1 00:10:51.046085 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Nov 1 00:10:51.046101 kernel: PCI: CLS 0 bytes, default 64 Nov 1 00:10:51.046118 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 3 counters available Nov 1 00:10:51.046134 kernel: kvm [1]: HYP mode not available Nov 1 00:10:51.046150 kernel: Initialise system trusted keyrings Nov 1 00:10:51.046167 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Nov 1 00:10:51.046183 kernel: Key type asymmetric registered Nov 1 00:10:51.046199 kernel: Asymmetric key parser 'x509' registered Nov 1 00:10:51.046220 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Nov 1 00:10:51.046236 kernel: io scheduler mq-deadline registered Nov 1 00:10:51.046252 kernel: io scheduler kyber registered Nov 1 00:10:51.046268 kernel: io scheduler bfq registered Nov 1 00:10:51.046475 kernel: pl061_gpio ARMH0061:00: PL061 GPIO chip registered Nov 1 00:10:51.046500 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Nov 1 00:10:51.046518 kernel: ACPI: button: Power Button [PWRB] Nov 1 00:10:51.046535 kernel: input: Sleep Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0E:00/input/input1 Nov 1 00:10:51.046551 kernel: ACPI: button: Sleep Button [SLPB] Nov 1 00:10:51.046573 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Nov 1 00:10:51.046589 kernel: ACPI: \_SB_.PCI0.GSI2: Enabled at IRQ 37 Nov 1 00:10:51.046789 kernel: serial 0000:00:01.0: enabling device (0010 -> 0012) Nov 1 00:10:51.046813 kernel: printk: console [ttyS0] disabled Nov 1 00:10:51.046830 kernel: 0000:00:01.0: ttyS0 at MMIO 0x80118000 (irq = 14, base_baud = 115200) is a 16550A Nov 1 00:10:51.046847 kernel: printk: console [ttyS0] enabled Nov 1 00:10:51.046863 kernel: printk: bootconsole [uart0] disabled Nov 1 00:10:51.046879 kernel: thunder_xcv, ver 1.0 Nov 1 00:10:51.046895 kernel: thunder_bgx, ver 1.0 Nov 1 00:10:51.046916 kernel: nicpf, ver 1.0 Nov 1 00:10:51.046932 kernel: nicvf, ver 1.0 Nov 1 00:10:51.047175 kernel: rtc-efi rtc-efi.0: registered as rtc0 Nov 1 00:10:51.047364 kernel: rtc-efi rtc-efi.0: setting system clock to 2025-11-01T00:10:50 UTC (1761955850) Nov 1 00:10:51.047388 kernel: hid: raw HID events driver (C) Jiri Kosina Nov 1 00:10:51.047405 kernel: NET: Registered PF_INET6 protocol family Nov 1 00:10:51.047421 kernel: Segment Routing with IPv6 Nov 1 00:10:51.047438 kernel: In-situ OAM (IOAM) with IPv6 Nov 1 00:10:51.047460 kernel: NET: Registered PF_PACKET protocol family Nov 1 00:10:51.047476 kernel: Key type dns_resolver registered Nov 1 00:10:51.047492 kernel: registered taskstats version 1 Nov 1 00:10:51.047508 kernel: Loading compiled-in X.509 certificates Nov 1 00:10:51.047525 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.192-flatcar: 4aa5071b9a6f96878595e36d4bd5862a671c915d' Nov 1 00:10:51.047541 kernel: Key type .fscrypt registered Nov 1 00:10:51.047557 kernel: Key type fscrypt-provisioning registered Nov 1 00:10:51.047573 kernel: ima: No TPM chip found, activating TPM-bypass! Nov 1 00:10:51.047590 kernel: ima: Allocated hash algorithm: sha1 Nov 1 00:10:51.047610 kernel: ima: No architecture policies found Nov 1 00:10:51.047626 kernel: clk: Disabling unused clocks Nov 1 00:10:51.047642 kernel: Freeing unused kernel memory: 36416K Nov 1 00:10:51.047659 kernel: Run /init as init process Nov 1 00:10:51.047675 kernel: with arguments: Nov 1 00:10:51.047691 kernel: /init Nov 1 00:10:51.047706 kernel: with environment: Nov 1 00:10:51.047722 kernel: HOME=/ Nov 1 00:10:51.047738 kernel: TERM=linux Nov 1 00:10:51.047758 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Nov 1 00:10:51.047779 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Nov 1 00:10:51.047800 systemd[1]: Detected virtualization amazon. Nov 1 00:10:51.047818 systemd[1]: Detected architecture arm64. Nov 1 00:10:51.047835 systemd[1]: Running in initrd. Nov 1 00:10:51.047852 systemd[1]: No hostname configured, using default hostname. Nov 1 00:10:51.047869 systemd[1]: Hostname set to . Nov 1 00:10:51.047892 systemd[1]: Initializing machine ID from VM UUID. Nov 1 00:10:51.047909 systemd[1]: Queued start job for default target initrd.target. Nov 1 00:10:51.047926 systemd[1]: Started systemd-ask-password-console.path. Nov 1 00:10:51.047943 systemd[1]: Reached target cryptsetup.target. Nov 1 00:10:51.047960 systemd[1]: Reached target paths.target. Nov 1 00:10:51.048007 systemd[1]: Reached target slices.target. Nov 1 00:10:51.048027 systemd[1]: Reached target swap.target. Nov 1 00:10:51.048045 systemd[1]: Reached target timers.target. Nov 1 00:10:51.048068 systemd[1]: Listening on iscsid.socket. Nov 1 00:10:51.048086 systemd[1]: Listening on iscsiuio.socket. Nov 1 00:10:51.048104 systemd[1]: Listening on systemd-journald-audit.socket. Nov 1 00:10:51.048121 systemd[1]: Listening on systemd-journald-dev-log.socket. Nov 1 00:10:51.048139 systemd[1]: Listening on systemd-journald.socket. Nov 1 00:10:51.048156 systemd[1]: Listening on systemd-networkd.socket. Nov 1 00:10:51.048174 systemd[1]: Listening on systemd-udevd-control.socket. Nov 1 00:10:51.048192 systemd[1]: Listening on systemd-udevd-kernel.socket. Nov 1 00:10:51.048213 systemd[1]: Reached target sockets.target. Nov 1 00:10:51.048231 systemd[1]: Starting kmod-static-nodes.service... Nov 1 00:10:51.048249 systemd[1]: Finished network-cleanup.service. Nov 1 00:10:51.048266 systemd[1]: Starting systemd-fsck-usr.service... Nov 1 00:10:51.048283 systemd[1]: Starting systemd-journald.service... Nov 1 00:10:51.048301 systemd[1]: Starting systemd-modules-load.service... Nov 1 00:10:51.048319 systemd[1]: Starting systemd-resolved.service... Nov 1 00:10:51.048336 systemd[1]: Starting systemd-vconsole-setup.service... Nov 1 00:10:51.048353 systemd[1]: Finished kmod-static-nodes.service. Nov 1 00:10:51.048375 systemd[1]: Finished systemd-fsck-usr.service. Nov 1 00:10:51.048393 systemd[1]: Finished systemd-vconsole-setup.service. Nov 1 00:10:51.048411 kernel: audit: type=1130 audit(1761955850.999:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:51.048429 systemd[1]: Starting dracut-cmdline-ask.service... Nov 1 00:10:51.048446 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Nov 1 00:10:51.048467 systemd-journald[310]: Journal started Nov 1 00:10:51.048553 systemd-journald[310]: Runtime Journal (/run/log/journal/ec23821518dd23d0e5715e58219a5a69) is 8.0M, max 75.4M, 67.4M free. Nov 1 00:10:50.999000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:50.975787 systemd-modules-load[311]: Inserted module 'overlay' Nov 1 00:10:51.055907 systemd[1]: Started systemd-journald.service. Nov 1 00:10:51.062000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:51.065654 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Nov 1 00:10:51.074000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:51.097884 kernel: audit: type=1130 audit(1761955851.062:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:51.097936 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Nov 1 00:10:51.097963 kernel: audit: type=1130 audit(1761955851.074:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:51.091305 systemd-resolved[312]: Positive Trust Anchors: Nov 1 00:10:51.091331 systemd-resolved[312]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Nov 1 00:10:51.091385 systemd-resolved[312]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Nov 1 00:10:51.125081 systemd-modules-load[311]: Inserted module 'br_netfilter' Nov 1 00:10:51.126008 kernel: Bridge firewalling registered Nov 1 00:10:51.131838 systemd[1]: Finished dracut-cmdline-ask.service. Nov 1 00:10:51.138000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:51.152993 kernel: audit: type=1130 audit(1761955851.138:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:51.155653 systemd[1]: Starting dracut-cmdline.service... Nov 1 00:10:51.168002 kernel: SCSI subsystem initialized Nov 1 00:10:51.189627 dracut-cmdline[327]: dracut-dracut-053 Nov 1 00:10:51.197673 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Nov 1 00:10:51.197713 kernel: device-mapper: uevent: version 1.0.3 Nov 1 00:10:51.197737 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Nov 1 00:10:51.202588 systemd-modules-load[311]: Inserted module 'dm_multipath' Nov 1 00:10:51.207183 dracut-cmdline[327]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlycon flatcar.first_boot=detected acpi=force flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=284392058f112e827cd7c521dcce1be27e1367d0030df494642d12e41e342e29 Nov 1 00:10:51.221400 systemd[1]: Finished systemd-modules-load.service. Nov 1 00:10:51.223000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:51.227127 systemd[1]: Starting systemd-sysctl.service... Nov 1 00:10:51.236617 kernel: audit: type=1130 audit(1761955851.223:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:51.252500 systemd[1]: Finished systemd-sysctl.service. Nov 1 00:10:51.258000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:51.273012 kernel: audit: type=1130 audit(1761955851.258:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:51.362992 kernel: Loading iSCSI transport class v2.0-870. Nov 1 00:10:51.382009 kernel: iscsi: registered transport (tcp) Nov 1 00:10:51.409688 kernel: iscsi: registered transport (qla4xxx) Nov 1 00:10:51.409757 kernel: QLogic iSCSI HBA Driver Nov 1 00:10:51.594920 systemd-resolved[312]: Defaulting to hostname 'linux'. Nov 1 00:10:51.597233 kernel: random: crng init done Nov 1 00:10:51.598917 systemd[1]: Started systemd-resolved.service. Nov 1 00:10:51.614548 kernel: audit: type=1130 audit(1761955851.599:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:51.599000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:51.601018 systemd[1]: Reached target nss-lookup.target. Nov 1 00:10:51.627800 systemd[1]: Finished dracut-cmdline.service. Nov 1 00:10:51.640804 kernel: audit: type=1130 audit(1761955851.628:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:51.628000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:51.637369 systemd[1]: Starting dracut-pre-udev.service... Nov 1 00:10:51.703009 kernel: raid6: neonx8 gen() 6379 MB/s Nov 1 00:10:51.718998 kernel: raid6: neonx8 xor() 4708 MB/s Nov 1 00:10:51.737004 kernel: raid6: neonx4 gen() 6515 MB/s Nov 1 00:10:51.755004 kernel: raid6: neonx4 xor() 4847 MB/s Nov 1 00:10:51.773003 kernel: raid6: neonx2 gen() 5724 MB/s Nov 1 00:10:51.791003 kernel: raid6: neonx2 xor() 4484 MB/s Nov 1 00:10:51.809002 kernel: raid6: neonx1 gen() 4456 MB/s Nov 1 00:10:51.827002 kernel: raid6: neonx1 xor() 3651 MB/s Nov 1 00:10:51.845002 kernel: raid6: int64x8 gen() 3407 MB/s Nov 1 00:10:51.863004 kernel: raid6: int64x8 xor() 2080 MB/s Nov 1 00:10:51.881002 kernel: raid6: int64x4 gen() 3782 MB/s Nov 1 00:10:51.899002 kernel: raid6: int64x4 xor() 2188 MB/s Nov 1 00:10:51.917002 kernel: raid6: int64x2 gen() 3568 MB/s Nov 1 00:10:51.935003 kernel: raid6: int64x2 xor() 1945 MB/s Nov 1 00:10:51.953002 kernel: raid6: int64x1 gen() 2764 MB/s Nov 1 00:10:51.972611 kernel: raid6: int64x1 xor() 1447 MB/s Nov 1 00:10:51.972649 kernel: raid6: using algorithm neonx4 gen() 6515 MB/s Nov 1 00:10:51.972674 kernel: raid6: .... xor() 4847 MB/s, rmw enabled Nov 1 00:10:51.974446 kernel: raid6: using neon recovery algorithm Nov 1 00:10:51.993009 kernel: xor: measuring software checksum speed Nov 1 00:10:51.995004 kernel: 8regs : 8803 MB/sec Nov 1 00:10:51.997003 kernel: 32regs : 10355 MB/sec Nov 1 00:10:52.000633 kernel: arm64_neon : 8812 MB/sec Nov 1 00:10:52.000665 kernel: xor: using function: 32regs (10355 MB/sec) Nov 1 00:10:52.097016 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Nov 1 00:10:52.114361 systemd[1]: Finished dracut-pre-udev.service. Nov 1 00:10:52.120000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:52.127000 audit: BPF prog-id=7 op=LOAD Nov 1 00:10:52.127000 audit: BPF prog-id=8 op=LOAD Nov 1 00:10:52.132025 kernel: audit: type=1130 audit(1761955852.120:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:52.129950 systemd[1]: Starting systemd-udevd.service... Nov 1 00:10:52.159622 systemd-udevd[509]: Using default interface naming scheme 'v252'. Nov 1 00:10:52.168836 systemd[1]: Started systemd-udevd.service. Nov 1 00:10:52.177000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:52.181616 systemd[1]: Starting dracut-pre-trigger.service... Nov 1 00:10:52.215319 dracut-pre-trigger[527]: rd.md=0: removing MD RAID activation Nov 1 00:10:52.278523 systemd[1]: Finished dracut-pre-trigger.service. Nov 1 00:10:52.277000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:52.280328 systemd[1]: Starting systemd-udev-trigger.service... Nov 1 00:10:52.385599 systemd[1]: Finished systemd-udev-trigger.service. Nov 1 00:10:52.386000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:52.525262 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Nov 1 00:10:52.525337 kernel: ena 0000:00:05.0: enabling device (0010 -> 0012) Nov 1 00:10:52.549529 kernel: ACPI: \_SB_.PCI0.GSI0: Enabled at IRQ 35 Nov 1 00:10:52.549559 kernel: ena 0000:00:05.0: ENA device version: 0.10 Nov 1 00:10:52.549791 kernel: nvme nvme0: pci function 0000:00:04.0 Nov 1 00:10:52.550081 kernel: ena 0000:00:05.0: ENA controller version: 0.0.1 implementation version 1 Nov 1 00:10:52.550288 kernel: nvme nvme0: 2/0/0 default/read/poll queues Nov 1 00:10:52.550484 kernel: ena 0000:00:05.0: Elastic Network Adapter (ENA) found at mem 80114000, mac addr 06:5c:34:0b:cf:e5 Nov 1 00:10:52.550684 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Nov 1 00:10:52.553846 kernel: GPT:9289727 != 33554431 Nov 1 00:10:52.553889 kernel: GPT:Alternate GPT header not at the end of the disk. Nov 1 00:10:52.556124 kernel: GPT:9289727 != 33554431 Nov 1 00:10:52.557441 kernel: GPT: Use GNU Parted to correct GPT errors. Nov 1 00:10:52.560905 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Nov 1 00:10:52.564525 (udev-worker)[579]: Network interface NamePolicy= disabled on kernel command line. Nov 1 00:10:52.635013 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/nvme0n1p6 scanned by (udev-worker) (569) Nov 1 00:10:52.720956 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Nov 1 00:10:52.753375 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Nov 1 00:10:52.769745 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Nov 1 00:10:52.782432 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Nov 1 00:10:52.787768 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Nov 1 00:10:52.793380 systemd[1]: Starting disk-uuid.service... Nov 1 00:10:52.811868 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Nov 1 00:10:52.812092 disk-uuid[675]: Primary Header is updated. Nov 1 00:10:52.812092 disk-uuid[675]: Secondary Entries is updated. Nov 1 00:10:52.812092 disk-uuid[675]: Secondary Header is updated. Nov 1 00:10:52.829009 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Nov 1 00:10:52.838000 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Nov 1 00:10:53.839013 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Nov 1 00:10:53.839347 disk-uuid[676]: The operation has completed successfully. Nov 1 00:10:54.009248 systemd[1]: disk-uuid.service: Deactivated successfully. Nov 1 00:10:54.011782 systemd[1]: Finished disk-uuid.service. Nov 1 00:10:54.014000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:54.014000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:54.035450 systemd[1]: Starting verity-setup.service... Nov 1 00:10:54.076010 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Nov 1 00:10:54.163895 systemd[1]: Found device dev-mapper-usr.device. Nov 1 00:10:54.171250 systemd[1]: Finished verity-setup.service. Nov 1 00:10:54.173000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:54.176058 systemd[1]: Mounting sysusr-usr.mount... Nov 1 00:10:54.267022 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Nov 1 00:10:54.267875 systemd[1]: Mounted sysusr-usr.mount. Nov 1 00:10:54.271423 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Nov 1 00:10:54.272676 systemd[1]: Starting ignition-setup.service... Nov 1 00:10:54.280840 systemd[1]: Starting parse-ip-for-networkd.service... Nov 1 00:10:54.319771 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Nov 1 00:10:54.319840 kernel: BTRFS info (device nvme0n1p6): using free space tree Nov 1 00:10:54.319864 kernel: BTRFS info (device nvme0n1p6): has skinny extents Nov 1 00:10:54.333064 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Nov 1 00:10:54.353420 systemd[1]: mnt-oem.mount: Deactivated successfully. Nov 1 00:10:54.367448 systemd[1]: Finished ignition-setup.service. Nov 1 00:10:54.368000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:54.371043 systemd[1]: Starting ignition-fetch-offline.service... Nov 1 00:10:54.441357 systemd[1]: Finished parse-ip-for-networkd.service. Nov 1 00:10:54.442000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:54.442000 audit: BPF prog-id=9 op=LOAD Nov 1 00:10:54.447389 systemd[1]: Starting systemd-networkd.service... Nov 1 00:10:54.496934 systemd-networkd[1188]: lo: Link UP Nov 1 00:10:54.496956 systemd-networkd[1188]: lo: Gained carrier Nov 1 00:10:54.498596 systemd-networkd[1188]: Enumeration completed Nov 1 00:10:54.510000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:54.499479 systemd-networkd[1188]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Nov 1 00:10:54.502150 systemd[1]: Started systemd-networkd.service. Nov 1 00:10:54.512588 systemd[1]: Reached target network.target. Nov 1 00:10:54.516364 systemd[1]: Starting iscsiuio.service... Nov 1 00:10:54.516682 systemd-networkd[1188]: eth0: Link UP Nov 1 00:10:54.516690 systemd-networkd[1188]: eth0: Gained carrier Nov 1 00:10:54.542263 systemd[1]: Started iscsiuio.service. Nov 1 00:10:54.543690 systemd-networkd[1188]: eth0: DHCPv4 address 172.31.24.47/20, gateway 172.31.16.1 acquired from 172.31.16.1 Nov 1 00:10:54.550000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:54.553585 systemd[1]: Starting iscsid.service... Nov 1 00:10:54.562115 iscsid[1193]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Nov 1 00:10:54.562115 iscsid[1193]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Nov 1 00:10:54.562115 iscsid[1193]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Nov 1 00:10:54.562115 iscsid[1193]: If using hardware iscsi like qla4xxx this message can be ignored. Nov 1 00:10:54.562115 iscsid[1193]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Nov 1 00:10:54.581000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:54.590943 iscsid[1193]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Nov 1 00:10:54.580163 systemd[1]: Started iscsid.service. Nov 1 00:10:54.583885 systemd[1]: Starting dracut-initqueue.service... Nov 1 00:10:54.621133 systemd[1]: Finished dracut-initqueue.service. Nov 1 00:10:54.621000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:54.623673 systemd[1]: Reached target remote-fs-pre.target. Nov 1 00:10:54.626786 systemd[1]: Reached target remote-cryptsetup.target. Nov 1 00:10:54.630226 systemd[1]: Reached target remote-fs.target. Nov 1 00:10:54.636867 systemd[1]: Starting dracut-pre-mount.service... Nov 1 00:10:54.655853 systemd[1]: Finished dracut-pre-mount.service. Nov 1 00:10:54.654000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:55.187243 ignition[1128]: Ignition 2.14.0 Nov 1 00:10:55.187784 ignition[1128]: Stage: fetch-offline Nov 1 00:10:55.188357 ignition[1128]: reading system config file "/usr/lib/ignition/base.d/base.ign" Nov 1 00:10:55.188471 ignition[1128]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Nov 1 00:10:55.209812 ignition[1128]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Nov 1 00:10:55.211149 ignition[1128]: Ignition finished successfully Nov 1 00:10:55.218197 systemd[1]: Finished ignition-fetch-offline.service. Nov 1 00:10:55.239785 kernel: kauditd_printk_skb: 16 callbacks suppressed Nov 1 00:10:55.239828 kernel: audit: type=1130 audit(1761955855.219:27): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:55.219000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:55.222339 systemd[1]: Starting ignition-fetch.service... Nov 1 00:10:55.244557 ignition[1212]: Ignition 2.14.0 Nov 1 00:10:55.244598 ignition[1212]: Stage: fetch Nov 1 00:10:55.244879 ignition[1212]: reading system config file "/usr/lib/ignition/base.d/base.ign" Nov 1 00:10:55.244932 ignition[1212]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Nov 1 00:10:55.260432 ignition[1212]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Nov 1 00:10:55.262988 ignition[1212]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Nov 1 00:10:55.274786 ignition[1212]: INFO : PUT result: OK Nov 1 00:10:55.278584 ignition[1212]: DEBUG : parsed url from cmdline: "" Nov 1 00:10:55.278584 ignition[1212]: INFO : no config URL provided Nov 1 00:10:55.278584 ignition[1212]: INFO : reading system config file "/usr/lib/ignition/user.ign" Nov 1 00:10:55.284915 ignition[1212]: INFO : no config at "/usr/lib/ignition/user.ign" Nov 1 00:10:55.284915 ignition[1212]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Nov 1 00:10:55.289843 ignition[1212]: INFO : PUT result: OK Nov 1 00:10:55.289843 ignition[1212]: INFO : GET http://169.254.169.254/2019-10-01/user-data: attempt #1 Nov 1 00:10:55.294528 ignition[1212]: INFO : GET result: OK Nov 1 00:10:55.296282 ignition[1212]: DEBUG : parsing config with SHA512: f0c6a302951507a041eba0490a1dd6d4444545039c61f134b4b70051c2f9b576ce8563bf7053f807a39769a7e2033def903093abca253fa6c125b47bfd5530b6 Nov 1 00:10:55.309280 unknown[1212]: fetched base config from "system" Nov 1 00:10:55.309309 unknown[1212]: fetched base config from "system" Nov 1 00:10:55.309324 unknown[1212]: fetched user config from "aws" Nov 1 00:10:55.315547 ignition[1212]: fetch: fetch complete Nov 1 00:10:55.315572 ignition[1212]: fetch: fetch passed Nov 1 00:10:55.315659 ignition[1212]: Ignition finished successfully Nov 1 00:10:55.322100 systemd[1]: Finished ignition-fetch.service. Nov 1 00:10:55.320000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:55.326774 systemd[1]: Starting ignition-kargs.service... Nov 1 00:10:55.340793 kernel: audit: type=1130 audit(1761955855.320:28): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:55.349845 ignition[1218]: Ignition 2.14.0 Nov 1 00:10:55.349873 ignition[1218]: Stage: kargs Nov 1 00:10:55.350178 ignition[1218]: reading system config file "/usr/lib/ignition/base.d/base.ign" Nov 1 00:10:55.350231 ignition[1218]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Nov 1 00:10:55.365079 ignition[1218]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Nov 1 00:10:55.368796 ignition[1218]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Nov 1 00:10:55.371496 ignition[1218]: INFO : PUT result: OK Nov 1 00:10:55.377152 ignition[1218]: kargs: kargs passed Nov 1 00:10:55.377256 ignition[1218]: Ignition finished successfully Nov 1 00:10:55.378891 systemd[1]: Finished ignition-kargs.service. Nov 1 00:10:55.384000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:55.387186 systemd[1]: Starting ignition-disks.service... Nov 1 00:10:55.396653 kernel: audit: type=1130 audit(1761955855.384:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:55.401698 ignition[1224]: Ignition 2.14.0 Nov 1 00:10:55.402204 ignition[1224]: Stage: disks Nov 1 00:10:55.402523 ignition[1224]: reading system config file "/usr/lib/ignition/base.d/base.ign" Nov 1 00:10:55.402582 ignition[1224]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Nov 1 00:10:55.417392 ignition[1224]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Nov 1 00:10:55.419938 ignition[1224]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Nov 1 00:10:55.423255 ignition[1224]: INFO : PUT result: OK Nov 1 00:10:55.428896 ignition[1224]: disks: disks passed Nov 1 00:10:55.429027 ignition[1224]: Ignition finished successfully Nov 1 00:10:55.435568 systemd[1]: Finished ignition-disks.service. Nov 1 00:10:55.437000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:55.439096 systemd[1]: Reached target initrd-root-device.target. Nov 1 00:10:55.450235 kernel: audit: type=1130 audit(1761955855.437:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:55.448358 systemd[1]: Reached target local-fs-pre.target. Nov 1 00:10:55.452008 systemd[1]: Reached target local-fs.target. Nov 1 00:10:55.453794 systemd[1]: Reached target sysinit.target. Nov 1 00:10:55.457019 systemd[1]: Reached target basic.target. Nov 1 00:10:55.461921 systemd[1]: Starting systemd-fsck-root.service... Nov 1 00:10:55.501886 systemd-fsck[1232]: ROOT: clean, 637/553520 files, 56031/553472 blocks Nov 1 00:10:55.507946 systemd[1]: Finished systemd-fsck-root.service. Nov 1 00:10:55.526058 kernel: audit: type=1130 audit(1761955855.511:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:55.511000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:55.514172 systemd[1]: Mounting sysroot.mount... Nov 1 00:10:55.548021 kernel: EXT4-fs (nvme0n1p9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Nov 1 00:10:55.549487 systemd[1]: Mounted sysroot.mount. Nov 1 00:10:55.552726 systemd[1]: Reached target initrd-root-fs.target. Nov 1 00:10:55.560761 systemd[1]: Mounting sysroot-usr.mount... Nov 1 00:10:55.565097 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Nov 1 00:10:55.565343 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Nov 1 00:10:55.565398 systemd[1]: Reached target ignition-diskful.target. Nov 1 00:10:55.583259 systemd[1]: Mounted sysroot-usr.mount. Nov 1 00:10:55.602507 systemd[1]: Mounting sysroot-usr-share-oem.mount... Nov 1 00:10:55.607700 systemd[1]: Starting initrd-setup-root.service... Nov 1 00:10:55.619701 initrd-setup-root[1254]: cut: /sysroot/etc/passwd: No such file or directory Nov 1 00:10:55.636022 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/nvme0n1p6 scanned by mount (1249) Nov 1 00:10:55.639514 initrd-setup-root[1262]: cut: /sysroot/etc/group: No such file or directory Nov 1 00:10:55.648429 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Nov 1 00:10:55.648475 kernel: BTRFS info (device nvme0n1p6): using free space tree Nov 1 00:10:55.648500 kernel: BTRFS info (device nvme0n1p6): has skinny extents Nov 1 00:10:55.654067 initrd-setup-root[1286]: cut: /sysroot/etc/shadow: No such file or directory Nov 1 00:10:55.661496 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Nov 1 00:10:55.665460 systemd[1]: Mounted sysroot-usr-share-oem.mount. Nov 1 00:10:55.671934 initrd-setup-root[1296]: cut: /sysroot/etc/gshadow: No such file or directory Nov 1 00:10:55.863888 systemd[1]: Finished initrd-setup-root.service. Nov 1 00:10:55.866000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:55.868600 systemd[1]: Starting ignition-mount.service... Nov 1 00:10:55.878363 kernel: audit: type=1130 audit(1761955855.866:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:55.879596 systemd[1]: Starting sysroot-boot.service... Nov 1 00:10:55.894306 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Nov 1 00:10:55.894483 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Nov 1 00:10:55.921301 ignition[1315]: INFO : Ignition 2.14.0 Nov 1 00:10:55.921301 ignition[1315]: INFO : Stage: mount Nov 1 00:10:55.924810 ignition[1315]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Nov 1 00:10:55.924810 ignition[1315]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Nov 1 00:10:55.942602 systemd[1]: Finished sysroot-boot.service. Nov 1 00:10:55.943000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:55.955003 kernel: audit: type=1130 audit(1761955855.943:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:55.959799 ignition[1315]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Nov 1 00:10:55.962771 ignition[1315]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Nov 1 00:10:55.966228 ignition[1315]: INFO : PUT result: OK Nov 1 00:10:55.972096 ignition[1315]: INFO : mount: mount passed Nov 1 00:10:55.973936 ignition[1315]: INFO : Ignition finished successfully Nov 1 00:10:55.976104 systemd[1]: Finished ignition-mount.service. Nov 1 00:10:55.990009 kernel: audit: type=1130 audit(1761955855.978:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:55.978000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:55.980738 systemd[1]: Starting ignition-files.service... Nov 1 00:10:55.997190 systemd[1]: Mounting sysroot-usr-share-oem.mount... Nov 1 00:10:56.021020 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/nvme0n1p6 scanned by mount (1324) Nov 1 00:10:56.026794 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Nov 1 00:10:56.026830 kernel: BTRFS info (device nvme0n1p6): using free space tree Nov 1 00:10:56.026854 kernel: BTRFS info (device nvme0n1p6): has skinny extents Nov 1 00:10:56.036005 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Nov 1 00:10:56.041023 systemd[1]: Mounted sysroot-usr-share-oem.mount. Nov 1 00:10:56.057092 ignition[1343]: INFO : Ignition 2.14.0 Nov 1 00:10:56.057092 ignition[1343]: INFO : Stage: files Nov 1 00:10:56.065962 ignition[1343]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Nov 1 00:10:56.065962 ignition[1343]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Nov 1 00:10:56.082627 ignition[1343]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Nov 1 00:10:56.085327 ignition[1343]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Nov 1 00:10:56.088843 ignition[1343]: INFO : PUT result: OK Nov 1 00:10:56.094710 ignition[1343]: DEBUG : files: compiled without relabeling support, skipping Nov 1 00:10:56.098737 ignition[1343]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Nov 1 00:10:56.098737 ignition[1343]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Nov 1 00:10:56.147328 ignition[1343]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Nov 1 00:10:56.150513 ignition[1343]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Nov 1 00:10:56.154744 unknown[1343]: wrote ssh authorized keys file for user: core Nov 1 00:10:56.157245 ignition[1343]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Nov 1 00:10:56.160922 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.3-linux-arm64.tar.gz" Nov 1 00:10:56.165094 ignition[1343]: INFO : GET https://get.helm.sh/helm-v3.17.3-linux-arm64.tar.gz: attempt #1 Nov 1 00:10:56.266732 ignition[1343]: INFO : GET result: OK Nov 1 00:10:56.465246 systemd-networkd[1188]: eth0: Gained IPv6LL Nov 1 00:10:56.527420 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.3-linux-arm64.tar.gz" Nov 1 00:10:56.531721 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/etc/eks/bootstrap.sh" Nov 1 00:10:56.531721 ignition[1343]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Nov 1 00:10:56.546463 ignition[1343]: INFO : op(1): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem368638475" Nov 1 00:10:56.550248 ignition[1343]: CRITICAL : op(1): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem368638475": device or resource busy Nov 1 00:10:56.550248 ignition[1343]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem368638475", trying btrfs: device or resource busy Nov 1 00:10:56.550248 ignition[1343]: INFO : op(2): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem368638475" Nov 1 00:10:56.550248 ignition[1343]: INFO : op(2): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem368638475" Nov 1 00:10:56.565036 ignition[1343]: INFO : op(3): [started] unmounting "/mnt/oem368638475" Nov 1 00:10:56.565036 ignition[1343]: INFO : op(3): [finished] unmounting "/mnt/oem368638475" Nov 1 00:10:56.565036 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/etc/eks/bootstrap.sh" Nov 1 00:10:56.565036 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/install.sh" Nov 1 00:10:56.565036 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/install.sh" Nov 1 00:10:56.565036 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nginx.yaml" Nov 1 00:10:56.565036 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nginx.yaml" Nov 1 00:10:56.565036 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Nov 1 00:10:56.565036 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Nov 1 00:10:56.565036 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Nov 1 00:10:56.565036 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Nov 1 00:10:56.565036 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/etc/flatcar/update.conf" Nov 1 00:10:56.565036 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/etc/flatcar/update.conf" Nov 1 00:10:56.565036 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-arm64.raw" Nov 1 00:10:56.565036 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-arm64.raw" Nov 1 00:10:56.565036 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Nov 1 00:10:56.565036 ignition[1343]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Nov 1 00:10:56.610667 systemd[1]: mnt-oem368638475.mount: Deactivated successfully. Nov 1 00:10:56.645432 ignition[1343]: INFO : op(4): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3306414221" Nov 1 00:10:56.645432 ignition[1343]: CRITICAL : op(4): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3306414221": device or resource busy Nov 1 00:10:56.645432 ignition[1343]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem3306414221", trying btrfs: device or resource busy Nov 1 00:10:56.645432 ignition[1343]: INFO : op(5): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3306414221" Nov 1 00:10:56.645432 ignition[1343]: INFO : op(5): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3306414221" Nov 1 00:10:56.645432 ignition[1343]: INFO : op(6): [started] unmounting "/mnt/oem3306414221" Nov 1 00:10:56.645432 ignition[1343]: INFO : op(6): [finished] unmounting "/mnt/oem3306414221" Nov 1 00:10:56.645432 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Nov 1 00:10:56.645432 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Nov 1 00:10:56.645432 ignition[1343]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Nov 1 00:10:56.684262 systemd[1]: mnt-oem3306414221.mount: Deactivated successfully. Nov 1 00:10:56.697459 ignition[1343]: INFO : op(7): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2715077088" Nov 1 00:10:56.701543 ignition[1343]: CRITICAL : op(7): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2715077088": device or resource busy Nov 1 00:10:56.701543 ignition[1343]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2715077088", trying btrfs: device or resource busy Nov 1 00:10:56.708872 ignition[1343]: INFO : op(8): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2715077088" Nov 1 00:10:56.711773 ignition[1343]: INFO : op(8): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2715077088" Nov 1 00:10:56.714913 ignition[1343]: INFO : op(9): [started] unmounting "/mnt/oem2715077088" Nov 1 00:10:56.717370 ignition[1343]: INFO : op(9): [finished] unmounting "/mnt/oem2715077088" Nov 1 00:10:56.719820 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Nov 1 00:10:56.723844 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(d): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Nov 1 00:10:56.728011 ignition[1343]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Nov 1 00:10:56.745725 ignition[1343]: INFO : op(a): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem140314740" Nov 1 00:10:56.745725 ignition[1343]: CRITICAL : op(a): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem140314740": device or resource busy Nov 1 00:10:56.745725 ignition[1343]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem140314740", trying btrfs: device or resource busy Nov 1 00:10:56.745725 ignition[1343]: INFO : op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem140314740" Nov 1 00:10:56.759297 ignition[1343]: INFO : op(b): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem140314740" Nov 1 00:10:56.759297 ignition[1343]: INFO : op(c): [started] unmounting "/mnt/oem140314740" Nov 1 00:10:56.759297 ignition[1343]: INFO : op(c): [finished] unmounting "/mnt/oem140314740" Nov 1 00:10:56.759297 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(d): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Nov 1 00:10:56.759297 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-arm64.raw" Nov 1 00:10:56.759297 ignition[1343]: INFO : GET https://extensions.flatcar.org/extensions/kubernetes-v1.33.0-arm64.raw: attempt #1 Nov 1 00:10:57.287128 ignition[1343]: INFO : GET result: OK Nov 1 00:10:58.486677 ignition[1343]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-arm64.raw" Nov 1 00:10:58.486677 ignition[1343]: INFO : files: op(f): [started] processing unit "coreos-metadata-sshkeys@.service" Nov 1 00:10:58.495000 ignition[1343]: INFO : files: op(f): [finished] processing unit "coreos-metadata-sshkeys@.service" Nov 1 00:10:58.495000 ignition[1343]: INFO : files: op(10): [started] processing unit "amazon-ssm-agent.service" Nov 1 00:10:58.495000 ignition[1343]: INFO : files: op(10): op(11): [started] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Nov 1 00:10:58.495000 ignition[1343]: INFO : files: op(10): op(11): [finished] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Nov 1 00:10:58.495000 ignition[1343]: INFO : files: op(10): [finished] processing unit "amazon-ssm-agent.service" Nov 1 00:10:58.495000 ignition[1343]: INFO : files: op(12): [started] processing unit "nvidia.service" Nov 1 00:10:58.495000 ignition[1343]: INFO : files: op(12): [finished] processing unit "nvidia.service" Nov 1 00:10:58.495000 ignition[1343]: INFO : files: op(13): [started] processing unit "prepare-helm.service" Nov 1 00:10:58.495000 ignition[1343]: INFO : files: op(13): op(14): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Nov 1 00:10:58.495000 ignition[1343]: INFO : files: op(13): op(14): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Nov 1 00:10:58.495000 ignition[1343]: INFO : files: op(13): [finished] processing unit "prepare-helm.service" Nov 1 00:10:58.495000 ignition[1343]: INFO : files: op(15): [started] setting preset to enabled for "nvidia.service" Nov 1 00:10:58.534762 ignition[1343]: INFO : files: op(15): [finished] setting preset to enabled for "nvidia.service" Nov 1 00:10:58.534762 ignition[1343]: INFO : files: op(16): [started] setting preset to enabled for "prepare-helm.service" Nov 1 00:10:58.534762 ignition[1343]: INFO : files: op(16): [finished] setting preset to enabled for "prepare-helm.service" Nov 1 00:10:58.534762 ignition[1343]: INFO : files: op(17): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Nov 1 00:10:58.534762 ignition[1343]: INFO : files: op(17): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Nov 1 00:10:58.534762 ignition[1343]: INFO : files: op(18): [started] setting preset to enabled for "amazon-ssm-agent.service" Nov 1 00:10:58.534762 ignition[1343]: INFO : files: op(18): [finished] setting preset to enabled for "amazon-ssm-agent.service" Nov 1 00:10:58.563911 ignition[1343]: INFO : files: createResultFile: createFiles: op(19): [started] writing file "/sysroot/etc/.ignition-result.json" Nov 1 00:10:58.563911 ignition[1343]: INFO : files: createResultFile: createFiles: op(19): [finished] writing file "/sysroot/etc/.ignition-result.json" Nov 1 00:10:58.563911 ignition[1343]: INFO : files: files passed Nov 1 00:10:58.563911 ignition[1343]: INFO : Ignition finished successfully Nov 1 00:10:58.575925 systemd[1]: Finished ignition-files.service. Nov 1 00:10:58.578000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:58.588056 kernel: audit: type=1130 audit(1761955858.578:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:58.590573 systemd[1]: Starting initrd-setup-root-after-ignition.service... Nov 1 00:10:58.595078 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Nov 1 00:10:58.596760 systemd[1]: Starting ignition-quench.service... Nov 1 00:10:58.607947 systemd[1]: ignition-quench.service: Deactivated successfully. Nov 1 00:10:58.608344 systemd[1]: Finished ignition-quench.service. Nov 1 00:10:58.612000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:58.612000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:58.622075 kernel: audit: type=1130 audit(1761955858.612:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:58.626936 initrd-setup-root-after-ignition[1368]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Nov 1 00:10:58.631379 systemd[1]: Finished initrd-setup-root-after-ignition.service. Nov 1 00:10:58.635681 systemd[1]: Reached target ignition-complete.target. Nov 1 00:10:58.634000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:58.640553 systemd[1]: Starting initrd-parse-etc.service... Nov 1 00:10:58.668595 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Nov 1 00:10:58.669606 systemd[1]: Finished initrd-parse-etc.service. Nov 1 00:10:58.671000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:58.671000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:58.672904 systemd[1]: Reached target initrd-fs.target. Nov 1 00:10:58.676306 systemd[1]: Reached target initrd.target. Nov 1 00:10:58.679852 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Nov 1 00:10:58.681386 systemd[1]: Starting dracut-pre-pivot.service... Nov 1 00:10:58.711025 systemd[1]: Finished dracut-pre-pivot.service. Nov 1 00:10:58.711000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:58.714553 systemd[1]: Starting initrd-cleanup.service... Nov 1 00:10:58.736338 systemd[1]: Stopped target nss-lookup.target. Nov 1 00:10:58.740096 systemd[1]: Stopped target remote-cryptsetup.target. Nov 1 00:10:58.744134 systemd[1]: Stopped target timers.target. Nov 1 00:10:58.747587 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Nov 1 00:10:58.749901 systemd[1]: Stopped dracut-pre-pivot.service. Nov 1 00:10:58.752000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:58.753661 systemd[1]: Stopped target initrd.target. Nov 1 00:10:58.756888 systemd[1]: Stopped target basic.target. Nov 1 00:10:58.760108 systemd[1]: Stopped target ignition-complete.target. Nov 1 00:10:58.763876 systemd[1]: Stopped target ignition-diskful.target. Nov 1 00:10:58.767525 systemd[1]: Stopped target initrd-root-device.target. Nov 1 00:10:58.774767 systemd[1]: Stopped target remote-fs.target. Nov 1 00:10:58.782507 systemd[1]: Stopped target remote-fs-pre.target. Nov 1 00:10:58.790589 systemd[1]: Stopped target sysinit.target. Nov 1 00:10:58.794034 systemd[1]: Stopped target local-fs.target. Nov 1 00:10:58.797323 systemd[1]: Stopped target local-fs-pre.target. Nov 1 00:10:58.800835 systemd[1]: Stopped target swap.target. Nov 1 00:10:58.806456 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Nov 1 00:10:58.808785 systemd[1]: Stopped dracut-pre-mount.service. Nov 1 00:10:58.811000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:58.812396 systemd[1]: Stopped target cryptsetup.target. Nov 1 00:10:58.815790 systemd[1]: dracut-initqueue.service: Deactivated successfully. Nov 1 00:10:58.818004 systemd[1]: Stopped dracut-initqueue.service. Nov 1 00:10:58.820000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:58.821638 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Nov 1 00:10:58.824229 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Nov 1 00:10:58.827000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:58.828486 systemd[1]: ignition-files.service: Deactivated successfully. Nov 1 00:10:58.830702 systemd[1]: Stopped ignition-files.service. Nov 1 00:10:58.832000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:58.842763 iscsid[1193]: iscsid shutting down. Nov 1 00:10:58.835600 systemd[1]: Stopping ignition-mount.service... Nov 1 00:10:58.841337 systemd[1]: Stopping iscsid.service... Nov 1 00:10:58.849099 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Nov 1 00:10:58.852778 systemd[1]: Stopped kmod-static-nodes.service. Nov 1 00:10:58.862633 ignition[1381]: INFO : Ignition 2.14.0 Nov 1 00:10:58.862633 ignition[1381]: INFO : Stage: umount Nov 1 00:10:58.866254 ignition[1381]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Nov 1 00:10:58.866254 ignition[1381]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Nov 1 00:10:58.880000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:58.885332 ignition[1381]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Nov 1 00:10:58.888253 ignition[1381]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Nov 1 00:10:58.894572 ignition[1381]: INFO : PUT result: OK Nov 1 00:10:58.889053 systemd[1]: Stopping sysroot-boot.service... Nov 1 00:10:58.905197 ignition[1381]: INFO : umount: umount passed Nov 1 00:10:58.905197 ignition[1381]: INFO : Ignition finished successfully Nov 1 00:10:58.903014 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Nov 1 00:10:58.903332 systemd[1]: Stopped systemd-udev-trigger.service. Nov 1 00:10:58.917000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:58.918930 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Nov 1 00:10:58.924779 systemd[1]: Stopped dracut-pre-trigger.service. Nov 1 00:10:58.931000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:58.937643 systemd[1]: sysroot-boot.mount: Deactivated successfully. Nov 1 00:10:58.941379 systemd[1]: iscsid.service: Deactivated successfully. Nov 1 00:10:58.943427 systemd[1]: Stopped iscsid.service. Nov 1 00:10:58.945000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:58.947763 systemd[1]: ignition-mount.service: Deactivated successfully. Nov 1 00:10:58.950212 systemd[1]: Stopped ignition-mount.service. Nov 1 00:10:58.952000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:58.954674 systemd[1]: sysroot-boot.service: Deactivated successfully. Nov 1 00:10:58.956989 systemd[1]: Stopped sysroot-boot.service. Nov 1 00:10:58.958000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:58.960397 systemd[1]: ignition-disks.service: Deactivated successfully. Nov 1 00:10:58.966000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:58.960615 systemd[1]: Stopped ignition-disks.service. Nov 1 00:10:58.968012 systemd[1]: ignition-kargs.service: Deactivated successfully. Nov 1 00:10:58.968112 systemd[1]: Stopped ignition-kargs.service. Nov 1 00:10:58.977000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:58.978169 systemd[1]: ignition-fetch.service: Deactivated successfully. Nov 1 00:10:58.979000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:58.981000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:58.978253 systemd[1]: Stopped ignition-fetch.service. Nov 1 00:10:58.980234 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Nov 1 00:10:58.980315 systemd[1]: Stopped ignition-fetch-offline.service. Nov 1 00:10:58.982919 systemd[1]: Stopped target paths.target. Nov 1 00:10:58.991860 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Nov 1 00:10:58.996059 systemd[1]: Stopped systemd-ask-password-console.path. Nov 1 00:10:59.001769 systemd[1]: Stopped target slices.target. Nov 1 00:10:59.008000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:59.003454 systemd[1]: Stopped target sockets.target. Nov 1 00:10:59.005405 systemd[1]: iscsid.socket: Deactivated successfully. Nov 1 00:10:59.013000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:59.005490 systemd[1]: Closed iscsid.socket. Nov 1 00:10:59.021000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:59.022000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:59.007058 systemd[1]: ignition-setup.service: Deactivated successfully. Nov 1 00:10:59.025000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:59.007152 systemd[1]: Stopped ignition-setup.service. Nov 1 00:10:59.009297 systemd[1]: initrd-setup-root.service: Deactivated successfully. Nov 1 00:10:59.009390 systemd[1]: Stopped initrd-setup-root.service. Nov 1 00:10:59.016296 systemd[1]: Stopping iscsiuio.service... Nov 1 00:10:59.020744 systemd[1]: initrd-cleanup.service: Deactivated successfully. Nov 1 00:10:59.020951 systemd[1]: Finished initrd-cleanup.service. Nov 1 00:10:59.023906 systemd[1]: iscsiuio.service: Deactivated successfully. Nov 1 00:10:59.024156 systemd[1]: Stopped iscsiuio.service. Nov 1 00:10:59.027811 systemd[1]: Stopped target network.target. Nov 1 00:10:59.030123 systemd[1]: iscsiuio.socket: Deactivated successfully. Nov 1 00:10:59.030202 systemd[1]: Closed iscsiuio.socket. Nov 1 00:10:59.040341 systemd[1]: Stopping systemd-networkd.service... Nov 1 00:10:59.042655 systemd[1]: Stopping systemd-resolved.service... Nov 1 00:10:59.063000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:59.043509 systemd-networkd[1188]: eth0: DHCPv6 lease lost Nov 1 00:10:59.059070 systemd[1]: systemd-resolved.service: Deactivated successfully. Nov 1 00:10:59.060626 systemd[1]: Stopped systemd-resolved.service. Nov 1 00:10:59.068071 systemd[1]: systemd-networkd.service: Deactivated successfully. Nov 1 00:10:59.074004 systemd[1]: Stopped systemd-networkd.service. Nov 1 00:10:59.074000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:59.076000 audit: BPF prog-id=6 op=UNLOAD Nov 1 00:10:59.077923 systemd[1]: systemd-networkd.socket: Deactivated successfully. Nov 1 00:10:59.077000 audit: BPF prog-id=9 op=UNLOAD Nov 1 00:10:59.078099 systemd[1]: Closed systemd-networkd.socket. Nov 1 00:10:59.086919 systemd[1]: Stopping network-cleanup.service... Nov 1 00:10:59.090000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:59.092000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:59.094000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:59.089193 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Nov 1 00:10:59.089317 systemd[1]: Stopped parse-ip-for-networkd.service. Nov 1 00:10:59.091471 systemd[1]: systemd-sysctl.service: Deactivated successfully. Nov 1 00:10:59.091564 systemd[1]: Stopped systemd-sysctl.service. Nov 1 00:10:59.093626 systemd[1]: systemd-modules-load.service: Deactivated successfully. Nov 1 00:10:59.093716 systemd[1]: Stopped systemd-modules-load.service. Nov 1 00:10:59.109139 systemd[1]: Stopping systemd-udevd.service... Nov 1 00:10:59.117679 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Nov 1 00:10:59.132169 systemd[1]: network-cleanup.service: Deactivated successfully. Nov 1 00:10:59.132615 systemd[1]: Stopped network-cleanup.service. Nov 1 00:10:59.137000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:59.138771 systemd[1]: systemd-udevd.service: Deactivated successfully. Nov 1 00:10:59.144991 systemd[1]: Stopped systemd-udevd.service. Nov 1 00:10:59.147000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:59.148922 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Nov 1 00:10:59.151231 systemd[1]: Closed systemd-udevd-control.socket. Nov 1 00:10:59.155228 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Nov 1 00:10:59.155317 systemd[1]: Closed systemd-udevd-kernel.socket. Nov 1 00:10:59.161062 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Nov 1 00:10:59.161168 systemd[1]: Stopped dracut-pre-udev.service. Nov 1 00:10:59.163000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:59.165011 systemd[1]: dracut-cmdline.service: Deactivated successfully. Nov 1 00:10:59.169030 systemd[1]: Stopped dracut-cmdline.service. Nov 1 00:10:59.168000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:59.172295 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Nov 1 00:10:59.172376 systemd[1]: Stopped dracut-cmdline-ask.service. Nov 1 00:10:59.176000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:59.179199 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Nov 1 00:10:59.191624 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Nov 1 00:10:59.191746 systemd[1]: Stopped systemd-vconsole-setup.service. Nov 1 00:10:59.200000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:59.202124 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Nov 1 00:10:59.202485 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Nov 1 00:10:59.207000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:59.208000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:10:59.209384 systemd[1]: Reached target initrd-switch-root.target. Nov 1 00:10:59.215093 systemd[1]: Starting initrd-switch-root.service... Nov 1 00:10:59.230721 systemd[1]: Switching root. Nov 1 00:10:59.256635 systemd-journald[310]: Journal stopped Nov 1 00:11:05.428521 systemd-journald[310]: Received SIGTERM from PID 1 (systemd). Nov 1 00:11:05.428649 kernel: SELinux: Class mctp_socket not defined in policy. Nov 1 00:11:05.428696 kernel: SELinux: Class anon_inode not defined in policy. Nov 1 00:11:05.428729 kernel: SELinux: the above unknown classes and permissions will be allowed Nov 1 00:11:05.428761 kernel: SELinux: policy capability network_peer_controls=1 Nov 1 00:11:05.428793 kernel: SELinux: policy capability open_perms=1 Nov 1 00:11:05.428822 kernel: SELinux: policy capability extended_socket_class=1 Nov 1 00:11:05.428858 kernel: SELinux: policy capability always_check_network=0 Nov 1 00:11:05.428896 kernel: SELinux: policy capability cgroup_seclabel=1 Nov 1 00:11:05.428927 kernel: SELinux: policy capability nnp_nosuid_transition=1 Nov 1 00:11:05.428957 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Nov 1 00:11:05.429007 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Nov 1 00:11:05.429043 systemd[1]: Successfully loaded SELinux policy in 121.757ms. Nov 1 00:11:05.429098 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 20.229ms. Nov 1 00:11:05.429135 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Nov 1 00:11:05.429171 systemd[1]: Detected virtualization amazon. Nov 1 00:11:05.429201 systemd[1]: Detected architecture arm64. Nov 1 00:11:05.429232 systemd[1]: Detected first boot. Nov 1 00:11:05.429263 systemd[1]: Initializing machine ID from VM UUID. Nov 1 00:11:05.442670 kernel: kauditd_printk_skb: 41 callbacks suppressed Nov 1 00:11:05.442723 kernel: audit: type=1400 audit(1761955860.317:78): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Nov 1 00:11:05.442756 kernel: audit: type=1400 audit(1761955860.319:79): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Nov 1 00:11:05.442796 kernel: audit: type=1334 audit(1761955860.327:80): prog-id=10 op=LOAD Nov 1 00:11:05.442828 kernel: audit: type=1334 audit(1761955860.327:81): prog-id=10 op=UNLOAD Nov 1 00:11:05.442859 kernel: audit: type=1334 audit(1761955860.335:82): prog-id=11 op=LOAD Nov 1 00:11:05.442888 kernel: audit: type=1334 audit(1761955860.335:83): prog-id=11 op=UNLOAD Nov 1 00:11:05.442920 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Nov 1 00:11:05.442953 kernel: audit: type=1400 audit(1761955860.574:84): avc: denied { associate } for pid=1415 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Nov 1 00:11:05.443004 kernel: audit: type=1300 audit(1761955860.574:84): arch=c00000b7 syscall=5 success=yes exit=0 a0=400014589c a1=40000c6de0 a2=40000cd0c0 a3=32 items=0 ppid=1398 pid=1415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:05.443044 kernel: audit: type=1327 audit(1761955860.574:84): proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Nov 1 00:11:05.443078 kernel: audit: type=1400 audit(1761955860.578:85): avc: denied { associate } for pid=1415 comm="torcx-generator" name="bin" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Nov 1 00:11:05.443110 systemd[1]: Populated /etc with preset unit settings. Nov 1 00:11:05.443142 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Nov 1 00:11:05.443176 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Nov 1 00:11:05.443210 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Nov 1 00:11:05.443243 systemd[1]: initrd-switch-root.service: Deactivated successfully. Nov 1 00:11:05.443276 systemd[1]: Stopped initrd-switch-root.service. Nov 1 00:11:05.443306 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Nov 1 00:11:05.443337 systemd[1]: Created slice system-addon\x2dconfig.slice. Nov 1 00:11:05.443368 systemd[1]: Created slice system-addon\x2drun.slice. Nov 1 00:11:05.443402 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Nov 1 00:11:05.443432 systemd[1]: Created slice system-getty.slice. Nov 1 00:11:05.443463 systemd[1]: Created slice system-modprobe.slice. Nov 1 00:11:05.443505 systemd[1]: Created slice system-serial\x2dgetty.slice. Nov 1 00:11:05.443552 systemd[1]: Created slice system-system\x2dcloudinit.slice. Nov 1 00:11:05.443585 systemd[1]: Created slice system-systemd\x2dfsck.slice. Nov 1 00:11:05.443618 systemd[1]: Created slice user.slice. Nov 1 00:11:05.443651 systemd[1]: Started systemd-ask-password-console.path. Nov 1 00:11:05.443680 systemd[1]: Started systemd-ask-password-wall.path. Nov 1 00:11:05.443712 systemd[1]: Set up automount boot.automount. Nov 1 00:11:05.443741 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Nov 1 00:11:05.443772 systemd[1]: Stopped target initrd-switch-root.target. Nov 1 00:11:05.443806 systemd[1]: Stopped target initrd-fs.target. Nov 1 00:11:05.443835 systemd[1]: Stopped target initrd-root-fs.target. Nov 1 00:11:05.443868 systemd[1]: Reached target integritysetup.target. Nov 1 00:11:05.443899 systemd[1]: Reached target remote-cryptsetup.target. Nov 1 00:11:05.443931 systemd[1]: Reached target remote-fs.target. Nov 1 00:11:05.443961 systemd[1]: Reached target slices.target. Nov 1 00:11:05.444013 systemd[1]: Reached target swap.target. Nov 1 00:11:05.444045 systemd[1]: Reached target torcx.target. Nov 1 00:11:05.444077 systemd[1]: Reached target veritysetup.target. Nov 1 00:11:05.444108 systemd[1]: Listening on systemd-coredump.socket. Nov 1 00:11:05.444142 systemd[1]: Listening on systemd-initctl.socket. Nov 1 00:11:05.444173 systemd[1]: Listening on systemd-networkd.socket. Nov 1 00:11:05.444209 systemd[1]: Listening on systemd-udevd-control.socket. Nov 1 00:11:05.444239 systemd[1]: Listening on systemd-udevd-kernel.socket. Nov 1 00:11:05.444268 systemd[1]: Listening on systemd-userdbd.socket. Nov 1 00:11:05.444299 systemd[1]: Mounting dev-hugepages.mount... Nov 1 00:11:05.444328 systemd[1]: Mounting dev-mqueue.mount... Nov 1 00:11:05.444357 systemd[1]: Mounting media.mount... Nov 1 00:11:05.444387 systemd[1]: Mounting sys-kernel-debug.mount... Nov 1 00:11:05.444422 systemd[1]: Mounting sys-kernel-tracing.mount... Nov 1 00:11:05.444452 systemd[1]: Mounting tmp.mount... Nov 1 00:11:05.444481 systemd[1]: Starting flatcar-tmpfiles.service... Nov 1 00:11:05.444513 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:11:05.444555 systemd[1]: Starting kmod-static-nodes.service... Nov 1 00:11:05.444592 systemd[1]: Starting modprobe@configfs.service... Nov 1 00:11:05.444622 systemd[1]: Starting modprobe@dm_mod.service... Nov 1 00:11:05.444652 systemd[1]: Starting modprobe@drm.service... Nov 1 00:11:05.444682 systemd[1]: Starting modprobe@efi_pstore.service... Nov 1 00:11:05.444716 systemd[1]: Starting modprobe@fuse.service... Nov 1 00:11:05.444748 systemd[1]: Starting modprobe@loop.service... Nov 1 00:11:05.444779 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Nov 1 00:11:05.444811 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Nov 1 00:11:05.444840 systemd[1]: Stopped systemd-fsck-root.service. Nov 1 00:11:05.444873 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Nov 1 00:11:05.444903 systemd[1]: Stopped systemd-fsck-usr.service. Nov 1 00:11:05.444935 systemd[1]: Stopped systemd-journald.service. Nov 1 00:11:05.444964 systemd[1]: Starting systemd-journald.service... Nov 1 00:11:05.445017 kernel: loop: module loaded Nov 1 00:11:05.445049 systemd[1]: Starting systemd-modules-load.service... Nov 1 00:11:05.445079 systemd[1]: Starting systemd-network-generator.service... Nov 1 00:11:05.445110 systemd[1]: Starting systemd-remount-fs.service... Nov 1 00:11:05.445139 systemd[1]: Starting systemd-udev-trigger.service... Nov 1 00:11:05.445170 systemd[1]: verity-setup.service: Deactivated successfully. Nov 1 00:11:05.445200 systemd[1]: Stopped verity-setup.service. Nov 1 00:11:05.445229 systemd[1]: Mounted dev-hugepages.mount. Nov 1 00:11:05.445261 systemd[1]: Mounted dev-mqueue.mount. Nov 1 00:11:05.445294 systemd[1]: Mounted media.mount. Nov 1 00:11:05.445325 systemd[1]: Mounted sys-kernel-debug.mount. Nov 1 00:11:05.445356 systemd[1]: Mounted sys-kernel-tracing.mount. Nov 1 00:11:05.445386 systemd[1]: Mounted tmp.mount. Nov 1 00:11:05.445415 systemd[1]: Finished kmod-static-nodes.service. Nov 1 00:11:05.445444 kernel: fuse: init (API version 7.34) Nov 1 00:11:05.445472 kernel: kauditd_printk_skb: 31 callbacks suppressed Nov 1 00:11:05.445502 kernel: audit: type=1130 audit(1761955865.341:112): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:05.445538 systemd[1]: modprobe@configfs.service: Deactivated successfully. Nov 1 00:11:05.445572 systemd[1]: Finished modprobe@configfs.service. Nov 1 00:11:05.445604 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Nov 1 00:11:05.445634 kernel: audit: type=1130 audit(1761955865.363:113): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:05.445665 systemd[1]: Finished modprobe@dm_mod.service. Nov 1 00:11:05.445695 systemd[1]: modprobe@drm.service: Deactivated successfully. Nov 1 00:11:05.445729 kernel: audit: type=1131 audit(1761955865.363:114): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:05.445758 systemd[1]: Finished modprobe@drm.service. Nov 1 00:11:05.445789 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Nov 1 00:11:05.445818 systemd[1]: Finished modprobe@efi_pstore.service. Nov 1 00:11:05.445848 kernel: audit: type=1130 audit(1761955865.385:115): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:05.445877 systemd[1]: modprobe@fuse.service: Deactivated successfully. Nov 1 00:11:05.445907 systemd[1]: Finished modprobe@fuse.service. Nov 1 00:11:05.445940 kernel: audit: type=1131 audit(1761955865.385:116): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:05.460124 systemd[1]: modprobe@loop.service: Deactivated successfully. Nov 1 00:11:05.460188 kernel: audit: type=1130 audit(1761955865.403:117): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:05.460221 systemd[1]: Finished modprobe@loop.service. Nov 1 00:11:05.460262 systemd-journald[1493]: Journal started Nov 1 00:11:05.460376 systemd-journald[1493]: Runtime Journal (/run/log/journal/ec23821518dd23d0e5715e58219a5a69) is 8.0M, max 75.4M, 67.4M free. Nov 1 00:11:00.128000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Nov 1 00:11:00.317000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Nov 1 00:11:00.319000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Nov 1 00:11:00.327000 audit: BPF prog-id=10 op=LOAD Nov 1 00:11:00.327000 audit: BPF prog-id=10 op=UNLOAD Nov 1 00:11:00.335000 audit: BPF prog-id=11 op=LOAD Nov 1 00:11:00.335000 audit: BPF prog-id=11 op=UNLOAD Nov 1 00:11:00.574000 audit[1415]: AVC avc: denied { associate } for pid=1415 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Nov 1 00:11:00.574000 audit[1415]: SYSCALL arch=c00000b7 syscall=5 success=yes exit=0 a0=400014589c a1=40000c6de0 a2=40000cd0c0 a3=32 items=0 ppid=1398 pid=1415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:00.574000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Nov 1 00:11:00.578000 audit[1415]: AVC avc: denied { associate } for pid=1415 comm="torcx-generator" name="bin" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Nov 1 00:11:00.578000 audit[1415]: SYSCALL arch=c00000b7 syscall=34 success=yes exit=0 a0=ffffffffffffff9c a1=4000145979 a2=1ed a3=0 items=2 ppid=1398 pid=1415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:00.578000 audit: CWD cwd="/" Nov 1 00:11:00.578000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:11:00.578000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:11:00.578000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Nov 1 00:11:04.937000 audit: BPF prog-id=12 op=LOAD Nov 1 00:11:04.938000 audit: BPF prog-id=3 op=UNLOAD Nov 1 00:11:04.938000 audit: BPF prog-id=13 op=LOAD Nov 1 00:11:04.938000 audit: BPF prog-id=14 op=LOAD Nov 1 00:11:04.938000 audit: BPF prog-id=4 op=UNLOAD Nov 1 00:11:04.938000 audit: BPF prog-id=5 op=UNLOAD Nov 1 00:11:04.940000 audit: BPF prog-id=15 op=LOAD Nov 1 00:11:04.940000 audit: BPF prog-id=12 op=UNLOAD Nov 1 00:11:04.940000 audit: BPF prog-id=16 op=LOAD Nov 1 00:11:04.940000 audit: BPF prog-id=17 op=LOAD Nov 1 00:11:04.940000 audit: BPF prog-id=13 op=UNLOAD Nov 1 00:11:04.941000 audit: BPF prog-id=14 op=UNLOAD Nov 1 00:11:04.943000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:04.950000 audit: BPF prog-id=15 op=UNLOAD Nov 1 00:11:04.952000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:04.952000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:05.227000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:05.233000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:05.244000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:05.244000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:05.246000 audit: BPF prog-id=18 op=LOAD Nov 1 00:11:05.246000 audit: BPF prog-id=19 op=LOAD Nov 1 00:11:05.246000 audit: BPF prog-id=20 op=LOAD Nov 1 00:11:05.246000 audit: BPF prog-id=16 op=UNLOAD Nov 1 00:11:05.246000 audit: BPF prog-id=17 op=UNLOAD Nov 1 00:11:05.298000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:05.341000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:05.476655 kernel: audit: type=1131 audit(1761955865.403:118): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:05.476709 systemd[1]: Started systemd-journald.service. Nov 1 00:11:05.363000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:05.363000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:05.385000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:05.385000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:05.403000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:05.403000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:00.560842 /usr/lib/systemd/system-generators/torcx-generator[1415]: time="2025-11-01T00:11:00Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Nov 1 00:11:04.935761 systemd[1]: Queued start job for default target multi-user.target. Nov 1 00:11:00.563319 /usr/lib/systemd/system-generators/torcx-generator[1415]: time="2025-11-01T00:11:00Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Nov 1 00:11:04.935781 systemd[1]: Unnecessary job was removed for dev-nvme0n1p6.device. Nov 1 00:11:00.563368 /usr/lib/systemd/system-generators/torcx-generator[1415]: time="2025-11-01T00:11:00Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Nov 1 00:11:04.943549 systemd[1]: systemd-journald.service: Deactivated successfully. Nov 1 00:11:00.563433 /usr/lib/systemd/system-generators/torcx-generator[1415]: time="2025-11-01T00:11:00Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Nov 1 00:11:00.563459 /usr/lib/systemd/system-generators/torcx-generator[1415]: time="2025-11-01T00:11:00Z" level=debug msg="skipped missing lower profile" missing profile=oem Nov 1 00:11:00.563522 /usr/lib/systemd/system-generators/torcx-generator[1415]: time="2025-11-01T00:11:00Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Nov 1 00:11:00.563553 /usr/lib/systemd/system-generators/torcx-generator[1415]: time="2025-11-01T00:11:00Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Nov 1 00:11:00.563955 /usr/lib/systemd/system-generators/torcx-generator[1415]: time="2025-11-01T00:11:00Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Nov 1 00:11:05.480799 systemd[1]: Finished systemd-modules-load.service. Nov 1 00:11:00.564251 /usr/lib/systemd/system-generators/torcx-generator[1415]: time="2025-11-01T00:11:00Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Nov 1 00:11:05.483506 systemd[1]: Finished systemd-network-generator.service. Nov 1 00:11:00.564289 /usr/lib/systemd/system-generators/torcx-generator[1415]: time="2025-11-01T00:11:00Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Nov 1 00:11:05.486148 systemd[1]: Finished systemd-remount-fs.service. Nov 1 00:11:00.565486 /usr/lib/systemd/system-generators/torcx-generator[1415]: time="2025-11-01T00:11:00Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Nov 1 00:11:05.488989 systemd[1]: Reached target network-pre.target. Nov 1 00:11:00.565568 /usr/lib/systemd/system-generators/torcx-generator[1415]: time="2025-11-01T00:11:00Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Nov 1 00:11:05.506786 kernel: audit: type=1130 audit(1761955865.421:119): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:05.506864 kernel: audit: type=1131 audit(1761955865.422:120): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:05.421000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:05.422000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:05.495109 systemd[1]: Mounting sys-fs-fuse-connections.mount... Nov 1 00:11:00.565613 /usr/lib/systemd/system-generators/torcx-generator[1415]: time="2025-11-01T00:11:00Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.8: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.8 Nov 1 00:11:00.565653 /usr/lib/systemd/system-generators/torcx-generator[1415]: time="2025-11-01T00:11:00Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Nov 1 00:11:00.565699 /usr/lib/systemd/system-generators/torcx-generator[1415]: time="2025-11-01T00:11:00Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.8: no such file or directory" path=/var/lib/torcx/store/3510.3.8 Nov 1 00:11:00.565738 /usr/lib/systemd/system-generators/torcx-generator[1415]: time="2025-11-01T00:11:00Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Nov 1 00:11:04.025846 /usr/lib/systemd/system-generators/torcx-generator[1415]: time="2025-11-01T00:11:04Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Nov 1 00:11:04.026393 /usr/lib/systemd/system-generators/torcx-generator[1415]: time="2025-11-01T00:11:04Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Nov 1 00:11:04.026644 /usr/lib/systemd/system-generators/torcx-generator[1415]: time="2025-11-01T00:11:04Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Nov 1 00:11:04.027102 /usr/lib/systemd/system-generators/torcx-generator[1415]: time="2025-11-01T00:11:04Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Nov 1 00:11:04.027208 /usr/lib/systemd/system-generators/torcx-generator[1415]: time="2025-11-01T00:11:04Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Nov 1 00:11:04.027346 /usr/lib/systemd/system-generators/torcx-generator[1415]: time="2025-11-01T00:11:04Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Nov 1 00:11:05.522918 kernel: audit: type=1305 audit(1761955865.425:121): op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Nov 1 00:11:05.425000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Nov 1 00:11:05.522701 systemd[1]: Mounting sys-kernel-config.mount... Nov 1 00:11:05.524699 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Nov 1 00:11:05.531236 systemd[1]: Starting systemd-hwdb-update.service... Nov 1 00:11:05.425000 audit[1493]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=6 a1=ffffe9bada80 a2=4000 a3=1 items=0 ppid=1 pid=1493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:05.425000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Nov 1 00:11:05.432000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:05.432000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:05.472000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:05.472000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:05.479000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:05.479000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:05.479000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:05.485000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:05.535585 systemd[1]: Starting systemd-journal-flush.service... Nov 1 00:11:05.538276 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Nov 1 00:11:05.540619 systemd[1]: Starting systemd-random-seed.service... Nov 1 00:11:05.542540 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Nov 1 00:11:05.544798 systemd[1]: Starting systemd-sysctl.service... Nov 1 00:11:05.551000 systemd[1]: Finished flatcar-tmpfiles.service. Nov 1 00:11:05.553000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:05.554525 systemd[1]: Mounted sys-fs-fuse-connections.mount. Nov 1 00:11:05.557045 systemd[1]: Mounted sys-kernel-config.mount. Nov 1 00:11:05.563669 systemd[1]: Starting systemd-sysusers.service... Nov 1 00:11:05.581408 systemd-journald[1493]: Time spent on flushing to /var/log/journal/ec23821518dd23d0e5715e58219a5a69 is 81.073ms for 1147 entries. Nov 1 00:11:05.581408 systemd-journald[1493]: System Journal (/var/log/journal/ec23821518dd23d0e5715e58219a5a69) is 8.0M, max 195.6M, 187.6M free. Nov 1 00:11:05.685625 systemd-journald[1493]: Received client request to flush runtime journal. Nov 1 00:11:05.619000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:05.645000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:05.683000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:05.618074 systemd[1]: Finished systemd-random-seed.service. Nov 1 00:11:05.620322 systemd[1]: Reached target first-boot-complete.target. Nov 1 00:11:05.646807 systemd[1]: Finished systemd-sysctl.service. Nov 1 00:11:05.682650 systemd[1]: Finished systemd-udev-trigger.service. Nov 1 00:11:05.686832 systemd[1]: Starting systemd-udev-settle.service... Nov 1 00:11:05.693747 systemd[1]: Finished systemd-journal-flush.service. Nov 1 00:11:05.694000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:05.706861 udevadm[1534]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Nov 1 00:11:05.833176 systemd[1]: Finished systemd-sysusers.service. Nov 1 00:11:05.832000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:06.445000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:06.446000 audit: BPF prog-id=21 op=LOAD Nov 1 00:11:06.446000 audit: BPF prog-id=22 op=LOAD Nov 1 00:11:06.446000 audit: BPF prog-id=7 op=UNLOAD Nov 1 00:11:06.446000 audit: BPF prog-id=8 op=UNLOAD Nov 1 00:11:06.444307 systemd[1]: Finished systemd-hwdb-update.service. Nov 1 00:11:06.448641 systemd[1]: Starting systemd-udevd.service... Nov 1 00:11:06.485328 systemd-udevd[1535]: Using default interface naming scheme 'v252'. Nov 1 00:11:06.544827 systemd[1]: Started systemd-udevd.service. Nov 1 00:11:06.545000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:06.547000 audit: BPF prog-id=23 op=LOAD Nov 1 00:11:06.549817 systemd[1]: Starting systemd-networkd.service... Nov 1 00:11:06.566000 audit: BPF prog-id=24 op=LOAD Nov 1 00:11:06.567000 audit: BPF prog-id=25 op=LOAD Nov 1 00:11:06.567000 audit: BPF prog-id=26 op=LOAD Nov 1 00:11:06.569521 systemd[1]: Starting systemd-userdbd.service... Nov 1 00:11:06.637954 systemd[1]: Started systemd-userdbd.service. Nov 1 00:11:06.638000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:06.646087 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Nov 1 00:11:06.664022 (udev-worker)[1540]: Network interface NamePolicy= disabled on kernel command line. Nov 1 00:11:06.822820 systemd-networkd[1539]: lo: Link UP Nov 1 00:11:06.822844 systemd-networkd[1539]: lo: Gained carrier Nov 1 00:11:06.823780 systemd-networkd[1539]: Enumeration completed Nov 1 00:11:06.823947 systemd[1]: Started systemd-networkd.service. Nov 1 00:11:06.824000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:06.828810 systemd[1]: Starting systemd-networkd-wait-online.service... Nov 1 00:11:06.831483 systemd-networkd[1539]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Nov 1 00:11:06.839032 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Nov 1 00:11:06.839627 systemd-networkd[1539]: eth0: Link UP Nov 1 00:11:06.840006 systemd-networkd[1539]: eth0: Gained carrier Nov 1 00:11:06.850223 systemd-networkd[1539]: eth0: DHCPv4 address 172.31.24.47/20, gateway 172.31.16.1 acquired from 172.31.16.1 Nov 1 00:11:07.019334 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Nov 1 00:11:07.027709 systemd[1]: Finished systemd-udev-settle.service. Nov 1 00:11:07.028000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:07.032051 systemd[1]: Starting lvm2-activation-early.service... Nov 1 00:11:07.080122 lvm[1653]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Nov 1 00:11:07.115558 systemd[1]: Finished lvm2-activation-early.service. Nov 1 00:11:07.117803 systemd[1]: Reached target cryptsetup.target. Nov 1 00:11:07.116000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:07.121996 systemd[1]: Starting lvm2-activation.service... Nov 1 00:11:07.130763 lvm[1654]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Nov 1 00:11:07.166655 systemd[1]: Finished lvm2-activation.service. Nov 1 00:11:07.168762 systemd[1]: Reached target local-fs-pre.target. Nov 1 00:11:07.167000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:07.170883 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Nov 1 00:11:07.170941 systemd[1]: Reached target local-fs.target. Nov 1 00:11:07.173083 systemd[1]: Reached target machines.target. Nov 1 00:11:07.177149 systemd[1]: Starting ldconfig.service... Nov 1 00:11:07.180314 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:11:07.180430 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:11:07.182665 systemd[1]: Starting systemd-boot-update.service... Nov 1 00:11:07.187027 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Nov 1 00:11:07.193725 systemd[1]: Starting systemd-machine-id-commit.service... Nov 1 00:11:07.199600 systemd[1]: Starting systemd-sysext.service... Nov 1 00:11:07.218723 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1656 (bootctl) Nov 1 00:11:07.221646 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Nov 1 00:11:07.239299 systemd[1]: Unmounting usr-share-oem.mount... Nov 1 00:11:07.251632 systemd[1]: usr-share-oem.mount: Deactivated successfully. Nov 1 00:11:07.252091 systemd[1]: Unmounted usr-share-oem.mount. Nov 1 00:11:07.280191 kernel: loop0: detected capacity change from 0 to 211168 Nov 1 00:11:07.308713 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Nov 1 00:11:07.307000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:07.383073 systemd-fsck[1667]: fsck.fat 4.2 (2021-01-31) Nov 1 00:11:07.383073 systemd-fsck[1667]: /dev/nvme0n1p1: 236 files, 117310/258078 clusters Nov 1 00:11:07.387266 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Nov 1 00:11:07.388000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:07.392672 systemd[1]: Mounting boot.mount... Nov 1 00:11:07.413174 systemd[1]: Mounted boot.mount. Nov 1 00:11:07.451579 systemd[1]: Finished systemd-boot-update.service. Nov 1 00:11:07.452000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:07.545908 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Nov 1 00:11:07.546934 systemd[1]: Finished systemd-machine-id-commit.service. Nov 1 00:11:07.546000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:07.593015 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Nov 1 00:11:07.628020 kernel: loop1: detected capacity change from 0 to 211168 Nov 1 00:11:07.649864 (sd-sysext)[1682]: Using extensions 'kubernetes'. Nov 1 00:11:07.652420 (sd-sysext)[1682]: Merged extensions into '/usr'. Nov 1 00:11:07.690339 systemd[1]: Mounting usr-share-oem.mount... Nov 1 00:11:07.692444 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:11:07.695180 systemd[1]: Starting modprobe@dm_mod.service... Nov 1 00:11:07.701489 systemd[1]: Starting modprobe@efi_pstore.service... Nov 1 00:11:07.706129 systemd[1]: Starting modprobe@loop.service... Nov 1 00:11:07.708018 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:11:07.708323 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:11:07.717340 systemd[1]: Mounted usr-share-oem.mount. Nov 1 00:11:07.719963 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Nov 1 00:11:07.720303 systemd[1]: Finished modprobe@dm_mod.service. Nov 1 00:11:07.721000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:07.721000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:07.722899 systemd[1]: modprobe@loop.service: Deactivated successfully. Nov 1 00:11:07.723232 systemd[1]: Finished modprobe@loop.service. Nov 1 00:11:07.724000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:07.724000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:07.725909 systemd[1]: Finished systemd-sysext.service. Nov 1 00:11:07.727000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:07.728651 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Nov 1 00:11:07.728948 systemd[1]: Finished modprobe@efi_pstore.service. Nov 1 00:11:07.730000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:07.730000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:07.735068 systemd[1]: Starting ensure-sysext.service... Nov 1 00:11:07.738337 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Nov 1 00:11:07.738460 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Nov 1 00:11:07.740791 systemd[1]: Starting systemd-tmpfiles-setup.service... Nov 1 00:11:07.751617 systemd[1]: Reloading. Nov 1 00:11:07.793701 systemd-tmpfiles[1689]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Nov 1 00:11:07.843683 systemd-tmpfiles[1689]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Nov 1 00:11:07.860915 /usr/lib/systemd/system-generators/torcx-generator[1711]: time="2025-11-01T00:11:07Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Nov 1 00:11:07.861002 /usr/lib/systemd/system-generators/torcx-generator[1711]: time="2025-11-01T00:11:07Z" level=info msg="torcx already run" Nov 1 00:11:07.873338 systemd-tmpfiles[1689]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Nov 1 00:11:08.064450 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Nov 1 00:11:08.064755 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Nov 1 00:11:08.104651 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Nov 1 00:11:08.253000 audit: BPF prog-id=27 op=LOAD Nov 1 00:11:08.253000 audit: BPF prog-id=18 op=UNLOAD Nov 1 00:11:08.254000 audit: BPF prog-id=28 op=LOAD Nov 1 00:11:08.254000 audit: BPF prog-id=29 op=LOAD Nov 1 00:11:08.254000 audit: BPF prog-id=19 op=UNLOAD Nov 1 00:11:08.254000 audit: BPF prog-id=20 op=UNLOAD Nov 1 00:11:08.257000 audit: BPF prog-id=30 op=LOAD Nov 1 00:11:08.257000 audit: BPF prog-id=24 op=UNLOAD Nov 1 00:11:08.257000 audit: BPF prog-id=31 op=LOAD Nov 1 00:11:08.258000 audit: BPF prog-id=32 op=LOAD Nov 1 00:11:08.258000 audit: BPF prog-id=25 op=UNLOAD Nov 1 00:11:08.258000 audit: BPF prog-id=26 op=UNLOAD Nov 1 00:11:08.260000 audit: BPF prog-id=33 op=LOAD Nov 1 00:11:08.260000 audit: BPF prog-id=34 op=LOAD Nov 1 00:11:08.260000 audit: BPF prog-id=21 op=UNLOAD Nov 1 00:11:08.261000 audit: BPF prog-id=22 op=UNLOAD Nov 1 00:11:08.266000 audit: BPF prog-id=35 op=LOAD Nov 1 00:11:08.266000 audit: BPF prog-id=23 op=UNLOAD Nov 1 00:11:08.280515 systemd[1]: Finished systemd-tmpfiles-setup.service. Nov 1 00:11:08.281000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:08.289723 systemd[1]: Starting audit-rules.service... Nov 1 00:11:08.296051 systemd[1]: Starting clean-ca-certificates.service... Nov 1 00:11:08.304000 audit: BPF prog-id=36 op=LOAD Nov 1 00:11:08.301294 systemd[1]: Starting systemd-journal-catalog-update.service... Nov 1 00:11:08.307706 systemd[1]: Starting systemd-resolved.service... Nov 1 00:11:08.311000 audit: BPF prog-id=37 op=LOAD Nov 1 00:11:08.313873 systemd[1]: Starting systemd-timesyncd.service... Nov 1 00:11:08.319595 systemd[1]: Starting systemd-update-utmp.service... Nov 1 00:11:08.330346 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:11:08.334957 systemd[1]: Starting modprobe@dm_mod.service... Nov 1 00:11:08.339296 systemd[1]: Starting modprobe@efi_pstore.service... Nov 1 00:11:08.344604 systemd[1]: Starting modprobe@loop.service... Nov 1 00:11:08.346373 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:11:08.346677 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:11:08.351705 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:11:08.352436 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:11:08.352701 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:11:08.360593 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:11:08.366560 systemd[1]: Starting modprobe@drm.service... Nov 1 00:11:08.368545 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:11:08.368860 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:11:08.370092 systemd-networkd[1539]: eth0: Gained IPv6LL Nov 1 00:11:08.376654 systemd[1]: Finished systemd-networkd-wait-online.service. Nov 1 00:11:08.377000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:08.379733 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Nov 1 00:11:08.381000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:08.381000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:08.380076 systemd[1]: Finished modprobe@dm_mod.service. Nov 1 00:11:08.384749 systemd[1]: Finished ensure-sysext.service. Nov 1 00:11:08.391194 systemd[1]: Finished clean-ca-certificates.service. Nov 1 00:11:08.389000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:08.392000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:08.393931 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Nov 1 00:11:08.394280 systemd[1]: Finished modprobe@efi_pstore.service. Nov 1 00:11:08.395000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:08.395000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:08.396813 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Nov 1 00:11:08.396861 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Nov 1 00:11:08.397000 audit[1771]: SYSTEM_BOOT pid=1771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Nov 1 00:11:08.406791 systemd[1]: Finished systemd-update-utmp.service. Nov 1 00:11:08.407000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:08.410805 systemd[1]: modprobe@loop.service: Deactivated successfully. Nov 1 00:11:08.411141 systemd[1]: Finished modprobe@loop.service. Nov 1 00:11:08.413760 systemd[1]: modprobe@drm.service: Deactivated successfully. Nov 1 00:11:08.414151 systemd[1]: Finished modprobe@drm.service. Nov 1 00:11:08.412000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:08.412000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:08.415000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:08.415000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:08.416326 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Nov 1 00:11:08.459269 systemd[1]: Finished systemd-journal-catalog-update.service. Nov 1 00:11:08.460000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:08.546289 systemd[1]: Started systemd-timesyncd.service. Nov 1 00:11:08.548413 systemd[1]: Reached target time-set.target. Nov 1 00:11:08.547000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:08.558000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Nov 1 00:11:08.558000 audit[1791]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffd1db9ba0 a2=420 a3=0 items=0 ppid=1766 pid=1791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:08.558000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Nov 1 00:11:08.560820 augenrules[1791]: No rules Nov 1 00:11:08.562423 systemd[1]: Finished audit-rules.service. Nov 1 00:11:08.592681 systemd-timesyncd[1770]: Contacted time server 23.186.168.131:123 (0.flatcar.pool.ntp.org). Nov 1 00:11:08.593360 systemd-timesyncd[1770]: Initial clock synchronization to Sat 2025-11-01 00:11:08.341999 UTC. Nov 1 00:11:08.594109 systemd-resolved[1769]: Positive Trust Anchors: Nov 1 00:11:08.594133 systemd-resolved[1769]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Nov 1 00:11:08.594186 systemd-resolved[1769]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Nov 1 00:11:08.659146 systemd-resolved[1769]: Defaulting to hostname 'linux'. Nov 1 00:11:08.662258 systemd[1]: Started systemd-resolved.service. Nov 1 00:11:08.664322 systemd[1]: Reached target network.target. Nov 1 00:11:08.666122 systemd[1]: Reached target network-online.target. Nov 1 00:11:08.668045 systemd[1]: Reached target nss-lookup.target. Nov 1 00:11:08.795054 ldconfig[1655]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Nov 1 00:11:08.802481 systemd[1]: Finished ldconfig.service. Nov 1 00:11:08.806589 systemd[1]: Starting systemd-update-done.service... Nov 1 00:11:08.821402 systemd[1]: Finished systemd-update-done.service. Nov 1 00:11:08.823561 systemd[1]: Reached target sysinit.target. Nov 1 00:11:08.825516 systemd[1]: Started motdgen.path. Nov 1 00:11:08.827178 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Nov 1 00:11:08.829894 systemd[1]: Started logrotate.timer. Nov 1 00:11:08.831625 systemd[1]: Started mdadm.timer. Nov 1 00:11:08.833176 systemd[1]: Started systemd-tmpfiles-clean.timer. Nov 1 00:11:08.835065 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Nov 1 00:11:08.835114 systemd[1]: Reached target paths.target. Nov 1 00:11:08.836765 systemd[1]: Reached target timers.target. Nov 1 00:11:08.839588 systemd[1]: Listening on dbus.socket. Nov 1 00:11:08.843421 systemd[1]: Starting docker.socket... Nov 1 00:11:08.850209 systemd[1]: Listening on sshd.socket. Nov 1 00:11:08.852199 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:11:08.853141 systemd[1]: Listening on docker.socket. Nov 1 00:11:08.855036 systemd[1]: Reached target sockets.target. Nov 1 00:11:08.856855 systemd[1]: Reached target basic.target. Nov 1 00:11:08.858601 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Nov 1 00:11:08.858677 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Nov 1 00:11:08.860916 systemd[1]: Started amazon-ssm-agent.service. Nov 1 00:11:08.866442 systemd[1]: Starting containerd.service... Nov 1 00:11:08.871382 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Nov 1 00:11:08.877821 systemd[1]: Starting dbus.service... Nov 1 00:11:08.881635 systemd[1]: Starting enable-oem-cloudinit.service... Nov 1 00:11:08.894886 systemd[1]: Starting extend-filesystems.service... Nov 1 00:11:08.896849 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Nov 1 00:11:08.901173 systemd[1]: Starting kubelet.service... Nov 1 00:11:08.984734 jq[1803]: false Nov 1 00:11:08.919308 systemd[1]: Starting motdgen.service... Nov 1 00:11:08.923283 systemd[1]: Started nvidia.service. Nov 1 00:11:08.928616 systemd[1]: Starting prepare-helm.service... Nov 1 00:11:08.934533 systemd[1]: Starting ssh-key-proc-cmdline.service... Nov 1 00:11:08.940858 systemd[1]: Starting sshd-keygen.service... Nov 1 00:11:08.960298 systemd[1]: Starting systemd-logind.service... Nov 1 00:11:08.962040 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:11:08.962173 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Nov 1 00:11:08.963659 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Nov 1 00:11:08.965322 systemd[1]: Starting update-engine.service... Nov 1 00:11:08.969384 systemd[1]: Starting update-ssh-keys-after-ignition.service... Nov 1 00:11:08.977221 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Nov 1 00:11:08.977670 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Nov 1 00:11:09.033394 jq[1815]: true Nov 1 00:11:09.073409 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Nov 1 00:11:09.073790 systemd[1]: Finished ssh-key-proc-cmdline.service. Nov 1 00:11:09.108810 tar[1818]: linux-arm64/LICENSE Nov 1 00:11:09.109281 tar[1818]: linux-arm64/helm Nov 1 00:11:09.137769 systemd[1]: motdgen.service: Deactivated successfully. Nov 1 00:11:09.138217 systemd[1]: Finished motdgen.service. Nov 1 00:11:09.151064 jq[1830]: true Nov 1 00:11:09.199505 extend-filesystems[1804]: Found loop1 Nov 1 00:11:09.199505 extend-filesystems[1804]: Found nvme0n1 Nov 1 00:11:09.199505 extend-filesystems[1804]: Found nvme0n1p1 Nov 1 00:11:09.199505 extend-filesystems[1804]: Found nvme0n1p2 Nov 1 00:11:09.199505 extend-filesystems[1804]: Found nvme0n1p3 Nov 1 00:11:09.199505 extend-filesystems[1804]: Found usr Nov 1 00:11:09.199505 extend-filesystems[1804]: Found nvme0n1p4 Nov 1 00:11:09.199505 extend-filesystems[1804]: Found nvme0n1p6 Nov 1 00:11:09.199505 extend-filesystems[1804]: Found nvme0n1p7 Nov 1 00:11:09.199505 extend-filesystems[1804]: Found nvme0n1p9 Nov 1 00:11:09.199505 extend-filesystems[1804]: Checking size of /dev/nvme0n1p9 Nov 1 00:11:09.232406 dbus-daemon[1802]: [system] SELinux support is enabled Nov 1 00:11:09.232741 systemd[1]: Started dbus.service. Nov 1 00:11:09.237627 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Nov 1 00:11:09.237695 systemd[1]: Reached target system-config.target. Nov 1 00:11:09.239668 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Nov 1 00:11:09.239723 systemd[1]: Reached target user-config.target. Nov 1 00:11:09.274912 dbus-daemon[1802]: [system] Activating via systemd: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service' requested by ':1.1' (uid=244 pid=1539 comm="/usr/lib/systemd/systemd-networkd" label="system_u:system_r:kernel_t:s0") Nov 1 00:11:09.281093 systemd[1]: Starting systemd-hostnamed.service... Nov 1 00:11:09.336141 extend-filesystems[1804]: Resized partition /dev/nvme0n1p9 Nov 1 00:11:09.374158 extend-filesystems[1873]: resize2fs 1.46.5 (30-Dec-2021) Nov 1 00:11:09.394128 bash[1872]: Updated "/home/core/.ssh/authorized_keys" Nov 1 00:11:09.399483 amazon-ssm-agent[1799]: 2025/11/01 00:11:09 Failed to load instance info from vault. RegistrationKey does not exist. Nov 1 00:11:09.424631 kernel: EXT4-fs (nvme0n1p9): resizing filesystem from 553472 to 3587067 blocks Nov 1 00:11:09.424553 systemd[1]: Finished update-ssh-keys-after-ignition.service. Nov 1 00:11:09.426945 amazon-ssm-agent[1799]: Initializing new seelog logger Nov 1 00:11:09.428200 amazon-ssm-agent[1799]: New Seelog Logger Creation Complete Nov 1 00:11:09.430686 amazon-ssm-agent[1799]: 2025/11/01 00:11:09 Found config file at /etc/amazon/ssm/amazon-ssm-agent.json. Nov 1 00:11:09.430866 amazon-ssm-agent[1799]: Applying config override from /etc/amazon/ssm/amazon-ssm-agent.json. Nov 1 00:11:09.434530 amazon-ssm-agent[1799]: 2025/11/01 00:11:09 processing appconfig overrides Nov 1 00:11:09.452189 update_engine[1814]: I1101 00:11:09.450892 1814 main.cc:92] Flatcar Update Engine starting Nov 1 00:11:09.471356 systemd[1]: Started update-engine.service. Nov 1 00:11:09.476221 systemd[1]: Started locksmithd.service. Nov 1 00:11:09.481148 update_engine[1814]: I1101 00:11:09.477864 1814 update_check_scheduler.cc:74] Next update check in 3m56s Nov 1 00:11:09.492288 systemd[1]: nvidia.service: Deactivated successfully. Nov 1 00:11:09.537012 kernel: EXT4-fs (nvme0n1p9): resized filesystem to 3587067 Nov 1 00:11:09.561881 extend-filesystems[1873]: Filesystem at /dev/nvme0n1p9 is mounted on /; on-line resizing required Nov 1 00:11:09.561881 extend-filesystems[1873]: old_desc_blocks = 1, new_desc_blocks = 2 Nov 1 00:11:09.561881 extend-filesystems[1873]: The filesystem on /dev/nvme0n1p9 is now 3587067 (4k) blocks long. Nov 1 00:11:09.559639 systemd[1]: extend-filesystems.service: Deactivated successfully. Nov 1 00:11:09.574368 extend-filesystems[1804]: Resized filesystem in /dev/nvme0n1p9 Nov 1 00:11:09.560002 systemd[1]: Finished extend-filesystems.service. Nov 1 00:11:09.641495 systemd-logind[1813]: Watching system buttons on /dev/input/event0 (Power Button) Nov 1 00:11:09.642105 systemd-logind[1813]: Watching system buttons on /dev/input/event1 (Sleep Button) Nov 1 00:11:09.644257 systemd-logind[1813]: New seat seat0. Nov 1 00:11:09.654625 systemd[1]: Started systemd-logind.service. Nov 1 00:11:09.698806 env[1820]: time="2025-11-01T00:11:09.698730401Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Nov 1 00:11:09.805341 dbus-daemon[1802]: [system] Successfully activated service 'org.freedesktop.hostname1' Nov 1 00:11:09.805562 systemd[1]: Started systemd-hostnamed.service. Nov 1 00:11:09.812467 dbus-daemon[1802]: [system] Activating via systemd: service name='org.freedesktop.PolicyKit1' unit='polkit.service' requested by ':1.6' (uid=0 pid=1851 comm="/usr/lib/systemd/systemd-hostnamed" label="system_u:system_r:kernel_t:s0") Nov 1 00:11:09.817461 systemd[1]: Starting polkit.service... Nov 1 00:11:09.858297 polkitd[1901]: Started polkitd version 121 Nov 1 00:11:09.902062 polkitd[1901]: Loading rules from directory /etc/polkit-1/rules.d Nov 1 00:11:09.905035 polkitd[1901]: Loading rules from directory /usr/share/polkit-1/rules.d Nov 1 00:11:09.913689 env[1820]: time="2025-11-01T00:11:09.913591930Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Nov 1 00:11:09.917434 env[1820]: time="2025-11-01T00:11:09.917366670Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Nov 1 00:11:09.919469 polkitd[1901]: Finished loading, compiling and executing 2 rules Nov 1 00:11:09.920261 dbus-daemon[1802]: [system] Successfully activated service 'org.freedesktop.PolicyKit1' Nov 1 00:11:09.920520 systemd[1]: Started polkit.service. Nov 1 00:11:09.922792 polkitd[1901]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Nov 1 00:11:09.944813 env[1820]: time="2025-11-01T00:11:09.944704760Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.192-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Nov 1 00:11:09.944953 env[1820]: time="2025-11-01T00:11:09.944820829Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Nov 1 00:11:09.945401 env[1820]: time="2025-11-01T00:11:09.945347571Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Nov 1 00:11:09.945495 env[1820]: time="2025-11-01T00:11:09.945396010Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Nov 1 00:11:09.945495 env[1820]: time="2025-11-01T00:11:09.945452108Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Nov 1 00:11:09.945597 env[1820]: time="2025-11-01T00:11:09.945480925Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Nov 1 00:11:09.945763 env[1820]: time="2025-11-01T00:11:09.945722408Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Nov 1 00:11:09.946262 systemd-hostnamed[1851]: Hostname set to (transient) Nov 1 00:11:09.946268 systemd-resolved[1769]: System hostname changed to 'ip-172-31-24-47'. Nov 1 00:11:09.947349 env[1820]: time="2025-11-01T00:11:09.947290930Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Nov 1 00:11:09.947766 env[1820]: time="2025-11-01T00:11:09.947713274Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Nov 1 00:11:09.947841 env[1820]: time="2025-11-01T00:11:09.947783439Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Nov 1 00:11:09.948047 env[1820]: time="2025-11-01T00:11:09.948001196Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Nov 1 00:11:09.948135 env[1820]: time="2025-11-01T00:11:09.948040998Z" level=info msg="metadata content store policy set" policy=shared Nov 1 00:11:09.972578 env[1820]: time="2025-11-01T00:11:09.972504684Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Nov 1 00:11:09.972727 env[1820]: time="2025-11-01T00:11:09.972607361Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Nov 1 00:11:09.972727 env[1820]: time="2025-11-01T00:11:09.972645639Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Nov 1 00:11:09.972864 env[1820]: time="2025-11-01T00:11:09.972718907Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Nov 1 00:11:09.972864 env[1820]: time="2025-11-01T00:11:09.972753455Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Nov 1 00:11:09.972864 env[1820]: time="2025-11-01T00:11:09.972785991Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Nov 1 00:11:09.972864 env[1820]: time="2025-11-01T00:11:09.972840369Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Nov 1 00:11:09.973441 env[1820]: time="2025-11-01T00:11:09.973377190Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Nov 1 00:11:09.973572 env[1820]: time="2025-11-01T00:11:09.973445738Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Nov 1 00:11:09.973572 env[1820]: time="2025-11-01T00:11:09.973480007Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Nov 1 00:11:09.973572 env[1820]: time="2025-11-01T00:11:09.973511090Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Nov 1 00:11:09.973572 env[1820]: time="2025-11-01T00:11:09.973545196Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Nov 1 00:11:09.973850 env[1820]: time="2025-11-01T00:11:09.973761675Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Nov 1 00:11:09.974094 env[1820]: time="2025-11-01T00:11:09.974050119Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Nov 1 00:11:09.974534 env[1820]: time="2025-11-01T00:11:09.974487925Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Nov 1 00:11:09.974618 env[1820]: time="2025-11-01T00:11:09.974551358Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Nov 1 00:11:09.974618 env[1820]: time="2025-11-01T00:11:09.974584441Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Nov 1 00:11:09.974876 env[1820]: time="2025-11-01T00:11:09.974837513Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Nov 1 00:11:09.974985 env[1820]: time="2025-11-01T00:11:09.974881383Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Nov 1 00:11:09.974985 env[1820]: time="2025-11-01T00:11:09.974913978Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Nov 1 00:11:09.974985 env[1820]: time="2025-11-01T00:11:09.974954221Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Nov 1 00:11:09.975186 env[1820]: time="2025-11-01T00:11:09.975002822Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Nov 1 00:11:09.975186 env[1820]: time="2025-11-01T00:11:09.975036381Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Nov 1 00:11:09.975186 env[1820]: time="2025-11-01T00:11:09.975065093Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Nov 1 00:11:09.975186 env[1820]: time="2025-11-01T00:11:09.975096014Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Nov 1 00:11:09.975186 env[1820]: time="2025-11-01T00:11:09.975134048Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Nov 1 00:11:09.975543 env[1820]: time="2025-11-01T00:11:09.975473838Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Nov 1 00:11:09.975543 env[1820]: time="2025-11-01T00:11:09.975520335Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Nov 1 00:11:09.975655 env[1820]: time="2025-11-01T00:11:09.975555080Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Nov 1 00:11:09.975655 env[1820]: time="2025-11-01T00:11:09.975585175Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Nov 1 00:11:09.975655 env[1820]: time="2025-11-01T00:11:09.975615828Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Nov 1 00:11:09.975655 env[1820]: time="2025-11-01T00:11:09.975642169Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Nov 1 00:11:09.975848 env[1820]: time="2025-11-01T00:11:09.975677507Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Nov 1 00:11:09.975848 env[1820]: time="2025-11-01T00:11:09.975737686Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Nov 1 00:11:09.976196 env[1820]: time="2025-11-01T00:11:09.976087332Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Nov 1 00:11:09.978121 env[1820]: time="2025-11-01T00:11:09.976200088Z" level=info msg="Connect containerd service" Nov 1 00:11:09.978121 env[1820]: time="2025-11-01T00:11:09.976256802Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Nov 1 00:11:09.982784 env[1820]: time="2025-11-01T00:11:09.982697919Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Nov 1 00:11:09.983066 env[1820]: time="2025-11-01T00:11:09.983010089Z" level=info msg="Start subscribing containerd event" Nov 1 00:11:09.983141 env[1820]: time="2025-11-01T00:11:09.983083136Z" level=info msg="Start recovering state" Nov 1 00:11:09.983226 env[1820]: time="2025-11-01T00:11:09.983189544Z" level=info msg="Start event monitor" Nov 1 00:11:09.983288 env[1820]: time="2025-11-01T00:11:09.983223104Z" level=info msg="Start snapshots syncer" Nov 1 00:11:09.983288 env[1820]: time="2025-11-01T00:11:09.983247584Z" level=info msg="Start cni network conf syncer for default" Nov 1 00:11:09.983288 env[1820]: time="2025-11-01T00:11:09.983266509Z" level=info msg="Start streaming server" Nov 1 00:11:09.984177 env[1820]: time="2025-11-01T00:11:09.984118127Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Nov 1 00:11:09.986214 env[1820]: time="2025-11-01T00:11:09.986124477Z" level=info msg=serving... address=/run/containerd/containerd.sock Nov 1 00:11:10.027744 systemd[1]: Started containerd.service. Nov 1 00:11:10.030220 env[1820]: time="2025-11-01T00:11:10.029963020Z" level=info msg="containerd successfully booted in 0.343893s" Nov 1 00:11:10.115033 coreos-metadata[1801]: Nov 01 00:11:10.114 INFO Putting http://169.254.169.254/latest/api/token: Attempt #1 Nov 1 00:11:10.116745 coreos-metadata[1801]: Nov 01 00:11:10.116 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys: Attempt #1 Nov 1 00:11:10.118770 coreos-metadata[1801]: Nov 01 00:11:10.118 INFO Fetch successful Nov 1 00:11:10.119193 coreos-metadata[1801]: Nov 01 00:11:10.119 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys/0/openssh-key: Attempt #1 Nov 1 00:11:10.126170 coreos-metadata[1801]: Nov 01 00:11:10.125 INFO Fetch successful Nov 1 00:11:10.129824 unknown[1801]: wrote ssh authorized keys file for user: core Nov 1 00:11:10.166265 update-ssh-keys[1948]: Updated "/home/core/.ssh/authorized_keys" Nov 1 00:11:10.167365 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Nov 1 00:11:10.315587 amazon-ssm-agent[1799]: 2025-11-01 00:11:10 INFO Create new startup processor Nov 1 00:11:10.330062 amazon-ssm-agent[1799]: 2025-11-01 00:11:10 INFO [LongRunningPluginsManager] registered plugins: {} Nov 1 00:11:10.334553 amazon-ssm-agent[1799]: 2025-11-01 00:11:10 INFO Initializing bookkeeping folders Nov 1 00:11:10.334742 amazon-ssm-agent[1799]: 2025-11-01 00:11:10 INFO removing the completed state files Nov 1 00:11:10.334877 amazon-ssm-agent[1799]: 2025-11-01 00:11:10 INFO Initializing bookkeeping folders for long running plugins Nov 1 00:11:10.335075 amazon-ssm-agent[1799]: 2025-11-01 00:11:10 INFO Initializing replies folder for MDS reply requests that couldn't reach the service Nov 1 00:11:10.335191 amazon-ssm-agent[1799]: 2025-11-01 00:11:10 INFO Initializing healthcheck folders for long running plugins Nov 1 00:11:10.335326 amazon-ssm-agent[1799]: 2025-11-01 00:11:10 INFO Initializing locations for inventory plugin Nov 1 00:11:10.335439 amazon-ssm-agent[1799]: 2025-11-01 00:11:10 INFO Initializing default location for custom inventory Nov 1 00:11:10.335548 amazon-ssm-agent[1799]: 2025-11-01 00:11:10 INFO Initializing default location for file inventory Nov 1 00:11:10.335659 amazon-ssm-agent[1799]: 2025-11-01 00:11:10 INFO Initializing default location for role inventory Nov 1 00:11:10.335779 amazon-ssm-agent[1799]: 2025-11-01 00:11:10 INFO Init the cloudwatchlogs publisher Nov 1 00:11:10.335892 amazon-ssm-agent[1799]: 2025-11-01 00:11:10 INFO [instanceID=i-0712c1452e713f3b9] Successfully loaded platform independent plugin aws:updateSsmAgent Nov 1 00:11:10.336047 amazon-ssm-agent[1799]: 2025-11-01 00:11:10 INFO [instanceID=i-0712c1452e713f3b9] Successfully loaded platform independent plugin aws:runDockerAction Nov 1 00:11:10.336195 amazon-ssm-agent[1799]: 2025-11-01 00:11:10 INFO [instanceID=i-0712c1452e713f3b9] Successfully loaded platform independent plugin aws:downloadContent Nov 1 00:11:10.336320 amazon-ssm-agent[1799]: 2025-11-01 00:11:10 INFO [instanceID=i-0712c1452e713f3b9] Successfully loaded platform independent plugin aws:softwareInventory Nov 1 00:11:10.336445 amazon-ssm-agent[1799]: 2025-11-01 00:11:10 INFO [instanceID=i-0712c1452e713f3b9] Successfully loaded platform independent plugin aws:runPowerShellScript Nov 1 00:11:10.336559 amazon-ssm-agent[1799]: 2025-11-01 00:11:10 INFO [instanceID=i-0712c1452e713f3b9] Successfully loaded platform independent plugin aws:configureDocker Nov 1 00:11:10.336670 amazon-ssm-agent[1799]: 2025-11-01 00:11:10 INFO [instanceID=i-0712c1452e713f3b9] Successfully loaded platform independent plugin aws:refreshAssociation Nov 1 00:11:10.336780 amazon-ssm-agent[1799]: 2025-11-01 00:11:10 INFO [instanceID=i-0712c1452e713f3b9] Successfully loaded platform independent plugin aws:configurePackage Nov 1 00:11:10.336889 amazon-ssm-agent[1799]: 2025-11-01 00:11:10 INFO [instanceID=i-0712c1452e713f3b9] Successfully loaded platform independent plugin aws:runDocument Nov 1 00:11:10.337160 amazon-ssm-agent[1799]: 2025-11-01 00:11:10 INFO [instanceID=i-0712c1452e713f3b9] Successfully loaded platform dependent plugin aws:runShellScript Nov 1 00:11:10.337290 amazon-ssm-agent[1799]: 2025-11-01 00:11:10 INFO Starting Agent: amazon-ssm-agent - v2.3.1319.0 Nov 1 00:11:10.337401 amazon-ssm-agent[1799]: 2025-11-01 00:11:10 INFO OS: linux, Arch: arm64 Nov 1 00:11:10.356175 amazon-ssm-agent[1799]: datastore file /var/lib/amazon/ssm/i-0712c1452e713f3b9/longrunningplugins/datastore/store doesn't exist - no long running plugins to execute Nov 1 00:11:10.446432 amazon-ssm-agent[1799]: 2025-11-01 00:11:10 INFO [MessageGatewayService] Starting session document processing engine... Nov 1 00:11:10.541163 amazon-ssm-agent[1799]: 2025-11-01 00:11:10 INFO [MessageGatewayService] [EngineProcessor] Starting Nov 1 00:11:10.635500 amazon-ssm-agent[1799]: 2025-11-01 00:11:10 INFO [MessageGatewayService] SSM Agent is trying to setup control channel for Session Manager module. Nov 1 00:11:10.730103 amazon-ssm-agent[1799]: 2025-11-01 00:11:10 INFO [MessageGatewayService] Setting up websocket for controlchannel for instance: i-0712c1452e713f3b9, requestId: 1ec686e0-9a13-432b-9ccf-35438f8f19f3 Nov 1 00:11:10.824724 amazon-ssm-agent[1799]: 2025-11-01 00:11:10 INFO [MessagingDeliveryService] Starting document processing engine... Nov 1 00:11:10.919637 amazon-ssm-agent[1799]: 2025-11-01 00:11:10 INFO [MessagingDeliveryService] [EngineProcessor] Starting Nov 1 00:11:10.930775 tar[1818]: linux-arm64/README.md Nov 1 00:11:10.944388 systemd[1]: Finished prepare-helm.service. Nov 1 00:11:11.014881 amazon-ssm-agent[1799]: 2025-11-01 00:11:10 INFO [MessagingDeliveryService] [EngineProcessor] Initial processing Nov 1 00:11:11.084891 locksmithd[1883]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Nov 1 00:11:11.110110 amazon-ssm-agent[1799]: 2025-11-01 00:11:10 INFO [MessagingDeliveryService] Starting message polling Nov 1 00:11:11.205587 amazon-ssm-agent[1799]: 2025-11-01 00:11:10 INFO [MessagingDeliveryService] Starting send replies to MDS Nov 1 00:11:11.301409 amazon-ssm-agent[1799]: 2025-11-01 00:11:10 INFO [instanceID=i-0712c1452e713f3b9] Starting association polling Nov 1 00:11:11.397247 amazon-ssm-agent[1799]: 2025-11-01 00:11:10 INFO [MessagingDeliveryService] [Association] [EngineProcessor] Starting Nov 1 00:11:11.493396 amazon-ssm-agent[1799]: 2025-11-01 00:11:10 INFO [MessagingDeliveryService] [Association] Launching response handler Nov 1 00:11:11.538218 sshd_keygen[1835]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Nov 1 00:11:11.575419 systemd[1]: Finished sshd-keygen.service. Nov 1 00:11:11.580112 systemd[1]: Starting issuegen.service... Nov 1 00:11:11.589745 amazon-ssm-agent[1799]: 2025-11-01 00:11:10 INFO [MessagingDeliveryService] [Association] [EngineProcessor] Initial processing Nov 1 00:11:11.591339 systemd[1]: issuegen.service: Deactivated successfully. Nov 1 00:11:11.591711 systemd[1]: Finished issuegen.service. Nov 1 00:11:11.598239 systemd[1]: Starting systemd-user-sessions.service... Nov 1 00:11:11.614812 systemd[1]: Finished systemd-user-sessions.service. Nov 1 00:11:11.619937 systemd[1]: Started getty@tty1.service. Nov 1 00:11:11.624555 systemd[1]: Started serial-getty@ttyS0.service. Nov 1 00:11:11.626830 systemd[1]: Reached target getty.target. Nov 1 00:11:11.686269 amazon-ssm-agent[1799]: 2025-11-01 00:11:10 INFO [MessagingDeliveryService] [Association] Initializing association scheduling service Nov 1 00:11:11.782997 amazon-ssm-agent[1799]: 2025-11-01 00:11:10 INFO [MessagingDeliveryService] [Association] Association scheduling service initialized Nov 1 00:11:11.879898 amazon-ssm-agent[1799]: 2025-11-01 00:11:10 INFO [MessageGatewayService] listening reply. Nov 1 00:11:11.976937 amazon-ssm-agent[1799]: 2025-11-01 00:11:10 INFO [HealthCheck] HealthCheck reporting agent health. Nov 1 00:11:12.074437 amazon-ssm-agent[1799]: 2025-11-01 00:11:10 INFO [OfflineService] Starting document processing engine... Nov 1 00:11:12.172030 amazon-ssm-agent[1799]: 2025-11-01 00:11:10 INFO [OfflineService] [EngineProcessor] Starting Nov 1 00:11:12.269879 amazon-ssm-agent[1799]: 2025-11-01 00:11:10 INFO [OfflineService] [EngineProcessor] Initial processing Nov 1 00:11:12.367785 amazon-ssm-agent[1799]: 2025-11-01 00:11:10 INFO [OfflineService] Starting message polling Nov 1 00:11:12.401011 systemd[1]: Started kubelet.service. Nov 1 00:11:12.403772 systemd[1]: Reached target multi-user.target. Nov 1 00:11:12.409227 systemd[1]: Starting systemd-update-utmp-runlevel.service... Nov 1 00:11:12.424258 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Nov 1 00:11:12.424616 systemd[1]: Finished systemd-update-utmp-runlevel.service. Nov 1 00:11:12.428107 systemd[1]: Startup finished in 1.208s (kernel) + 9.386s (initrd) + 12.439s (userspace) = 23.034s. Nov 1 00:11:12.466174 amazon-ssm-agent[1799]: 2025-11-01 00:11:10 INFO [OfflineService] Starting send replies to MDS Nov 1 00:11:12.564371 amazon-ssm-agent[1799]: 2025-11-01 00:11:10 INFO [LongRunningPluginsManager] starting long running plugin manager Nov 1 00:11:12.662836 amazon-ssm-agent[1799]: 2025-11-01 00:11:10 INFO [LongRunningPluginsManager] there aren't any long running plugin to execute Nov 1 00:11:12.761604 amazon-ssm-agent[1799]: 2025-11-01 00:11:10 INFO [StartupProcessor] Executing startup processor tasks Nov 1 00:11:12.860351 amazon-ssm-agent[1799]: 2025-11-01 00:11:10 INFO [StartupProcessor] Write to serial port: Amazon SSM Agent v2.3.1319.0 is running Nov 1 00:11:12.959440 amazon-ssm-agent[1799]: 2025-11-01 00:11:10 INFO [StartupProcessor] Write to serial port: OsProductName: Flatcar Container Linux by Kinvolk Nov 1 00:11:13.058676 amazon-ssm-agent[1799]: 2025-11-01 00:11:10 INFO [StartupProcessor] Write to serial port: OsVersion: 3510.3.8 Nov 1 00:11:13.158110 amazon-ssm-agent[1799]: 2025-11-01 00:11:10 INFO [LongRunningPluginsManager] There are no long running plugins currently getting executed - skipping their healthcheck Nov 1 00:11:13.257727 amazon-ssm-agent[1799]: 2025-11-01 00:11:10 INFO [MessageGatewayService] Opening websocket connection to: wss://ssmmessages.us-west-2.amazonaws.com/v1/control-channel/i-0712c1452e713f3b9?role=subscribe&stream=input Nov 1 00:11:13.357614 amazon-ssm-agent[1799]: 2025-11-01 00:11:10 INFO [MessageGatewayService] Successfully opened websocket connection to: wss://ssmmessages.us-west-2.amazonaws.com/v1/control-channel/i-0712c1452e713f3b9?role=subscribe&stream=input Nov 1 00:11:13.457603 amazon-ssm-agent[1799]: 2025-11-01 00:11:10 INFO [MessageGatewayService] Starting receiving message from control channel Nov 1 00:11:13.557852 amazon-ssm-agent[1799]: 2025-11-01 00:11:10 INFO [MessageGatewayService] [EngineProcessor] Initial processing Nov 1 00:11:14.326174 kubelet[2023]: E1101 00:11:14.326115 2023 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 00:11:14.330262 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 00:11:14.330563 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 00:11:14.331030 systemd[1]: kubelet.service: Consumed 1.583s CPU time. Nov 1 00:11:17.235000 systemd[1]: Created slice system-sshd.slice. Nov 1 00:11:17.237383 systemd[1]: Started sshd@0-172.31.24.47:22-147.75.109.163:44900.service. Nov 1 00:11:17.668548 sshd[2030]: Accepted publickey for core from 147.75.109.163 port 44900 ssh2: RSA SHA256:l10clL99NTgBLZDdAUsIsAniCj4DES+0hQanxvSOioM Nov 1 00:11:17.673804 sshd[2030]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:11:17.696811 systemd[1]: Created slice user-500.slice. Nov 1 00:11:17.700387 systemd[1]: Starting user-runtime-dir@500.service... Nov 1 00:11:17.704721 systemd-logind[1813]: New session 1 of user core. Nov 1 00:11:17.736177 systemd[1]: Finished user-runtime-dir@500.service. Nov 1 00:11:17.740425 systemd[1]: Starting user@500.service... Nov 1 00:11:17.747612 (systemd)[2033]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:11:17.928896 systemd[2033]: Queued start job for default target default.target. Nov 1 00:11:17.929953 systemd[2033]: Reached target paths.target. Nov 1 00:11:17.930019 systemd[2033]: Reached target sockets.target. Nov 1 00:11:17.930052 systemd[2033]: Reached target timers.target. Nov 1 00:11:17.930080 systemd[2033]: Reached target basic.target. Nov 1 00:11:17.930174 systemd[2033]: Reached target default.target. Nov 1 00:11:17.930244 systemd[2033]: Startup finished in 170ms. Nov 1 00:11:17.931243 systemd[1]: Started user@500.service. Nov 1 00:11:17.935063 systemd[1]: Started session-1.scope. Nov 1 00:11:18.084172 systemd[1]: Started sshd@1-172.31.24.47:22-147.75.109.163:44908.service. Nov 1 00:11:18.249868 sshd[2042]: Accepted publickey for core from 147.75.109.163 port 44908 ssh2: RSA SHA256:l10clL99NTgBLZDdAUsIsAniCj4DES+0hQanxvSOioM Nov 1 00:11:18.252441 sshd[2042]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:11:18.261359 systemd[1]: Started session-2.scope. Nov 1 00:11:18.263021 systemd-logind[1813]: New session 2 of user core. Nov 1 00:11:18.390871 sshd[2042]: pam_unix(sshd:session): session closed for user core Nov 1 00:11:18.396316 systemd-logind[1813]: Session 2 logged out. Waiting for processes to exit. Nov 1 00:11:18.397332 systemd[1]: sshd@1-172.31.24.47:22-147.75.109.163:44908.service: Deactivated successfully. Nov 1 00:11:18.398660 systemd[1]: session-2.scope: Deactivated successfully. Nov 1 00:11:18.400117 systemd-logind[1813]: Removed session 2. Nov 1 00:11:18.420064 systemd[1]: Started sshd@2-172.31.24.47:22-147.75.109.163:44916.service. Nov 1 00:11:18.594037 sshd[2048]: Accepted publickey for core from 147.75.109.163 port 44916 ssh2: RSA SHA256:l10clL99NTgBLZDdAUsIsAniCj4DES+0hQanxvSOioM Nov 1 00:11:18.596514 sshd[2048]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:11:18.604335 systemd-logind[1813]: New session 3 of user core. Nov 1 00:11:18.605253 systemd[1]: Started session-3.scope. Nov 1 00:11:18.726056 sshd[2048]: pam_unix(sshd:session): session closed for user core Nov 1 00:11:18.730427 systemd[1]: session-3.scope: Deactivated successfully. Nov 1 00:11:18.731611 systemd-logind[1813]: Session 3 logged out. Waiting for processes to exit. Nov 1 00:11:18.732146 systemd[1]: sshd@2-172.31.24.47:22-147.75.109.163:44916.service: Deactivated successfully. Nov 1 00:11:18.734539 systemd-logind[1813]: Removed session 3. Nov 1 00:11:18.755178 systemd[1]: Started sshd@3-172.31.24.47:22-147.75.109.163:44924.service. Nov 1 00:11:18.929574 sshd[2054]: Accepted publickey for core from 147.75.109.163 port 44924 ssh2: RSA SHA256:l10clL99NTgBLZDdAUsIsAniCj4DES+0hQanxvSOioM Nov 1 00:11:18.932620 sshd[2054]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:11:18.940164 systemd-logind[1813]: New session 4 of user core. Nov 1 00:11:18.941144 systemd[1]: Started session-4.scope. Nov 1 00:11:19.071512 sshd[2054]: pam_unix(sshd:session): session closed for user core Nov 1 00:11:19.076177 systemd-logind[1813]: Session 4 logged out. Waiting for processes to exit. Nov 1 00:11:19.076743 systemd[1]: sshd@3-172.31.24.47:22-147.75.109.163:44924.service: Deactivated successfully. Nov 1 00:11:19.078044 systemd[1]: session-4.scope: Deactivated successfully. Nov 1 00:11:19.079542 systemd-logind[1813]: Removed session 4. Nov 1 00:11:19.098391 systemd[1]: Started sshd@4-172.31.24.47:22-147.75.109.163:44940.service. Nov 1 00:11:19.268590 sshd[2060]: Accepted publickey for core from 147.75.109.163 port 44940 ssh2: RSA SHA256:l10clL99NTgBLZDdAUsIsAniCj4DES+0hQanxvSOioM Nov 1 00:11:19.271608 sshd[2060]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:11:19.279142 systemd-logind[1813]: New session 5 of user core. Nov 1 00:11:19.280090 systemd[1]: Started session-5.scope. Nov 1 00:11:19.470059 sudo[2063]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Nov 1 00:11:19.470601 sudo[2063]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Nov 1 00:11:19.505199 dbus-daemon[1802]: avc: received setenforce notice (enforcing=1) Nov 1 00:11:19.506949 sudo[2063]: pam_unix(sudo:session): session closed for user root Nov 1 00:11:19.531562 sshd[2060]: pam_unix(sshd:session): session closed for user core Nov 1 00:11:19.537868 systemd-logind[1813]: Session 5 logged out. Waiting for processes to exit. Nov 1 00:11:19.538523 systemd[1]: sshd@4-172.31.24.47:22-147.75.109.163:44940.service: Deactivated successfully. Nov 1 00:11:19.539750 systemd[1]: session-5.scope: Deactivated successfully. Nov 1 00:11:19.542397 systemd-logind[1813]: Removed session 5. Nov 1 00:11:19.559790 systemd[1]: Started sshd@5-172.31.24.47:22-147.75.109.163:44948.service. Nov 1 00:11:19.729868 sshd[2067]: Accepted publickey for core from 147.75.109.163 port 44948 ssh2: RSA SHA256:l10clL99NTgBLZDdAUsIsAniCj4DES+0hQanxvSOioM Nov 1 00:11:19.732651 sshd[2067]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:11:19.740814 systemd-logind[1813]: New session 6 of user core. Nov 1 00:11:19.741834 systemd[1]: Started session-6.scope. Nov 1 00:11:19.847903 sudo[2071]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Nov 1 00:11:19.848504 sudo[2071]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Nov 1 00:11:19.853895 sudo[2071]: pam_unix(sudo:session): session closed for user root Nov 1 00:11:19.863139 sudo[2070]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Nov 1 00:11:19.864161 sudo[2070]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Nov 1 00:11:19.881811 systemd[1]: Stopping audit-rules.service... Nov 1 00:11:19.883000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Nov 1 00:11:19.884603 auditctl[2074]: No rules Nov 1 00:11:19.886097 kernel: kauditd_printk_skb: 81 callbacks suppressed Nov 1 00:11:19.886188 kernel: audit: type=1305 audit(1761955879.883:199): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Nov 1 00:11:19.886746 systemd[1]: audit-rules.service: Deactivated successfully. Nov 1 00:11:19.887124 systemd[1]: Stopped audit-rules.service. Nov 1 00:11:19.883000 audit[2074]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffdbff4ea0 a2=420 a3=0 items=0 ppid=1 pid=2074 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:19.894508 systemd[1]: Starting audit-rules.service... Nov 1 00:11:19.903113 kernel: audit: type=1300 audit(1761955879.883:199): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffdbff4ea0 a2=420 a3=0 items=0 ppid=1 pid=2074 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:19.883000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Nov 1 00:11:19.910504 kernel: audit: type=1327 audit(1761955879.883:199): proctitle=2F7362696E2F617564697463746C002D44 Nov 1 00:11:19.910623 kernel: audit: type=1131 audit(1761955879.886:200): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:19.886000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:19.928406 augenrules[2091]: No rules Nov 1 00:11:19.929000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:19.930039 systemd[1]: Finished audit-rules.service. Nov 1 00:11:19.939270 sudo[2070]: pam_unix(sudo:session): session closed for user root Nov 1 00:11:19.938000 audit[2070]: USER_END pid=2070 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:11:19.948778 kernel: audit: type=1130 audit(1761955879.929:201): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:19.948871 kernel: audit: type=1106 audit(1761955879.938:202): pid=2070 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:11:19.938000 audit[2070]: CRED_DISP pid=2070 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:11:19.957729 kernel: audit: type=1104 audit(1761955879.938:203): pid=2070 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:11:19.970185 sshd[2067]: pam_unix(sshd:session): session closed for user core Nov 1 00:11:19.971000 audit[2067]: USER_END pid=2067 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:11:19.984275 systemd[1]: sshd@5-172.31.24.47:22-147.75.109.163:44948.service: Deactivated successfully. Nov 1 00:11:19.971000 audit[2067]: CRED_DISP pid=2067 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:11:19.985478 systemd[1]: session-6.scope: Deactivated successfully. Nov 1 00:11:19.993741 kernel: audit: type=1106 audit(1761955879.971:204): pid=2067 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:11:19.993812 kernel: audit: type=1104 audit(1761955879.971:205): pid=2067 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:11:19.994792 systemd-logind[1813]: Session 6 logged out. Waiting for processes to exit. Nov 1 00:11:19.983000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.24.47:22-147.75.109.163:44948 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:20.005001 kernel: audit: type=1131 audit(1761955879.983:206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.24.47:22-147.75.109.163:44948 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:20.002434 systemd[1]: Started sshd@6-172.31.24.47:22-147.75.109.163:44964.service. Nov 1 00:11:20.006000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.24.47:22-147.75.109.163:44964 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:20.009328 systemd-logind[1813]: Removed session 6. Nov 1 00:11:20.175000 audit[2097]: USER_ACCT pid=2097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:11:20.176574 sshd[2097]: Accepted publickey for core from 147.75.109.163 port 44964 ssh2: RSA SHA256:l10clL99NTgBLZDdAUsIsAniCj4DES+0hQanxvSOioM Nov 1 00:11:20.177000 audit[2097]: CRED_ACQ pid=2097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:11:20.178000 audit[2097]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe7e75300 a2=3 a3=1 items=0 ppid=1 pid=2097 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:20.178000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:11:20.179710 sshd[2097]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:11:20.187346 systemd-logind[1813]: New session 7 of user core. Nov 1 00:11:20.188280 systemd[1]: Started session-7.scope. Nov 1 00:11:20.196000 audit[2097]: USER_START pid=2097 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:11:20.198000 audit[2099]: CRED_ACQ pid=2099 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:11:20.291000 audit[2100]: USER_ACCT pid=2100 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:11:20.293374 sudo[2100]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Nov 1 00:11:20.293000 audit[2100]: CRED_REFR pid=2100 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:11:20.294455 sudo[2100]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Nov 1 00:11:20.296000 audit[2100]: USER_START pid=2100 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:11:20.374873 systemd[1]: Starting docker.service... Nov 1 00:11:20.496956 env[2110]: time="2025-11-01T00:11:20.495776157Z" level=info msg="Starting up" Nov 1 00:11:20.500762 env[2110]: time="2025-11-01T00:11:20.500713414Z" level=info msg="parsed scheme: \"unix\"" module=grpc Nov 1 00:11:20.500999 env[2110]: time="2025-11-01T00:11:20.500942225Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Nov 1 00:11:20.501147 env[2110]: time="2025-11-01T00:11:20.501115495Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Nov 1 00:11:20.501255 env[2110]: time="2025-11-01T00:11:20.501228209Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Nov 1 00:11:20.505361 env[2110]: time="2025-11-01T00:11:20.505318880Z" level=info msg="parsed scheme: \"unix\"" module=grpc Nov 1 00:11:20.505560 env[2110]: time="2025-11-01T00:11:20.505532573Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Nov 1 00:11:20.505686 env[2110]: time="2025-11-01T00:11:20.505650933Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Nov 1 00:11:20.505790 env[2110]: time="2025-11-01T00:11:20.505764005Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Nov 1 00:11:20.557067 env[2110]: time="2025-11-01T00:11:20.557005497Z" level=info msg="Loading containers: start." Nov 1 00:11:20.717000 audit[2140]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=2140 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:11:20.717000 audit[2140]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffcf2a9130 a2=0 a3=1 items=0 ppid=2110 pid=2140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:20.717000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Nov 1 00:11:20.721000 audit[2142]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=2142 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:11:20.721000 audit[2142]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffdd346e30 a2=0 a3=1 items=0 ppid=2110 pid=2142 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:20.721000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Nov 1 00:11:20.725000 audit[2144]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=2144 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:11:20.725000 audit[2144]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffd32bd560 a2=0 a3=1 items=0 ppid=2110 pid=2144 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:20.725000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Nov 1 00:11:20.729000 audit[2146]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=2146 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:11:20.729000 audit[2146]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffc56bb360 a2=0 a3=1 items=0 ppid=2110 pid=2146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:20.729000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Nov 1 00:11:20.755000 audit[2148]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=2148 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:11:20.755000 audit[2148]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd2116a50 a2=0 a3=1 items=0 ppid=2110 pid=2148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:20.755000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Nov 1 00:11:20.784000 audit[2153]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=2153 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:11:20.784000 audit[2153]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffe0b8c770 a2=0 a3=1 items=0 ppid=2110 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:20.784000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Nov 1 00:11:20.797000 audit[2155]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=2155 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:11:20.797000 audit[2155]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffd79f8220 a2=0 a3=1 items=0 ppid=2110 pid=2155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:20.797000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Nov 1 00:11:20.801000 audit[2157]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=2157 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:11:20.801000 audit[2157]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffcc456b90 a2=0 a3=1 items=0 ppid=2110 pid=2157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:20.801000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Nov 1 00:11:20.805000 audit[2159]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=2159 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:11:20.805000 audit[2159]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=fffffa4d18a0 a2=0 a3=1 items=0 ppid=2110 pid=2159 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:20.805000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:11:20.819000 audit[2163]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=2163 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:11:20.819000 audit[2163]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffd887c7b0 a2=0 a3=1 items=0 ppid=2110 pid=2163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:20.819000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:11:20.828000 audit[2164]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=2164 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:11:20.828000 audit[2164]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffee2b38a0 a2=0 a3=1 items=0 ppid=2110 pid=2164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:20.828000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:11:20.875034 kernel: Initializing XFRM netlink socket Nov 1 00:11:20.960050 env[2110]: time="2025-11-01T00:11:20.960004186Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Nov 1 00:11:20.964327 (udev-worker)[2120]: Network interface NamePolicy= disabled on kernel command line. Nov 1 00:11:21.001000 audit[2173]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=2173 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:11:21.001000 audit[2173]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=ffffd26ec4b0 a2=0 a3=1 items=0 ppid=2110 pid=2173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:21.001000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Nov 1 00:11:21.016000 audit[2176]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=2176 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:11:21.016000 audit[2176]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffcb435080 a2=0 a3=1 items=0 ppid=2110 pid=2176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:21.016000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Nov 1 00:11:21.022000 audit[2179]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=2179 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:11:21.022000 audit[2179]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffdd8e3340 a2=0 a3=1 items=0 ppid=2110 pid=2179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:21.022000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Nov 1 00:11:21.027000 audit[2181]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=2181 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:11:21.027000 audit[2181]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=fffff2655080 a2=0 a3=1 items=0 ppid=2110 pid=2181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:21.027000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Nov 1 00:11:21.032000 audit[2183]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=2183 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:11:21.032000 audit[2183]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffd82f5dd0 a2=0 a3=1 items=0 ppid=2110 pid=2183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:21.032000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Nov 1 00:11:21.038000 audit[2185]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=2185 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:11:21.038000 audit[2185]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=fffff4d7deb0 a2=0 a3=1 items=0 ppid=2110 pid=2185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:21.038000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Nov 1 00:11:21.043000 audit[2187]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=2187 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:11:21.043000 audit[2187]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffca9382e0 a2=0 a3=1 items=0 ppid=2110 pid=2187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:21.043000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Nov 1 00:11:21.069000 audit[2190]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=2190 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:11:21.069000 audit[2190]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffca30eb20 a2=0 a3=1 items=0 ppid=2110 pid=2190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:21.069000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Nov 1 00:11:21.075000 audit[2192]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=2192 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:11:21.075000 audit[2192]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffcf81efd0 a2=0 a3=1 items=0 ppid=2110 pid=2192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:21.075000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Nov 1 00:11:21.079000 audit[2194]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=2194 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:11:21.079000 audit[2194]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffd8c36c00 a2=0 a3=1 items=0 ppid=2110 pid=2194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:21.079000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Nov 1 00:11:21.083000 audit[2196]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=2196 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:11:21.083000 audit[2196]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffe37b17e0 a2=0 a3=1 items=0 ppid=2110 pid=2196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:21.083000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Nov 1 00:11:21.086081 systemd-networkd[1539]: docker0: Link UP Nov 1 00:11:21.099000 audit[2200]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=2200 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:11:21.099000 audit[2200]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc6ae6f30 a2=0 a3=1 items=0 ppid=2110 pid=2200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:21.099000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:11:21.106000 audit[2201]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=2201 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:11:21.106000 audit[2201]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffe4fa8a40 a2=0 a3=1 items=0 ppid=2110 pid=2201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:21.106000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:11:21.108498 env[2110]: time="2025-11-01T00:11:21.108439114Z" level=info msg="Loading containers: done." Nov 1 00:11:21.142112 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck2020513801-merged.mount: Deactivated successfully. Nov 1 00:11:21.155732 env[2110]: time="2025-11-01T00:11:21.155660852Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Nov 1 00:11:21.156482 env[2110]: time="2025-11-01T00:11:21.156427276Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Nov 1 00:11:21.156851 env[2110]: time="2025-11-01T00:11:21.156825525Z" level=info msg="Daemon has completed initialization" Nov 1 00:11:21.181227 systemd[1]: Started docker.service. Nov 1 00:11:21.180000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:21.197245 env[2110]: time="2025-11-01T00:11:21.196985917Z" level=info msg="API listen on /run/docker.sock" Nov 1 00:11:22.669935 amazon-ssm-agent[1799]: 2025-11-01 00:11:22 INFO [MessagingDeliveryService] [Association] No associations on boot. Requerying for associations after 30 seconds. Nov 1 00:11:22.709180 env[1820]: time="2025-11-01T00:11:22.709109979Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.5\"" Nov 1 00:11:23.363622 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3581227158.mount: Deactivated successfully. Nov 1 00:11:24.581887 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Nov 1 00:11:24.581000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:24.581000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:24.582257 systemd[1]: Stopped kubelet.service. Nov 1 00:11:24.582361 systemd[1]: kubelet.service: Consumed 1.583s CPU time. Nov 1 00:11:24.585038 systemd[1]: Starting kubelet.service... Nov 1 00:11:25.095000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:25.096303 systemd[1]: Started kubelet.service. Nov 1 00:11:25.098978 kernel: kauditd_printk_skb: 86 callbacks suppressed Nov 1 00:11:25.099086 kernel: audit: type=1130 audit(1761955885.095:243): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:25.201171 kubelet[2237]: E1101 00:11:25.201106 2237 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 00:11:25.208000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 00:11:25.208641 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 00:11:25.209020 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 00:11:25.219021 kernel: audit: type=1131 audit(1761955885.208:244): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 00:11:26.206212 env[1820]: time="2025-11-01T00:11:26.206151967Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:11:26.214628 env[1820]: time="2025-11-01T00:11:26.214533959Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6a7fd297b49102b08dc3d8d4fd7f1538bcf21d3131eae8bf62ba26ce3283237f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:11:26.219310 env[1820]: time="2025-11-01T00:11:26.219254440Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:11:26.224303 env[1820]: time="2025-11-01T00:11:26.224226920Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:1b9c6c00bc1fe86860e72efb8e4148f9e436a132eba4ca636ca4f48d61d6dfb4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:11:26.226016 env[1820]: time="2025-11-01T00:11:26.225929618Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.5\" returns image reference \"sha256:6a7fd297b49102b08dc3d8d4fd7f1538bcf21d3131eae8bf62ba26ce3283237f\"" Nov 1 00:11:26.228538 env[1820]: time="2025-11-01T00:11:26.228487099Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.5\"" Nov 1 00:11:29.074549 env[1820]: time="2025-11-01T00:11:29.074477878Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:11:29.077223 env[1820]: time="2025-11-01T00:11:29.077158724Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2dd4c25a937008b7b8a6cdca70d816403b5078b51550926721b7a7762139cd23,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:11:29.080784 env[1820]: time="2025-11-01T00:11:29.080732112Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:11:29.084207 env[1820]: time="2025-11-01T00:11:29.084140091Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:1082a6ab67fb46397314dd36b36cb197ba4a4c5365033e9ad22bc7edaaaabd5c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:11:29.086047 env[1820]: time="2025-11-01T00:11:29.085999210Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.5\" returns image reference \"sha256:2dd4c25a937008b7b8a6cdca70d816403b5078b51550926721b7a7762139cd23\"" Nov 1 00:11:29.086928 env[1820]: time="2025-11-01T00:11:29.086883681Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.5\"" Nov 1 00:11:31.347834 env[1820]: time="2025-11-01T00:11:31.347724027Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:11:31.350609 env[1820]: time="2025-11-01T00:11:31.350541445Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5e600beaed8620718e0650dd2721266869ce1d737488c004a869333273e6ec15,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:11:31.355304 env[1820]: time="2025-11-01T00:11:31.355219335Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:11:31.359061 env[1820]: time="2025-11-01T00:11:31.358997748Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:3e7b57c9d9f06b77f0064e5be7f3df61e0151101160acd5fdecce911df28a189,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:11:31.361751 env[1820]: time="2025-11-01T00:11:31.361703847Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.5\" returns image reference \"sha256:5e600beaed8620718e0650dd2721266869ce1d737488c004a869333273e6ec15\"" Nov 1 00:11:31.363279 env[1820]: time="2025-11-01T00:11:31.363232519Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.5\"" Nov 1 00:11:33.035332 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1291292085.mount: Deactivated successfully. Nov 1 00:11:33.968934 env[1820]: time="2025-11-01T00:11:33.968872598Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:11:33.971059 env[1820]: time="2025-11-01T00:11:33.971010727Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:021a8d45ab0c346664e47d95595ff5180ce90a22a681ea27904c65ae90788e70,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:11:33.972947 env[1820]: time="2025-11-01T00:11:33.972902952Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.33.5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:11:33.975014 env[1820]: time="2025-11-01T00:11:33.974925380Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:71445ec84ad98bd52a7784865a9d31b1b50b56092d3f7699edc39eefd71befe1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:11:33.976204 env[1820]: time="2025-11-01T00:11:33.976158515Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.5\" returns image reference \"sha256:021a8d45ab0c346664e47d95595ff5180ce90a22a681ea27904c65ae90788e70\"" Nov 1 00:11:33.976939 env[1820]: time="2025-11-01T00:11:33.976888028Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\"" Nov 1 00:11:34.558494 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4151234998.mount: Deactivated successfully. Nov 1 00:11:35.401534 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Nov 1 00:11:35.401903 systemd[1]: Stopped kubelet.service. Nov 1 00:11:35.400000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:35.414044 systemd[1]: Starting kubelet.service... Nov 1 00:11:35.401000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:35.426408 kernel: audit: type=1130 audit(1761955895.400:245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:35.426550 kernel: audit: type=1131 audit(1761955895.401:246): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:35.754000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:35.755377 systemd[1]: Started kubelet.service. Nov 1 00:11:35.769049 kernel: audit: type=1130 audit(1761955895.754:247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:35.851497 kubelet[2247]: E1101 00:11:35.851414 2247 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 00:11:35.855624 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 00:11:35.855942 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 00:11:35.855000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 00:11:35.867020 kernel: audit: type=1131 audit(1761955895.855:248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 00:11:36.252603 env[1820]: time="2025-11-01T00:11:36.252529553Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:11:36.255292 env[1820]: time="2025-11-01T00:11:36.255228550Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:f72407be9e08c3a1b29a88318cbfee87b9f2da489f84015a5090b1e386e4dbc1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:11:36.260802 env[1820]: time="2025-11-01T00:11:36.258854958Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:11:36.264683 env[1820]: time="2025-11-01T00:11:36.264610955Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\" returns image reference \"sha256:f72407be9e08c3a1b29a88318cbfee87b9f2da489f84015a5090b1e386e4dbc1\"" Nov 1 00:11:36.265205 env[1820]: time="2025-11-01T00:11:36.262875445Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:40384aa1f5ea6bfdc77997d243aec73da05f27aed0c5e9d65bfa98933c519d97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:11:36.265561 env[1820]: time="2025-11-01T00:11:36.265520345Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Nov 1 00:11:36.714700 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2956979295.mount: Deactivated successfully. Nov 1 00:11:36.722565 env[1820]: time="2025-11-01T00:11:36.722482388Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:11:36.726101 env[1820]: time="2025-11-01T00:11:36.726051544Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:11:36.729415 env[1820]: time="2025-11-01T00:11:36.729366577Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:11:36.733250 env[1820]: time="2025-11-01T00:11:36.733187567Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8\"" Nov 1 00:11:36.733808 env[1820]: time="2025-11-01T00:11:36.732025588Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:11:36.734125 env[1820]: time="2025-11-01T00:11:36.734083588Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\"" Nov 1 00:11:37.197759 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1309848172.mount: Deactivated successfully. Nov 1 00:11:39.979312 systemd[1]: systemd-hostnamed.service: Deactivated successfully. Nov 1 00:11:39.978000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:39.990244 kernel: audit: type=1131 audit(1761955899.978:249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:40.006000 audit: BPF prog-id=43 op=UNLOAD Nov 1 00:11:40.012624 kernel: audit: type=1334 audit(1761955900.006:250): prog-id=43 op=UNLOAD Nov 1 00:11:40.012705 kernel: audit: type=1334 audit(1761955900.006:251): prog-id=42 op=UNLOAD Nov 1 00:11:40.006000 audit: BPF prog-id=42 op=UNLOAD Nov 1 00:11:40.006000 audit: BPF prog-id=41 op=UNLOAD Nov 1 00:11:40.015615 kernel: audit: type=1334 audit(1761955900.006:252): prog-id=41 op=UNLOAD Nov 1 00:11:41.531998 env[1820]: time="2025-11-01T00:11:41.531914452Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:11:41.536460 env[1820]: time="2025-11-01T00:11:41.536395124Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:31747a36ce712f0bf61b50a0c06e99768522025e7b8daedd6dc63d1ae84837b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:11:41.546497 env[1820]: time="2025-11-01T00:11:41.546429487Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:11:41.552714 env[1820]: time="2025-11-01T00:11:41.552642589Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:d58c035df557080a27387d687092e3fc2b64c6d0e3162dc51453a115f847d121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:11:41.554636 env[1820]: time="2025-11-01T00:11:41.554589427Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\" returns image reference \"sha256:31747a36ce712f0bf61b50a0c06e99768522025e7b8daedd6dc63d1ae84837b5\"" Nov 1 00:11:45.901580 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 3. Nov 1 00:11:45.901918 systemd[1]: Stopped kubelet.service. Nov 1 00:11:45.900000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:45.901000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:45.922586 kernel: audit: type=1130 audit(1761955905.900:253): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:45.922729 kernel: audit: type=1131 audit(1761955905.901:254): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:45.918458 systemd[1]: Starting kubelet.service... Nov 1 00:11:46.283000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:46.284142 systemd[1]: Started kubelet.service. Nov 1 00:11:46.300018 kernel: audit: type=1130 audit(1761955906.283:255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:46.376074 kubelet[2279]: E1101 00:11:46.375953 2279 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 00:11:46.379525 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 00:11:46.379845 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 00:11:46.379000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 00:11:46.389050 kernel: audit: type=1131 audit(1761955906.379:256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 00:11:51.030100 systemd[1]: Stopped kubelet.service. Nov 1 00:11:51.030000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:51.038011 systemd[1]: Starting kubelet.service... Nov 1 00:11:51.030000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:51.049956 kernel: audit: type=1130 audit(1761955911.030:257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:51.050111 kernel: audit: type=1131 audit(1761955911.030:258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:51.097623 systemd[1]: Reloading. Nov 1 00:11:51.275117 /usr/lib/systemd/system-generators/torcx-generator[2311]: time="2025-11-01T00:11:51Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Nov 1 00:11:51.286518 /usr/lib/systemd/system-generators/torcx-generator[2311]: time="2025-11-01T00:11:51Z" level=info msg="torcx already run" Nov 1 00:11:51.487316 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Nov 1 00:11:51.487558 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Nov 1 00:11:51.526605 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Nov 1 00:11:51.689000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.697000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.709600 kernel: audit: type=1400 audit(1761955911.689:259): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.709691 kernel: audit: type=1400 audit(1761955911.697:260): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.709749 kernel: audit: type=1400 audit(1761955911.697:261): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.697000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.697000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.724712 kernel: audit: type=1400 audit(1761955911.697:262): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.724804 kernel: audit: type=1400 audit(1761955911.697:263): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.697000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.742069 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Nov 1 00:11:51.742233 kernel: audit: type=1400 audit(1761955911.697:264): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.742299 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Nov 1 00:11:51.697000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.697000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.697000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.697000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.697000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.697000 audit: BPF prog-id=46 op=LOAD Nov 1 00:11:51.698000 audit: BPF prog-id=27 op=UNLOAD Nov 1 00:11:51.698000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.698000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.698000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.698000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.698000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.698000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.698000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.698000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.698000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.698000 audit: BPF prog-id=47 op=LOAD Nov 1 00:11:51.698000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.698000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.698000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.698000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.698000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.698000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.698000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.698000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.698000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.698000 audit: BPF prog-id=48 op=LOAD Nov 1 00:11:51.698000 audit: BPF prog-id=28 op=UNLOAD Nov 1 00:11:51.698000 audit: BPF prog-id=29 op=UNLOAD Nov 1 00:11:51.701000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.701000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.701000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.701000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.701000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.701000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.701000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.701000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.701000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.708000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.708000 audit: BPF prog-id=49 op=LOAD Nov 1 00:11:51.708000 audit: BPF prog-id=30 op=UNLOAD Nov 1 00:11:51.709000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.709000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.709000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.709000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.709000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.709000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.709000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.709000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.716000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.716000 audit: BPF prog-id=50 op=LOAD Nov 1 00:11:51.716000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.716000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.716000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.716000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.716000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.716000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.716000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.716000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.724000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.724000 audit: BPF prog-id=51 op=LOAD Nov 1 00:11:51.724000 audit: BPF prog-id=31 op=UNLOAD Nov 1 00:11:51.724000 audit: BPF prog-id=32 op=UNLOAD Nov 1 00:11:51.726000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.726000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.743000 audit: BPF prog-id=52 op=LOAD Nov 1 00:11:51.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.743000 audit: BPF prog-id=53 op=LOAD Nov 1 00:11:51.743000 audit: BPF prog-id=33 op=UNLOAD Nov 1 00:11:51.743000 audit: BPF prog-id=34 op=UNLOAD Nov 1 00:11:51.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.748000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.748000 audit: BPF prog-id=54 op=LOAD Nov 1 00:11:51.748000 audit: BPF prog-id=36 op=UNLOAD Nov 1 00:11:51.750000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.750000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.750000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.750000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.750000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.750000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.750000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.750000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.750000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.750000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.750000 audit: BPF prog-id=55 op=LOAD Nov 1 00:11:51.750000 audit: BPF prog-id=37 op=UNLOAD Nov 1 00:11:51.752000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.752000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.752000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.752000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.752000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.752000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.752000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.752000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.752000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.752000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.752000 audit: BPF prog-id=56 op=LOAD Nov 1 00:11:51.752000 audit: BPF prog-id=38 op=UNLOAD Nov 1 00:11:51.752000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.753000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.753000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.753000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.753000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.753000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.753000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.753000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.753000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.753000 audit: BPF prog-id=57 op=LOAD Nov 1 00:11:51.753000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.753000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.753000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.753000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.753000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.753000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.753000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.753000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.753000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.753000 audit: BPF prog-id=58 op=LOAD Nov 1 00:11:51.753000 audit: BPF prog-id=39 op=UNLOAD Nov 1 00:11:51.753000 audit: BPF prog-id=40 op=UNLOAD Nov 1 00:11:51.756000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.756000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.756000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.756000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.756000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.756000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.756000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.756000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.756000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.756000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.756000 audit: BPF prog-id=59 op=LOAD Nov 1 00:11:51.756000 audit: BPF prog-id=35 op=UNLOAD Nov 1 00:11:51.760000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.760000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.760000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.760000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.760000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.760000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.760000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.760000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.760000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.760000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:51.760000 audit: BPF prog-id=60 op=LOAD Nov 1 00:11:51.760000 audit: BPF prog-id=44 op=UNLOAD Nov 1 00:11:51.802920 systemd[1]: Started kubelet.service. Nov 1 00:11:51.802000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:51.812775 systemd[1]: Stopping kubelet.service... Nov 1 00:11:51.814750 systemd[1]: kubelet.service: Deactivated successfully. Nov 1 00:11:51.815193 systemd[1]: Stopped kubelet.service. Nov 1 00:11:51.814000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:51.818769 systemd[1]: Starting kubelet.service... Nov 1 00:11:52.157000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:11:52.156958 systemd[1]: Started kubelet.service. Nov 1 00:11:52.231521 kubelet[2374]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Nov 1 00:11:52.231521 kubelet[2374]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Nov 1 00:11:52.231521 kubelet[2374]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Nov 1 00:11:52.232202 kubelet[2374]: I1101 00:11:52.231616 2374 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Nov 1 00:11:52.688080 amazon-ssm-agent[1799]: 2025-11-01 00:11:52 INFO [MessagingDeliveryService] [Association] Schedule manager refreshed with 0 associations, 0 new associations associated Nov 1 00:11:53.071851 kubelet[2374]: I1101 00:11:53.071717 2374 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Nov 1 00:11:53.072407 kubelet[2374]: I1101 00:11:53.072379 2374 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Nov 1 00:11:53.072989 kubelet[2374]: I1101 00:11:53.072943 2374 server.go:956] "Client rotation is on, will bootstrap in background" Nov 1 00:11:53.157225 kubelet[2374]: E1101 00:11:53.157168 2374 certificate_manager.go:596] "Failed while requesting a signed certificate from the control plane" err="cannot create certificate signing request: Post \"https://172.31.24.47:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 172.31.24.47:6443: connect: connection refused" logger="kubernetes.io/kube-apiserver-client-kubelet.UnhandledError" Nov 1 00:11:53.158444 kubelet[2374]: I1101 00:11:53.158408 2374 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Nov 1 00:11:53.173154 kubelet[2374]: E1101 00:11:53.173106 2374 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Nov 1 00:11:53.173380 kubelet[2374]: I1101 00:11:53.173356 2374 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Nov 1 00:11:53.179304 kubelet[2374]: I1101 00:11:53.179268 2374 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Nov 1 00:11:53.180248 kubelet[2374]: I1101 00:11:53.180201 2374 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Nov 1 00:11:53.180644 kubelet[2374]: I1101 00:11:53.180367 2374 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ip-172-31-24-47","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Nov 1 00:11:53.181009 kubelet[2374]: I1101 00:11:53.180986 2374 topology_manager.go:138] "Creating topology manager with none policy" Nov 1 00:11:53.181131 kubelet[2374]: I1101 00:11:53.181111 2374 container_manager_linux.go:303] "Creating device plugin manager" Nov 1 00:11:53.181568 kubelet[2374]: I1101 00:11:53.181547 2374 state_mem.go:36] "Initialized new in-memory state store" Nov 1 00:11:53.190717 kubelet[2374]: I1101 00:11:53.190681 2374 kubelet.go:480] "Attempting to sync node with API server" Nov 1 00:11:53.190949 kubelet[2374]: I1101 00:11:53.190925 2374 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Nov 1 00:11:53.198793 kubelet[2374]: E1101 00:11:53.198747 2374 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://172.31.24.47:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-24-47&limit=500&resourceVersion=0\": dial tcp 172.31.24.47:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Nov 1 00:11:53.199311 kubelet[2374]: I1101 00:11:53.199275 2374 kubelet.go:386] "Adding apiserver pod source" Nov 1 00:11:53.203086 kubelet[2374]: I1101 00:11:53.203035 2374 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Nov 1 00:11:53.205272 kubelet[2374]: E1101 00:11:53.205070 2374 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://172.31.24.47:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 172.31.24.47:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Nov 1 00:11:53.205649 kubelet[2374]: I1101 00:11:53.205619 2374 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Nov 1 00:11:53.207031 kubelet[2374]: I1101 00:11:53.206997 2374 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Nov 1 00:11:53.207387 kubelet[2374]: W1101 00:11:53.207367 2374 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Nov 1 00:11:53.223784 kubelet[2374]: I1101 00:11:53.223752 2374 watchdog_linux.go:99] "Systemd watchdog is not enabled" Nov 1 00:11:53.224014 kubelet[2374]: I1101 00:11:53.223966 2374 server.go:1289] "Started kubelet" Nov 1 00:11:53.225686 kubelet[2374]: I1101 00:11:53.225613 2374 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Nov 1 00:11:53.227530 kubelet[2374]: I1101 00:11:53.227472 2374 server.go:317] "Adding debug handlers to kubelet server" Nov 1 00:11:53.241000 audit[2374]: AVC avc: denied { mac_admin } for pid=2374 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:53.241000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:11:53.241000 audit[2374]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000b33860 a1=4000bba378 a2=4000b33830 a3=25 items=0 ppid=1 pid=2374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:53.241000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:11:53.241000 audit[2374]: AVC avc: denied { mac_admin } for pid=2374 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:53.241000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:11:53.241000 audit[2374]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000a41640 a1=4000bba390 a2=4000b338f0 a3=25 items=0 ppid=1 pid=2374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:53.241000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:11:53.243123 kubelet[2374]: I1101 00:11:53.242194 2374 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Nov 1 00:11:53.243123 kubelet[2374]: I1101 00:11:53.242281 2374 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Nov 1 00:11:53.243123 kubelet[2374]: I1101 00:11:53.242437 2374 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Nov 1 00:11:53.244155 kubelet[2374]: I1101 00:11:53.244066 2374 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Nov 1 00:11:53.244677 kubelet[2374]: I1101 00:11:53.244637 2374 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Nov 1 00:11:53.251604 kubelet[2374]: I1101 00:11:53.251562 2374 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Nov 1 00:11:53.253373 kubelet[2374]: I1101 00:11:53.253326 2374 volume_manager.go:297] "Starting Kubelet Volume Manager" Nov 1 00:11:53.253741 kubelet[2374]: E1101 00:11:53.253697 2374 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-24-47\" not found" Nov 1 00:11:53.254218 kubelet[2374]: I1101 00:11:53.254180 2374 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Nov 1 00:11:53.254310 kubelet[2374]: I1101 00:11:53.254279 2374 reconciler.go:26] "Reconciler: start to sync state" Nov 1 00:11:53.255142 kubelet[2374]: E1101 00:11:53.255060 2374 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://172.31.24.47:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 172.31.24.47:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Nov 1 00:11:53.255300 kubelet[2374]: E1101 00:11:53.255238 2374 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.24.47:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-24-47?timeout=10s\": dial tcp 172.31.24.47:6443: connect: connection refused" interval="200ms" Nov 1 00:11:53.257481 kubelet[2374]: E1101 00:11:53.257430 2374 kubelet.go:1600] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Nov 1 00:11:53.259452 kubelet[2374]: E1101 00:11:53.257067 2374 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://172.31.24.47:6443/api/v1/namespaces/default/events\": dial tcp 172.31.24.47:6443: connect: connection refused" event="&Event{ObjectMeta:{ip-172-31-24-47.1873b9915d9c78b6 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:ip-172-31-24-47,UID:ip-172-31-24-47,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:ip-172-31-24-47,},FirstTimestamp:2025-11-01 00:11:53.22392799 +0000 UTC m=+1.056405196,LastTimestamp:2025-11-01 00:11:53.22392799 +0000 UTC m=+1.056405196,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:ip-172-31-24-47,}" Nov 1 00:11:53.259987 kubelet[2374]: I1101 00:11:53.259941 2374 factory.go:223] Registration of the systemd container factory successfully Nov 1 00:11:53.260294 kubelet[2374]: I1101 00:11:53.260261 2374 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Nov 1 00:11:53.263248 kubelet[2374]: I1101 00:11:53.263213 2374 factory.go:223] Registration of the containerd container factory successfully Nov 1 00:11:53.263000 audit[2390]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=2390 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:11:53.263000 audit[2390]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffe54c1690 a2=0 a3=1 items=0 ppid=2374 pid=2390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:53.263000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Nov 1 00:11:53.265000 audit[2391]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=2391 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:11:53.265000 audit[2391]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc74dfa50 a2=0 a3=1 items=0 ppid=2374 pid=2391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:53.265000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Nov 1 00:11:53.269000 audit[2393]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=2393 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:11:53.269000 audit[2393]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffd44374a0 a2=0 a3=1 items=0 ppid=2374 pid=2393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:53.269000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Nov 1 00:11:53.273000 audit[2395]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=2395 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:11:53.273000 audit[2395]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffedaaaec0 a2=0 a3=1 items=0 ppid=2374 pid=2395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:53.273000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Nov 1 00:11:53.299537 kubelet[2374]: I1101 00:11:53.299495 2374 cpu_manager.go:221] "Starting CPU manager" policy="none" Nov 1 00:11:53.299537 kubelet[2374]: I1101 00:11:53.299529 2374 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Nov 1 00:11:53.299756 kubelet[2374]: I1101 00:11:53.299563 2374 state_mem.go:36] "Initialized new in-memory state store" Nov 1 00:11:53.302814 kubelet[2374]: I1101 00:11:53.302761 2374 policy_none.go:49] "None policy: Start" Nov 1 00:11:53.302923 kubelet[2374]: I1101 00:11:53.302822 2374 memory_manager.go:186] "Starting memorymanager" policy="None" Nov 1 00:11:53.302923 kubelet[2374]: I1101 00:11:53.302848 2374 state_mem.go:35] "Initializing new in-memory state store" Nov 1 00:11:53.311221 systemd[1]: Created slice kubepods.slice. Nov 1 00:11:53.321910 systemd[1]: Created slice kubepods-burstable.slice. Nov 1 00:11:53.331526 systemd[1]: Created slice kubepods-besteffort.slice. Nov 1 00:11:53.339943 kubelet[2374]: E1101 00:11:53.339882 2374 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Nov 1 00:11:53.338000 audit[2374]: AVC avc: denied { mac_admin } for pid=2374 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:53.338000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:11:53.338000 audit[2374]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000915ec0 a1=4000b5b920 a2=4000915e90 a3=25 items=0 ppid=1 pid=2374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:53.338000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:11:53.340459 kubelet[2374]: E1101 00:11:53.340111 2374 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Nov 1 00:11:53.340459 kubelet[2374]: I1101 00:11:53.340316 2374 eviction_manager.go:189] "Eviction manager: starting control loop" Nov 1 00:11:53.340459 kubelet[2374]: I1101 00:11:53.340336 2374 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Nov 1 00:11:53.341563 kubelet[2374]: I1101 00:11:53.341343 2374 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Nov 1 00:11:53.346133 kubelet[2374]: E1101 00:11:53.345210 2374 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Nov 1 00:11:53.346133 kubelet[2374]: E1101 00:11:53.345317 2374 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ip-172-31-24-47\" not found" Nov 1 00:11:53.406000 audit[2401]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=2401 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:11:53.406000 audit[2401]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=fffff96e2460 a2=0 a3=1 items=0 ppid=2374 pid=2401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:53.406000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Nov 1 00:11:53.408416 kubelet[2374]: I1101 00:11:53.408358 2374 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Nov 1 00:11:53.409000 audit[2403]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=2403 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:11:53.409000 audit[2403]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=fffff000e0c0 a2=0 a3=1 items=0 ppid=2374 pid=2403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:53.409000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Nov 1 00:11:53.411124 kubelet[2374]: I1101 00:11:53.411089 2374 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Nov 1 00:11:53.411292 kubelet[2374]: I1101 00:11:53.411270 2374 status_manager.go:230] "Starting to sync pod status with apiserver" Nov 1 00:11:53.411437 kubelet[2374]: I1101 00:11:53.411414 2374 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Nov 1 00:11:53.411584 kubelet[2374]: I1101 00:11:53.411564 2374 kubelet.go:2436] "Starting kubelet main sync loop" Nov 1 00:11:53.411752 kubelet[2374]: E1101 00:11:53.411726 2374 kubelet.go:2460] "Skipping pod synchronization" err="PLEG is not healthy: pleg has yet to be successful" Nov 1 00:11:53.413198 kubelet[2374]: E1101 00:11:53.413155 2374 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://172.31.24.47:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 172.31.24.47:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Nov 1 00:11:53.412000 audit[2404]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=2404 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:11:53.412000 audit[2404]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc9cf0cb0 a2=0 a3=1 items=0 ppid=2374 pid=2404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:53.412000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Nov 1 00:11:53.415000 audit[2405]: NETFILTER_CFG table=mangle:33 family=10 entries=1 op=nft_register_chain pid=2405 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:11:53.415000 audit[2405]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff152b0b0 a2=0 a3=1 items=0 ppid=2374 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:53.415000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Nov 1 00:11:53.415000 audit[2406]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=2406 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:11:53.415000 audit[2406]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc567ce30 a2=0 a3=1 items=0 ppid=2374 pid=2406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:53.415000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Nov 1 00:11:53.417000 audit[2408]: NETFILTER_CFG table=filter:35 family=2 entries=1 op=nft_register_chain pid=2408 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:11:53.417000 audit[2408]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd42fa330 a2=0 a3=1 items=0 ppid=2374 pid=2408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:53.417000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Nov 1 00:11:53.418000 audit[2407]: NETFILTER_CFG table=nat:36 family=10 entries=2 op=nft_register_chain pid=2407 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:11:53.418000 audit[2407]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=fffffc4fd970 a2=0 a3=1 items=0 ppid=2374 pid=2407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:53.418000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Nov 1 00:11:53.420000 audit[2409]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=2409 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:11:53.420000 audit[2409]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=fffffb083250 a2=0 a3=1 items=0 ppid=2374 pid=2409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:53.420000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Nov 1 00:11:53.442883 kubelet[2374]: I1101 00:11:53.442841 2374 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-24-47" Nov 1 00:11:53.444170 kubelet[2374]: E1101 00:11:53.444118 2374 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://172.31.24.47:6443/api/v1/nodes\": dial tcp 172.31.24.47:6443: connect: connection refused" node="ip-172-31-24-47" Nov 1 00:11:53.455835 kubelet[2374]: E1101 00:11:53.455780 2374 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.24.47:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-24-47?timeout=10s\": dial tcp 172.31.24.47:6443: connect: connection refused" interval="400ms" Nov 1 00:11:53.528601 systemd[1]: Created slice kubepods-burstable-podef1074c03c1af95f4944e5ff222a8b90.slice. Nov 1 00:11:53.540458 kubelet[2374]: E1101 00:11:53.540423 2374 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-24-47\" not found" node="ip-172-31-24-47" Nov 1 00:11:53.547423 systemd[1]: Created slice kubepods-burstable-pod722f2f966210aac57b0e73b5b7e5f392.slice. Nov 1 00:11:53.556319 kubelet[2374]: E1101 00:11:53.555055 2374 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-24-47\" not found" node="ip-172-31-24-47" Nov 1 00:11:53.556319 kubelet[2374]: I1101 00:11:53.555636 2374 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/ef1074c03c1af95f4944e5ff222a8b90-ca-certs\") pod \"kube-apiserver-ip-172-31-24-47\" (UID: \"ef1074c03c1af95f4944e5ff222a8b90\") " pod="kube-system/kube-apiserver-ip-172-31-24-47" Nov 1 00:11:53.556319 kubelet[2374]: I1101 00:11:53.555686 2374 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/722f2f966210aac57b0e73b5b7e5f392-ca-certs\") pod \"kube-controller-manager-ip-172-31-24-47\" (UID: \"722f2f966210aac57b0e73b5b7e5f392\") " pod="kube-system/kube-controller-manager-ip-172-31-24-47" Nov 1 00:11:53.556319 kubelet[2374]: I1101 00:11:53.555754 2374 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/722f2f966210aac57b0e73b5b7e5f392-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-24-47\" (UID: \"722f2f966210aac57b0e73b5b7e5f392\") " pod="kube-system/kube-controller-manager-ip-172-31-24-47" Nov 1 00:11:53.556319 kubelet[2374]: I1101 00:11:53.555822 2374 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/722f2f966210aac57b0e73b5b7e5f392-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-24-47\" (UID: \"722f2f966210aac57b0e73b5b7e5f392\") " pod="kube-system/kube-controller-manager-ip-172-31-24-47" Nov 1 00:11:53.558335 kubelet[2374]: I1101 00:11:53.555876 2374 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/ef1074c03c1af95f4944e5ff222a8b90-k8s-certs\") pod \"kube-apiserver-ip-172-31-24-47\" (UID: \"ef1074c03c1af95f4944e5ff222a8b90\") " pod="kube-system/kube-apiserver-ip-172-31-24-47" Nov 1 00:11:53.558335 kubelet[2374]: I1101 00:11:53.555937 2374 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/ef1074c03c1af95f4944e5ff222a8b90-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-24-47\" (UID: \"ef1074c03c1af95f4944e5ff222a8b90\") " pod="kube-system/kube-apiserver-ip-172-31-24-47" Nov 1 00:11:53.558335 kubelet[2374]: I1101 00:11:53.556030 2374 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/722f2f966210aac57b0e73b5b7e5f392-k8s-certs\") pod \"kube-controller-manager-ip-172-31-24-47\" (UID: \"722f2f966210aac57b0e73b5b7e5f392\") " pod="kube-system/kube-controller-manager-ip-172-31-24-47" Nov 1 00:11:53.558335 kubelet[2374]: I1101 00:11:53.556096 2374 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/722f2f966210aac57b0e73b5b7e5f392-kubeconfig\") pod \"kube-controller-manager-ip-172-31-24-47\" (UID: \"722f2f966210aac57b0e73b5b7e5f392\") " pod="kube-system/kube-controller-manager-ip-172-31-24-47" Nov 1 00:11:53.558335 kubelet[2374]: I1101 00:11:53.556138 2374 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/1a139bb3045ccb83ea958030afe9d3b6-kubeconfig\") pod \"kube-scheduler-ip-172-31-24-47\" (UID: \"1a139bb3045ccb83ea958030afe9d3b6\") " pod="kube-system/kube-scheduler-ip-172-31-24-47" Nov 1 00:11:53.558276 systemd[1]: Created slice kubepods-burstable-pod1a139bb3045ccb83ea958030afe9d3b6.slice. Nov 1 00:11:53.562402 kubelet[2374]: E1101 00:11:53.562353 2374 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-24-47\" not found" node="ip-172-31-24-47" Nov 1 00:11:53.647492 kubelet[2374]: I1101 00:11:53.646633 2374 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-24-47" Nov 1 00:11:53.647492 kubelet[2374]: E1101 00:11:53.647391 2374 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://172.31.24.47:6443/api/v1/nodes\": dial tcp 172.31.24.47:6443: connect: connection refused" node="ip-172-31-24-47" Nov 1 00:11:53.843431 env[1820]: time="2025-11-01T00:11:53.843371115Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-24-47,Uid:ef1074c03c1af95f4944e5ff222a8b90,Namespace:kube-system,Attempt:0,}" Nov 1 00:11:53.856627 env[1820]: time="2025-11-01T00:11:53.856425026Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-24-47,Uid:722f2f966210aac57b0e73b5b7e5f392,Namespace:kube-system,Attempt:0,}" Nov 1 00:11:53.856778 kubelet[2374]: E1101 00:11:53.856424 2374 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.24.47:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-24-47?timeout=10s\": dial tcp 172.31.24.47:6443: connect: connection refused" interval="800ms" Nov 1 00:11:53.864628 env[1820]: time="2025-11-01T00:11:53.864441849Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-24-47,Uid:1a139bb3045ccb83ea958030afe9d3b6,Namespace:kube-system,Attempt:0,}" Nov 1 00:11:54.050076 kubelet[2374]: I1101 00:11:54.049997 2374 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-24-47" Nov 1 00:11:54.050504 kubelet[2374]: E1101 00:11:54.050456 2374 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://172.31.24.47:6443/api/v1/nodes\": dial tcp 172.31.24.47:6443: connect: connection refused" node="ip-172-31-24-47" Nov 1 00:11:54.319047 kubelet[2374]: E1101 00:11:54.318559 2374 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://172.31.24.47:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 172.31.24.47:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Nov 1 00:11:54.323357 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1870868217.mount: Deactivated successfully. Nov 1 00:11:54.332935 env[1820]: time="2025-11-01T00:11:54.332874094Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:11:54.334711 env[1820]: time="2025-11-01T00:11:54.334665109Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:11:54.336724 env[1820]: time="2025-11-01T00:11:54.336655138Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:11:54.342315 env[1820]: time="2025-11-01T00:11:54.342260690Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:11:54.345596 env[1820]: time="2025-11-01T00:11:54.345510788Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:11:54.347620 env[1820]: time="2025-11-01T00:11:54.347576288Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:11:54.355379 env[1820]: time="2025-11-01T00:11:54.355306730Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:11:54.359880 kubelet[2374]: E1101 00:11:54.359808 2374 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://172.31.24.47:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 172.31.24.47:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Nov 1 00:11:54.363831 env[1820]: time="2025-11-01T00:11:54.363742760Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:11:54.367854 env[1820]: time="2025-11-01T00:11:54.367783805Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:11:54.369914 env[1820]: time="2025-11-01T00:11:54.369860874Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:11:54.373560 env[1820]: time="2025-11-01T00:11:54.373499005Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:11:54.382914 env[1820]: time="2025-11-01T00:11:54.382859344Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:11:54.395757 update_engine[1814]: I1101 00:11:54.395694 1814 update_attempter.cc:509] Updating boot flags... Nov 1 00:11:54.416902 env[1820]: time="2025-11-01T00:11:54.416769120Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:11:54.417134 env[1820]: time="2025-11-01T00:11:54.416912357Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:11:54.417134 env[1820]: time="2025-11-01T00:11:54.417004784Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:11:54.419899 env[1820]: time="2025-11-01T00:11:54.419782245Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/cb2b33c8babd82ac0019f69977aa542317776cc4454b77089e6bcd900407766b pid=2422 runtime=io.containerd.runc.v2 Nov 1 00:11:54.422430 kubelet[2374]: E1101 00:11:54.422331 2374 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://172.31.24.47:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 172.31.24.47:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Nov 1 00:11:54.431120 kubelet[2374]: E1101 00:11:54.427331 2374 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://172.31.24.47:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-24-47&limit=500&resourceVersion=0\": dial tcp 172.31.24.47:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Nov 1 00:11:54.479764 env[1820]: time="2025-11-01T00:11:54.479619466Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:11:54.479905 env[1820]: time="2025-11-01T00:11:54.479787664Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:11:54.479995 env[1820]: time="2025-11-01T00:11:54.479878051Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:11:54.480327 env[1820]: time="2025-11-01T00:11:54.480235855Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c37c046cde14dbb435baabb31481ad3dd1ffdfc78d36591d4f8cfb144b55932a pid=2459 runtime=io.containerd.runc.v2 Nov 1 00:11:54.510837 systemd[1]: Started cri-containerd-cb2b33c8babd82ac0019f69977aa542317776cc4454b77089e6bcd900407766b.scope. Nov 1 00:11:54.563659 env[1820]: time="2025-11-01T00:11:54.563477806Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:11:54.564006 env[1820]: time="2025-11-01T00:11:54.563908225Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:11:54.564225 env[1820]: time="2025-11-01T00:11:54.564164998Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:11:54.565679 env[1820]: time="2025-11-01T00:11:54.565556902Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/0871af23484a5245fb4a26ef65385dbb88ffc456a8b518b862a684acf865b7e6 pid=2486 runtime=io.containerd.runc.v2 Nov 1 00:11:54.578799 systemd[1]: Started cri-containerd-c37c046cde14dbb435baabb31481ad3dd1ffdfc78d36591d4f8cfb144b55932a.scope. Nov 1 00:11:54.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.595000 audit: BPF prog-id=61 op=LOAD Nov 1 00:11:54.601000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.601000 audit[2434]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2422 pid=2434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:54.601000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362326233336338626162643832616330303139663639393737616135 Nov 1 00:11:54.601000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.601000 audit[2434]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2422 pid=2434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:54.601000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362326233336338626162643832616330303139663639393737616135 Nov 1 00:11:54.602000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.602000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.602000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.602000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.602000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.602000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.602000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.602000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.602000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.602000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.602000 audit: BPF prog-id=62 op=LOAD Nov 1 00:11:54.602000 audit[2434]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2422 pid=2434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:54.602000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362326233336338626162643832616330303139663639393737616135 Nov 1 00:11:54.604000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.604000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.604000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.604000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.604000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.604000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.604000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.604000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.604000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.604000 audit: BPF prog-id=63 op=LOAD Nov 1 00:11:54.604000 audit[2434]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2422 pid=2434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:54.604000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362326233336338626162643832616330303139663639393737616135 Nov 1 00:11:54.605000 audit: BPF prog-id=63 op=UNLOAD Nov 1 00:11:54.606000 audit: BPF prog-id=62 op=UNLOAD Nov 1 00:11:54.606000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.606000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.606000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.606000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.606000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.606000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.606000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.606000 audit[2434]: AVC avc: denied { perfmon } for pid=2434 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.606000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.606000 audit[2434]: AVC avc: denied { bpf } for pid=2434 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.606000 audit: BPF prog-id=64 op=LOAD Nov 1 00:11:54.606000 audit[2434]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2422 pid=2434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:54.606000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362326233336338626162643832616330303139663639393737616135 Nov 1 00:11:54.658409 kubelet[2374]: E1101 00:11:54.658342 2374 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.24.47:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-24-47?timeout=10s\": dial tcp 172.31.24.47:6443: connect: connection refused" interval="1.6s" Nov 1 00:11:54.674804 systemd[1]: Started cri-containerd-0871af23484a5245fb4a26ef65385dbb88ffc456a8b518b862a684acf865b7e6.scope. Nov 1 00:11:54.710000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.710000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.710000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.710000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.710000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.710000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.710000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.710000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.710000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.711000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.711000 audit: BPF prog-id=65 op=LOAD Nov 1 00:11:54.718000 audit[2478]: AVC avc: denied { bpf } for pid=2478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.718000 audit[2478]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2459 pid=2478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:54.718000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333376330343663646531346462623433356261616262333134383161 Nov 1 00:11:54.735000 audit[2478]: AVC avc: denied { perfmon } for pid=2478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.735000 audit[2478]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2459 pid=2478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:54.735000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333376330343663646531346462623433356261616262333134383161 Nov 1 00:11:54.738000 audit[2478]: AVC avc: denied { bpf } for pid=2478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.738000 audit[2478]: AVC avc: denied { bpf } for pid=2478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.738000 audit[2478]: AVC avc: denied { bpf } for pid=2478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.738000 audit[2478]: AVC avc: denied { perfmon } for pid=2478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.738000 audit[2478]: AVC avc: denied { perfmon } for pid=2478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.738000 audit[2478]: AVC avc: denied { perfmon } for pid=2478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.738000 audit[2478]: AVC avc: denied { perfmon } for pid=2478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.738000 audit[2478]: AVC avc: denied { perfmon } for pid=2478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.738000 audit[2478]: AVC avc: denied { bpf } for pid=2478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.738000 audit[2478]: AVC avc: denied { bpf } for pid=2478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.738000 audit: BPF prog-id=66 op=LOAD Nov 1 00:11:54.738000 audit[2478]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2459 pid=2478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:54.738000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333376330343663646531346462623433356261616262333134383161 Nov 1 00:11:54.744000 audit[2478]: AVC avc: denied { bpf } for pid=2478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.744000 audit[2478]: AVC avc: denied { bpf } for pid=2478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.744000 audit[2478]: AVC avc: denied { perfmon } for pid=2478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.744000 audit[2478]: AVC avc: denied { perfmon } for pid=2478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.744000 audit[2478]: AVC avc: denied { perfmon } for pid=2478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.744000 audit[2478]: AVC avc: denied { perfmon } for pid=2478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.744000 audit[2478]: AVC avc: denied { perfmon } for pid=2478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.744000 audit[2478]: AVC avc: denied { bpf } for pid=2478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.744000 audit[2478]: AVC avc: denied { bpf } for pid=2478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.744000 audit: BPF prog-id=67 op=LOAD Nov 1 00:11:54.744000 audit[2478]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2459 pid=2478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:54.744000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333376330343663646531346462623433356261616262333134383161 Nov 1 00:11:54.746000 audit: BPF prog-id=67 op=UNLOAD Nov 1 00:11:54.747000 audit: BPF prog-id=66 op=UNLOAD Nov 1 00:11:54.747000 audit[2478]: AVC avc: denied { bpf } for pid=2478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.747000 audit[2478]: AVC avc: denied { bpf } for pid=2478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.747000 audit[2478]: AVC avc: denied { bpf } for pid=2478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.747000 audit[2478]: AVC avc: denied { perfmon } for pid=2478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.747000 audit[2478]: AVC avc: denied { perfmon } for pid=2478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.747000 audit[2478]: AVC avc: denied { perfmon } for pid=2478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.747000 audit[2478]: AVC avc: denied { perfmon } for pid=2478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.747000 audit[2478]: AVC avc: denied { perfmon } for pid=2478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.747000 audit[2478]: AVC avc: denied { bpf } for pid=2478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.747000 audit[2478]: AVC avc: denied { bpf } for pid=2478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.747000 audit: BPF prog-id=68 op=LOAD Nov 1 00:11:54.747000 audit[2478]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2459 pid=2478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:54.747000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333376330343663646531346462623433356261616262333134383161 Nov 1 00:11:54.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.757000 audit: BPF prog-id=69 op=LOAD Nov 1 00:11:54.759000 audit[2529]: AVC avc: denied { bpf } for pid=2529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.759000 audit[2529]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2486 pid=2529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:54.759000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038373161663233343834613532343566623461323665663635333835 Nov 1 00:11:54.761000 audit[2529]: AVC avc: denied { perfmon } for pid=2529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.761000 audit[2529]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2486 pid=2529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:54.761000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038373161663233343834613532343566623461323665663635333835 Nov 1 00:11:54.761000 audit[2529]: AVC avc: denied { bpf } for pid=2529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.761000 audit[2529]: AVC avc: denied { bpf } for pid=2529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.761000 audit[2529]: AVC avc: denied { bpf } for pid=2529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.761000 audit[2529]: AVC avc: denied { perfmon } for pid=2529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.761000 audit[2529]: AVC avc: denied { perfmon } for pid=2529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.761000 audit[2529]: AVC avc: denied { perfmon } for pid=2529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.761000 audit[2529]: AVC avc: denied { perfmon } for pid=2529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.761000 audit[2529]: AVC avc: denied { perfmon } for pid=2529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.761000 audit[2529]: AVC avc: denied { bpf } for pid=2529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.761000 audit[2529]: AVC avc: denied { bpf } for pid=2529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.761000 audit: BPF prog-id=70 op=LOAD Nov 1 00:11:54.761000 audit[2529]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2486 pid=2529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:54.761000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038373161663233343834613532343566623461323665663635333835 Nov 1 00:11:54.763000 audit[2529]: AVC avc: denied { bpf } for pid=2529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.763000 audit[2529]: AVC avc: denied { bpf } for pid=2529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.763000 audit[2529]: AVC avc: denied { perfmon } for pid=2529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.763000 audit[2529]: AVC avc: denied { perfmon } for pid=2529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.763000 audit[2529]: AVC avc: denied { perfmon } for pid=2529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.763000 audit[2529]: AVC avc: denied { perfmon } for pid=2529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.763000 audit[2529]: AVC avc: denied { perfmon } for pid=2529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.763000 audit[2529]: AVC avc: denied { bpf } for pid=2529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.763000 audit[2529]: AVC avc: denied { bpf } for pid=2529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.763000 audit: BPF prog-id=71 op=LOAD Nov 1 00:11:54.763000 audit[2529]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2486 pid=2529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:54.763000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038373161663233343834613532343566623461323665663635333835 Nov 1 00:11:54.766000 audit: BPF prog-id=71 op=UNLOAD Nov 1 00:11:54.766000 audit: BPF prog-id=70 op=UNLOAD Nov 1 00:11:54.766000 audit[2529]: AVC avc: denied { bpf } for pid=2529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.766000 audit[2529]: AVC avc: denied { bpf } for pid=2529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.766000 audit[2529]: AVC avc: denied { bpf } for pid=2529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.766000 audit[2529]: AVC avc: denied { perfmon } for pid=2529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.766000 audit[2529]: AVC avc: denied { perfmon } for pid=2529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.766000 audit[2529]: AVC avc: denied { perfmon } for pid=2529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.766000 audit[2529]: AVC avc: denied { perfmon } for pid=2529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.766000 audit[2529]: AVC avc: denied { perfmon } for pid=2529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.766000 audit[2529]: AVC avc: denied { bpf } for pid=2529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.766000 audit[2529]: AVC avc: denied { bpf } for pid=2529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:54.766000 audit: BPF prog-id=72 op=LOAD Nov 1 00:11:54.766000 audit[2529]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2486 pid=2529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:54.766000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038373161663233343834613532343566623461323665663635333835 Nov 1 00:11:54.849520 env[1820]: time="2025-11-01T00:11:54.841536298Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-24-47,Uid:722f2f966210aac57b0e73b5b7e5f392,Namespace:kube-system,Attempt:0,} returns sandbox id \"cb2b33c8babd82ac0019f69977aa542317776cc4454b77089e6bcd900407766b\"" Nov 1 00:11:54.856022 kubelet[2374]: I1101 00:11:54.855754 2374 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-24-47" Nov 1 00:11:54.856516 kubelet[2374]: E1101 00:11:54.856454 2374 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://172.31.24.47:6443/api/v1/nodes\": dial tcp 172.31.24.47:6443: connect: connection refused" node="ip-172-31-24-47" Nov 1 00:11:54.875652 env[1820]: time="2025-11-01T00:11:54.875583179Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-24-47,Uid:1a139bb3045ccb83ea958030afe9d3b6,Namespace:kube-system,Attempt:0,} returns sandbox id \"0871af23484a5245fb4a26ef65385dbb88ffc456a8b518b862a684acf865b7e6\"" Nov 1 00:11:54.890740 env[1820]: time="2025-11-01T00:11:54.890665101Z" level=info msg="CreateContainer within sandbox \"cb2b33c8babd82ac0019f69977aa542317776cc4454b77089e6bcd900407766b\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Nov 1 00:11:54.910569 env[1820]: time="2025-11-01T00:11:54.910507746Z" level=info msg="CreateContainer within sandbox \"0871af23484a5245fb4a26ef65385dbb88ffc456a8b518b862a684acf865b7e6\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Nov 1 00:11:54.917785 env[1820]: time="2025-11-01T00:11:54.917714106Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-24-47,Uid:ef1074c03c1af95f4944e5ff222a8b90,Namespace:kube-system,Attempt:0,} returns sandbox id \"c37c046cde14dbb435baabb31481ad3dd1ffdfc78d36591d4f8cfb144b55932a\"" Nov 1 00:11:54.931568 env[1820]: time="2025-11-01T00:11:54.931511155Z" level=info msg="CreateContainer within sandbox \"c37c046cde14dbb435baabb31481ad3dd1ffdfc78d36591d4f8cfb144b55932a\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Nov 1 00:11:54.961584 env[1820]: time="2025-11-01T00:11:54.961518275Z" level=info msg="CreateContainer within sandbox \"cb2b33c8babd82ac0019f69977aa542317776cc4454b77089e6bcd900407766b\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"592da036570edb004405795feafef4e64fc4977bd977e9a0aa07c8ab685df86d\"" Nov 1 00:11:54.963129 env[1820]: time="2025-11-01T00:11:54.963071345Z" level=info msg="StartContainer for \"592da036570edb004405795feafef4e64fc4977bd977e9a0aa07c8ab685df86d\"" Nov 1 00:11:54.970753 env[1820]: time="2025-11-01T00:11:54.970692187Z" level=info msg="CreateContainer within sandbox \"0871af23484a5245fb4a26ef65385dbb88ffc456a8b518b862a684acf865b7e6\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"ac2251f6cda5e2c338b2a8ae0a705626977a5c12d24a134935e589a0637a59d6\"" Nov 1 00:11:54.972186 env[1820]: time="2025-11-01T00:11:54.972135106Z" level=info msg="StartContainer for \"ac2251f6cda5e2c338b2a8ae0a705626977a5c12d24a134935e589a0637a59d6\"" Nov 1 00:11:54.987427 env[1820]: time="2025-11-01T00:11:54.987359557Z" level=info msg="CreateContainer within sandbox \"c37c046cde14dbb435baabb31481ad3dd1ffdfc78d36591d4f8cfb144b55932a\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"0393a700635beb0b8e7ed52fe88082680d3ef947950c38597e35cdd0826869c5\"" Nov 1 00:11:54.988804 env[1820]: time="2025-11-01T00:11:54.988749482Z" level=info msg="StartContainer for \"0393a700635beb0b8e7ed52fe88082680d3ef947950c38597e35cdd0826869c5\"" Nov 1 00:11:55.005224 systemd[1]: Started cri-containerd-592da036570edb004405795feafef4e64fc4977bd977e9a0aa07c8ab685df86d.scope. Nov 1 00:11:55.030646 systemd[1]: Started cri-containerd-ac2251f6cda5e2c338b2a8ae0a705626977a5c12d24a134935e589a0637a59d6.scope. Nov 1 00:11:55.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.067000 audit: BPF prog-id=73 op=LOAD Nov 1 00:11:55.068000 audit[2641]: AVC avc: denied { bpf } for pid=2641 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.068000 audit[2641]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2422 pid=2641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:55.068000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539326461303336353730656462303034343035373935666561666566 Nov 1 00:11:55.069000 audit[2641]: AVC avc: denied { perfmon } for pid=2641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.069000 audit[2641]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2422 pid=2641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:55.069000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539326461303336353730656462303034343035373935666561666566 Nov 1 00:11:55.070000 audit[2641]: AVC avc: denied { bpf } for pid=2641 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.070000 audit[2641]: AVC avc: denied { bpf } for pid=2641 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.070000 audit[2641]: AVC avc: denied { bpf } for pid=2641 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.070000 audit[2641]: AVC avc: denied { perfmon } for pid=2641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.070000 audit[2641]: AVC avc: denied { perfmon } for pid=2641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.070000 audit[2641]: AVC avc: denied { perfmon } for pid=2641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.070000 audit[2641]: AVC avc: denied { perfmon } for pid=2641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.070000 audit[2641]: AVC avc: denied { perfmon } for pid=2641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.070000 audit[2641]: AVC avc: denied { bpf } for pid=2641 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.070000 audit[2641]: AVC avc: denied { bpf } for pid=2641 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.070000 audit: BPF prog-id=74 op=LOAD Nov 1 00:11:55.070000 audit[2641]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2422 pid=2641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:55.073402 systemd[1]: Started cri-containerd-0393a700635beb0b8e7ed52fe88082680d3ef947950c38597e35cdd0826869c5.scope. Nov 1 00:11:55.070000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539326461303336353730656462303034343035373935666561666566 Nov 1 00:11:55.077000 audit[2641]: AVC avc: denied { bpf } for pid=2641 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.077000 audit[2641]: AVC avc: denied { bpf } for pid=2641 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.077000 audit[2641]: AVC avc: denied { perfmon } for pid=2641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.077000 audit[2641]: AVC avc: denied { perfmon } for pid=2641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.077000 audit[2641]: AVC avc: denied { perfmon } for pid=2641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.077000 audit[2641]: AVC avc: denied { perfmon } for pid=2641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.077000 audit[2641]: AVC avc: denied { perfmon } for pid=2641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.077000 audit[2641]: AVC avc: denied { bpf } for pid=2641 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.077000 audit[2641]: AVC avc: denied { bpf } for pid=2641 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.077000 audit: BPF prog-id=75 op=LOAD Nov 1 00:11:55.077000 audit[2641]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2422 pid=2641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:55.077000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539326461303336353730656462303034343035373935666561666566 Nov 1 00:11:55.083000 audit: BPF prog-id=75 op=UNLOAD Nov 1 00:11:55.083000 audit: BPF prog-id=74 op=UNLOAD Nov 1 00:11:55.083000 audit[2641]: AVC avc: denied { bpf } for pid=2641 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.083000 audit[2641]: AVC avc: denied { bpf } for pid=2641 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.083000 audit[2641]: AVC avc: denied { bpf } for pid=2641 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.083000 audit[2641]: AVC avc: denied { perfmon } for pid=2641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.083000 audit[2641]: AVC avc: denied { perfmon } for pid=2641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.083000 audit[2641]: AVC avc: denied { perfmon } for pid=2641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.083000 audit[2641]: AVC avc: denied { perfmon } for pid=2641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.083000 audit[2641]: AVC avc: denied { perfmon } for pid=2641 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.083000 audit[2641]: AVC avc: denied { bpf } for pid=2641 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.083000 audit[2641]: AVC avc: denied { bpf } for pid=2641 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.083000 audit: BPF prog-id=76 op=LOAD Nov 1 00:11:55.083000 audit[2641]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2422 pid=2641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:55.083000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539326461303336353730656462303034343035373935666561666566 Nov 1 00:11:55.135000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.135000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.135000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.135000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.135000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.135000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.135000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.135000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.135000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.135000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.135000 audit: BPF prog-id=77 op=LOAD Nov 1 00:11:55.136000 audit[2654]: AVC avc: denied { bpf } for pid=2654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.136000 audit[2654]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2486 pid=2654 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:55.136000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163323235316636636461356532633333386232613861653061373035 Nov 1 00:11:55.136000 audit[2654]: AVC avc: denied { perfmon } for pid=2654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.136000 audit[2654]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2486 pid=2654 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:55.136000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163323235316636636461356532633333386232613861653061373035 Nov 1 00:11:55.142000 audit[2654]: AVC avc: denied { bpf } for pid=2654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.142000 audit[2654]: AVC avc: denied { bpf } for pid=2654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.142000 audit[2654]: AVC avc: denied { bpf } for pid=2654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.142000 audit[2654]: AVC avc: denied { perfmon } for pid=2654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.142000 audit[2654]: AVC avc: denied { perfmon } for pid=2654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.142000 audit[2654]: AVC avc: denied { perfmon } for pid=2654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.142000 audit[2654]: AVC avc: denied { perfmon } for pid=2654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.142000 audit[2654]: AVC avc: denied { perfmon } for pid=2654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.142000 audit[2654]: AVC avc: denied { bpf } for pid=2654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.142000 audit[2654]: AVC avc: denied { bpf } for pid=2654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.142000 audit: BPF prog-id=78 op=LOAD Nov 1 00:11:55.142000 audit[2654]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2486 pid=2654 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:55.142000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163323235316636636461356532633333386232613861653061373035 Nov 1 00:11:55.143000 audit[2654]: AVC avc: denied { bpf } for pid=2654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.143000 audit[2654]: AVC avc: denied { bpf } for pid=2654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.143000 audit[2654]: AVC avc: denied { perfmon } for pid=2654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.143000 audit[2654]: AVC avc: denied { perfmon } for pid=2654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.143000 audit[2654]: AVC avc: denied { perfmon } for pid=2654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.143000 audit[2654]: AVC avc: denied { perfmon } for pid=2654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.143000 audit[2654]: AVC avc: denied { perfmon } for pid=2654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.143000 audit[2654]: AVC avc: denied { bpf } for pid=2654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.143000 audit[2654]: AVC avc: denied { bpf } for pid=2654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.143000 audit: BPF prog-id=79 op=LOAD Nov 1 00:11:55.143000 audit[2654]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2486 pid=2654 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:55.143000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163323235316636636461356532633333386232613861653061373035 Nov 1 00:11:55.145000 audit: BPF prog-id=79 op=UNLOAD Nov 1 00:11:55.146000 audit: BPF prog-id=78 op=UNLOAD Nov 1 00:11:55.146000 audit[2654]: AVC avc: denied { bpf } for pid=2654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.146000 audit[2654]: AVC avc: denied { bpf } for pid=2654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.146000 audit[2654]: AVC avc: denied { bpf } for pid=2654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.146000 audit[2654]: AVC avc: denied { perfmon } for pid=2654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.146000 audit[2654]: AVC avc: denied { perfmon } for pid=2654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.146000 audit[2654]: AVC avc: denied { perfmon } for pid=2654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.146000 audit[2654]: AVC avc: denied { perfmon } for pid=2654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.146000 audit[2654]: AVC avc: denied { perfmon } for pid=2654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.146000 audit[2654]: AVC avc: denied { bpf } for pid=2654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.146000 audit[2654]: AVC avc: denied { bpf } for pid=2654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.146000 audit: BPF prog-id=80 op=LOAD Nov 1 00:11:55.146000 audit[2654]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2486 pid=2654 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:55.146000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163323235316636636461356532633333386232613861653061373035 Nov 1 00:11:55.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.155000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.155000 audit: BPF prog-id=81 op=LOAD Nov 1 00:11:55.156000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.156000 audit[2678]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2459 pid=2678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:55.156000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033393361373030363335626562306238653765643532666538383038 Nov 1 00:11:55.156000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.156000 audit[2678]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2459 pid=2678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:55.156000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033393361373030363335626562306238653765643532666538383038 Nov 1 00:11:55.156000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.156000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.156000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.156000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.156000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.156000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.156000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.156000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.156000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.156000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.156000 audit: BPF prog-id=82 op=LOAD Nov 1 00:11:55.156000 audit[2678]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2459 pid=2678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:55.156000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033393361373030363335626562306238653765643532666538383038 Nov 1 00:11:55.156000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.156000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.156000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.156000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.156000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.156000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.156000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.156000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.156000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.156000 audit: BPF prog-id=83 op=LOAD Nov 1 00:11:55.156000 audit[2678]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2459 pid=2678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:55.156000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033393361373030363335626562306238653765643532666538383038 Nov 1 00:11:55.157000 audit: BPF prog-id=83 op=UNLOAD Nov 1 00:11:55.157000 audit: BPF prog-id=82 op=UNLOAD Nov 1 00:11:55.157000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.157000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.157000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.157000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.157000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.157000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.157000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.157000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.157000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.157000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:11:55.157000 audit: BPF prog-id=84 op=LOAD Nov 1 00:11:55.157000 audit[2678]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2459 pid=2678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:11:55.157000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033393361373030363335626562306238653765643532666538383038 Nov 1 00:11:55.164017 env[1820]: time="2025-11-01T00:11:55.163714715Z" level=info msg="StartContainer for \"592da036570edb004405795feafef4e64fc4977bd977e9a0aa07c8ab685df86d\" returns successfully" Nov 1 00:11:55.220438 env[1820]: time="2025-11-01T00:11:55.220358781Z" level=info msg="StartContainer for \"0393a700635beb0b8e7ed52fe88082680d3ef947950c38597e35cdd0826869c5\" returns successfully" Nov 1 00:11:55.282716 env[1820]: time="2025-11-01T00:11:55.282633230Z" level=info msg="StartContainer for \"ac2251f6cda5e2c338b2a8ae0a705626977a5c12d24a134935e589a0637a59d6\" returns successfully" Nov 1 00:11:55.343213 kubelet[2374]: E1101 00:11:55.343152 2374 certificate_manager.go:596] "Failed while requesting a signed certificate from the control plane" err="cannot create certificate signing request: Post \"https://172.31.24.47:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 172.31.24.47:6443: connect: connection refused" logger="kubernetes.io/kube-apiserver-client-kubelet.UnhandledError" Nov 1 00:11:55.424873 kubelet[2374]: E1101 00:11:55.424827 2374 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-24-47\" not found" node="ip-172-31-24-47" Nov 1 00:11:55.430334 kubelet[2374]: E1101 00:11:55.430280 2374 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-24-47\" not found" node="ip-172-31-24-47" Nov 1 00:11:55.437783 kubelet[2374]: E1101 00:11:55.437736 2374 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-24-47\" not found" node="ip-172-31-24-47" Nov 1 00:11:56.441098 kubelet[2374]: E1101 00:11:56.441040 2374 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-24-47\" not found" node="ip-172-31-24-47" Nov 1 00:11:56.441889 kubelet[2374]: E1101 00:11:56.441679 2374 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-24-47\" not found" node="ip-172-31-24-47" Nov 1 00:11:56.458553 kubelet[2374]: I1101 00:11:56.458494 2374 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-24-47" Nov 1 00:11:58.476000 audit[2700]: AVC avc: denied { watch } for pid=2700 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521025 scontext=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:11:58.479883 kernel: kauditd_printk_skb: 559 callbacks suppressed Nov 1 00:11:58.480042 kernel: audit: type=1400 audit(1761955918.476:556): avc: denied { watch } for pid=2700 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521025 scontext=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:11:58.493071 kernel: audit: type=1300 audit(1761955918.476:556): arch=c00000b7 syscall=27 success=no exit=-13 a0=42 a1=40045e2150 a2=fc6 a3=0 items=0 ppid=2459 pid=2700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 key=(null) Nov 1 00:11:58.476000 audit[2700]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=42 a1=40045e2150 a2=fc6 a3=0 items=0 ppid=2459 pid=2700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 key=(null) Nov 1 00:11:58.476000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32342E3437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:11:58.523622 kernel: audit: type=1327 audit(1761955918.476:556): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32342E3437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:11:58.476000 audit[2700]: AVC avc: denied { watch } for pid=2700 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521019 scontext=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:11:58.536527 kernel: audit: type=1400 audit(1761955918.476:557): avc: denied { watch } for pid=2700 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521019 scontext=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:11:58.547949 kubelet[2374]: E1101 00:11:58.547902 2374 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-24-47\" not found" node="ip-172-31-24-47" Nov 1 00:11:58.476000 audit[2700]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=42 a1=40062d7900 a2=fc6 a3=0 items=0 ppid=2459 pid=2700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 key=(null) Nov 1 00:11:58.563281 kernel: audit: type=1300 audit(1761955918.476:557): arch=c00000b7 syscall=27 success=no exit=-13 a0=42 a1=40062d7900 a2=fc6 a3=0 items=0 ppid=2459 pid=2700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 key=(null) Nov 1 00:11:58.476000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32342E3437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:11:58.577484 kernel: audit: type=1327 audit(1761955918.476:557): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32342E3437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:11:58.478000 audit[2700]: AVC avc: denied { watch } for pid=2700 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521021 scontext=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:11:58.594432 kernel: audit: type=1400 audit(1761955918.478:558): avc: denied { watch } for pid=2700 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521021 scontext=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:11:58.478000 audit[2700]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=40045e2360 a2=fc6 a3=0 items=0 ppid=2459 pid=2700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 key=(null) Nov 1 00:11:58.607462 kernel: audit: type=1300 audit(1761955918.478:558): arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=40045e2360 a2=fc6 a3=0 items=0 ppid=2459 pid=2700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 key=(null) Nov 1 00:11:58.478000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32342E3437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:11:58.621671 kernel: audit: type=1327 audit(1761955918.478:558): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32342E3437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:11:58.491000 audit[2700]: AVC avc: denied { watch } for pid=2700 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521027 scontext=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:11:58.631907 kernel: audit: type=1400 audit(1761955918.491:559): avc: denied { watch } for pid=2700 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521027 scontext=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:11:58.491000 audit[2700]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4a a1=4003eb7380 a2=fc6 a3=0 items=0 ppid=2459 pid=2700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 key=(null) Nov 1 00:11:58.491000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32342E3437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:11:58.492000 audit[2700]: AVC avc: denied { watch } for pid=2700 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521019 scontext=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:11:58.492000 audit[2700]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4b a1=40075aedc0 a2=fc6 a3=0 items=0 ppid=2459 pid=2700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 key=(null) Nov 1 00:11:58.492000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32342E3437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:11:58.498000 audit[2700]: AVC avc: denied { watch } for pid=2700 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521025 scontext=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:11:58.498000 audit[2700]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4b a1=4003f5f200 a2=fc6 a3=0 items=0 ppid=2459 pid=2700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 key=(null) Nov 1 00:11:58.498000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32342E3437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:11:58.779000 audit[2677]: AVC avc: denied { watch } for pid=2677 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521025 scontext=system_u:system_r:svirt_lxc_net_t:s0:c413,c578 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:11:58.779000 audit[2677]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=4000a02690 a2=fc6 a3=0 items=0 ppid=2422 pid=2677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c413,c578 key=(null) Nov 1 00:11:58.779000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:11:58.780000 audit[2677]: AVC avc: denied { watch } for pid=2677 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521019 scontext=system_u:system_r:svirt_lxc_net_t:s0:c413,c578 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:11:58.780000 audit[2677]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=40009f2480 a2=fc6 a3=0 items=0 ppid=2422 pid=2677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c413,c578 key=(null) Nov 1 00:11:58.780000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:11:58.871009 kubelet[2374]: E1101 00:11:58.870921 2374 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ip-172-31-24-47\" not found" node="ip-172-31-24-47" Nov 1 00:11:59.065810 kubelet[2374]: I1101 00:11:59.065647 2374 kubelet_node_status.go:78] "Successfully registered node" node="ip-172-31-24-47" Nov 1 00:11:59.065810 kubelet[2374]: E1101 00:11:59.065713 2374 kubelet_node_status.go:548] "Error updating node status, will retry" err="error getting node \"ip-172-31-24-47\": node \"ip-172-31-24-47\" not found" Nov 1 00:11:59.153799 kubelet[2374]: I1101 00:11:59.153683 2374 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ip-172-31-24-47" Nov 1 00:11:59.187389 kubelet[2374]: E1101 00:11:59.187327 2374 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-ip-172-31-24-47\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-ip-172-31-24-47" Nov 1 00:11:59.187641 kubelet[2374]: I1101 00:11:59.187613 2374 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ip-172-31-24-47" Nov 1 00:11:59.202395 kubelet[2374]: E1101 00:11:59.202347 2374 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-ip-172-31-24-47\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-ip-172-31-24-47" Nov 1 00:11:59.202673 kubelet[2374]: I1101 00:11:59.202647 2374 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ip-172-31-24-47" Nov 1 00:11:59.208244 kubelet[2374]: I1101 00:11:59.208194 2374 apiserver.go:52] "Watching apiserver" Nov 1 00:11:59.213659 kubelet[2374]: E1101 00:11:59.213596 2374 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-controller-manager-ip-172-31-24-47\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-ip-172-31-24-47" Nov 1 00:11:59.254911 kubelet[2374]: I1101 00:11:59.254843 2374 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Nov 1 00:11:59.354956 kubelet[2374]: I1101 00:11:59.354807 2374 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ip-172-31-24-47" Nov 1 00:11:59.358684 kubelet[2374]: E1101 00:11:59.358629 2374 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-ip-172-31-24-47\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-ip-172-31-24-47" Nov 1 00:12:02.129031 kubelet[2374]: I1101 00:12:02.128923 2374 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ip-172-31-24-47" Nov 1 00:12:02.159065 systemd[1]: Reloading. Nov 1 00:12:02.389352 /usr/lib/systemd/system-generators/torcx-generator[2773]: time="2025-11-01T00:12:02Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Nov 1 00:12:02.389416 /usr/lib/systemd/system-generators/torcx-generator[2773]: time="2025-11-01T00:12:02Z" level=info msg="torcx already run" Nov 1 00:12:02.603868 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Nov 1 00:12:02.603907 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Nov 1 00:12:02.644023 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Nov 1 00:12:02.842000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.843000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.844000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.844000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.844000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.844000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.844000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.844000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.844000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.845000 audit: BPF prog-id=85 op=LOAD Nov 1 00:12:02.845000 audit: BPF prog-id=46 op=UNLOAD Nov 1 00:12:02.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.846000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.846000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.846000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.846000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.846000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.846000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.846000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.846000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.847000 audit: BPF prog-id=86 op=LOAD Nov 1 00:12:02.847000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.847000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.847000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.848000 audit: BPF prog-id=87 op=LOAD Nov 1 00:12:02.848000 audit: BPF prog-id=47 op=UNLOAD Nov 1 00:12:02.848000 audit: BPF prog-id=48 op=UNLOAD Nov 1 00:12:02.856000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.856000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.856000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.856000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.856000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.857000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.857000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.857000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.857000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.857000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.858000 audit: BPF prog-id=88 op=LOAD Nov 1 00:12:02.858000 audit: BPF prog-id=49 op=UNLOAD Nov 1 00:12:02.858000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.858000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.858000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.858000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.858000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.859000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.859000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.859000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.859000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.859000 audit: BPF prog-id=89 op=LOAD Nov 1 00:12:02.859000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.859000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.859000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.860000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.860000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.860000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.860000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.860000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.860000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.860000 audit: BPF prog-id=90 op=LOAD Nov 1 00:12:02.860000 audit: BPF prog-id=50 op=UNLOAD Nov 1 00:12:02.860000 audit: BPF prog-id=51 op=UNLOAD Nov 1 00:12:02.863000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.863000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.863000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.863000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.864000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.864000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.864000 audit: BPF prog-id=91 op=LOAD Nov 1 00:12:02.864000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.865000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.865000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.865000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.865000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.865000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.865000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.865000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.865000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.865000 audit: BPF prog-id=92 op=LOAD Nov 1 00:12:02.866000 audit: BPF prog-id=52 op=UNLOAD Nov 1 00:12:02.866000 audit: BPF prog-id=53 op=UNLOAD Nov 1 00:12:02.867000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.867000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.867000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.867000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.867000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.867000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.867000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.868000 audit: BPF prog-id=93 op=LOAD Nov 1 00:12:02.868000 audit: BPF prog-id=81 op=UNLOAD Nov 1 00:12:02.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.874000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.874000 audit: BPF prog-id=94 op=LOAD Nov 1 00:12:02.874000 audit: BPF prog-id=54 op=UNLOAD Nov 1 00:12:02.876000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.876000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.876000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.876000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.876000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.876000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.876000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.877000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.877000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.877000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.877000 audit: BPF prog-id=95 op=LOAD Nov 1 00:12:02.877000 audit: BPF prog-id=55 op=UNLOAD Nov 1 00:12:02.879000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.879000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.879000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.879000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.879000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.879000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.879000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.881000 audit: BPF prog-id=96 op=LOAD Nov 1 00:12:02.881000 audit: BPF prog-id=56 op=UNLOAD Nov 1 00:12:02.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.882000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.882000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.882000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.882000 audit: BPF prog-id=97 op=LOAD Nov 1 00:12:02.882000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.882000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.882000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.882000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.882000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.883000 audit: BPF prog-id=98 op=LOAD Nov 1 00:12:02.883000 audit: BPF prog-id=57 op=UNLOAD Nov 1 00:12:02.883000 audit: BPF prog-id=58 op=UNLOAD Nov 1 00:12:02.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.886000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.886000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.886000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.886000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.886000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.886000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.886000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.886000 audit: BPF prog-id=99 op=LOAD Nov 1 00:12:02.887000 audit: BPF prog-id=73 op=UNLOAD Nov 1 00:12:02.889000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.889000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.889000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.889000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.889000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.889000 audit: BPF prog-id=100 op=LOAD Nov 1 00:12:02.890000 audit: BPF prog-id=59 op=UNLOAD Nov 1 00:12:02.891000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.891000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.891000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.891000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.891000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.891000 audit: BPF prog-id=101 op=LOAD Nov 1 00:12:02.891000 audit: BPF prog-id=65 op=UNLOAD Nov 1 00:12:02.892000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.892000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.892000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.892000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.892000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.892000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.893000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.893000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.893000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.893000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.893000 audit: BPF prog-id=102 op=LOAD Nov 1 00:12:02.893000 audit: BPF prog-id=69 op=UNLOAD Nov 1 00:12:02.896000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.896000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.896000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.896000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.896000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.896000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.896000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.896000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.896000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.897000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.897000 audit: BPF prog-id=103 op=LOAD Nov 1 00:12:02.897000 audit: BPF prog-id=60 op=UNLOAD Nov 1 00:12:02.901000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.901000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.901000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.902000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.902000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.902000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.902000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.902000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.902000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.902000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.902000 audit: BPF prog-id=104 op=LOAD Nov 1 00:12:02.902000 audit: BPF prog-id=61 op=UNLOAD Nov 1 00:12:02.903000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.903000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.903000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.903000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.903000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.903000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.903000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.903000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.903000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.903000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:02.903000 audit: BPF prog-id=105 op=LOAD Nov 1 00:12:02.903000 audit: BPF prog-id=77 op=UNLOAD Nov 1 00:12:02.956351 systemd[1]: Stopping kubelet.service... Nov 1 00:12:02.979693 systemd[1]: kubelet.service: Deactivated successfully. Nov 1 00:12:02.980125 systemd[1]: Stopped kubelet.service. Nov 1 00:12:02.980222 systemd[1]: kubelet.service: Consumed 1.840s CPU time. Nov 1 00:12:02.979000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:02.984735 systemd[1]: Starting kubelet.service... Nov 1 00:12:03.582511 kernel: kauditd_printk_skb: 259 callbacks suppressed Nov 1 00:12:03.582627 kernel: audit: type=1130 audit(1761955923.578:809): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:03.578000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:03.578719 systemd[1]: Started kubelet.service. Nov 1 00:12:03.696301 kubelet[2832]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Nov 1 00:12:03.696301 kubelet[2832]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Nov 1 00:12:03.696301 kubelet[2832]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Nov 1 00:12:03.698470 kubelet[2832]: I1101 00:12:03.698359 2832 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Nov 1 00:12:03.729476 kubelet[2832]: I1101 00:12:03.729403 2832 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Nov 1 00:12:03.729476 kubelet[2832]: I1101 00:12:03.729457 2832 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Nov 1 00:12:03.730283 kubelet[2832]: I1101 00:12:03.730209 2832 server.go:956] "Client rotation is on, will bootstrap in background" Nov 1 00:12:03.732897 kubelet[2832]: I1101 00:12:03.732843 2832 certificate_store.go:147] "Loading cert/key pair from a file" filePath="/var/lib/kubelet/pki/kubelet-client-current.pem" Nov 1 00:12:03.737441 kubelet[2832]: I1101 00:12:03.737391 2832 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Nov 1 00:12:03.744090 kubelet[2832]: E1101 00:12:03.744037 2832 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Nov 1 00:12:03.744318 kubelet[2832]: I1101 00:12:03.744293 2832 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Nov 1 00:12:03.752738 kubelet[2832]: I1101 00:12:03.752683 2832 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Nov 1 00:12:03.761518 kubelet[2832]: I1101 00:12:03.760063 2832 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Nov 1 00:12:03.761518 kubelet[2832]: I1101 00:12:03.760132 2832 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ip-172-31-24-47","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Nov 1 00:12:03.761518 kubelet[2832]: I1101 00:12:03.760586 2832 topology_manager.go:138] "Creating topology manager with none policy" Nov 1 00:12:03.761518 kubelet[2832]: I1101 00:12:03.760606 2832 container_manager_linux.go:303] "Creating device plugin manager" Nov 1 00:12:03.761518 kubelet[2832]: I1101 00:12:03.760692 2832 state_mem.go:36] "Initialized new in-memory state store" Nov 1 00:12:03.762054 kubelet[2832]: I1101 00:12:03.760927 2832 kubelet.go:480] "Attempting to sync node with API server" Nov 1 00:12:03.762054 kubelet[2832]: I1101 00:12:03.760950 2832 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Nov 1 00:12:03.762054 kubelet[2832]: I1101 00:12:03.761018 2832 kubelet.go:386] "Adding apiserver pod source" Nov 1 00:12:03.762054 kubelet[2832]: I1101 00:12:03.761052 2832 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Nov 1 00:12:03.767204 kubelet[2832]: I1101 00:12:03.767169 2832 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Nov 1 00:12:03.768421 kubelet[2832]: I1101 00:12:03.768390 2832 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Nov 1 00:12:03.771938 kubelet[2832]: I1101 00:12:03.771906 2832 watchdog_linux.go:99] "Systemd watchdog is not enabled" Nov 1 00:12:03.772224 kubelet[2832]: I1101 00:12:03.772201 2832 server.go:1289] "Started kubelet" Nov 1 00:12:03.779000 audit[2832]: AVC avc: denied { mac_admin } for pid=2832 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:03.779000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:12:03.791229 kubelet[2832]: I1101 00:12:03.780526 2832 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Nov 1 00:12:03.791229 kubelet[2832]: I1101 00:12:03.780602 2832 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Nov 1 00:12:03.791229 kubelet[2832]: I1101 00:12:03.780659 2832 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Nov 1 00:12:03.792577 kernel: audit: type=1400 audit(1761955923.779:810): avc: denied { mac_admin } for pid=2832 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:03.792637 kernel: audit: type=1401 audit(1761955923.779:810): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:12:03.805003 kubelet[2832]: I1101 00:12:03.803806 2832 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Nov 1 00:12:03.779000 audit[2832]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40003ed050 a1=40004e27b0 a2=40003ecff0 a3=25 items=0 ppid=1 pid=2832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:03.816141 kubelet[2832]: I1101 00:12:03.816084 2832 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Nov 1 00:12:03.816721 kernel: audit: type=1300 audit(1761955923.779:810): arch=c00000b7 syscall=5 success=no exit=-22 a0=40003ed050 a1=40004e27b0 a2=40003ecff0 a3=25 items=0 ppid=1 pid=2832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:03.817880 kubelet[2832]: I1101 00:12:03.817844 2832 server.go:317] "Adding debug handlers to kubelet server" Nov 1 00:12:03.818248 kubelet[2832]: I1101 00:12:03.818207 2832 volume_manager.go:297] "Starting Kubelet Volume Manager" Nov 1 00:12:03.818591 kubelet[2832]: E1101 00:12:03.818542 2832 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-24-47\" not found" Nov 1 00:12:03.821849 kubelet[2832]: I1101 00:12:03.821797 2832 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Nov 1 00:12:03.822129 kubelet[2832]: I1101 00:12:03.822095 2832 reconciler.go:26] "Reconciler: start to sync state" Nov 1 00:12:03.779000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:12:03.834770 kernel: audit: type=1327 audit(1761955923.779:810): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:12:03.836381 kubelet[2832]: I1101 00:12:03.835122 2832 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Nov 1 00:12:03.837050 kubelet[2832]: I1101 00:12:03.837017 2832 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Nov 1 00:12:03.779000 audit[2832]: AVC avc: denied { mac_admin } for pid=2832 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:03.842434 kubelet[2832]: I1101 00:12:03.842392 2832 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Nov 1 00:12:03.847249 kernel: audit: type=1400 audit(1761955923.779:811): avc: denied { mac_admin } for pid=2832 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:03.779000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:12:03.858010 kernel: audit: type=1401 audit(1761955923.779:811): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:12:03.779000 audit[2832]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40006b6ea0 a1=40004e27e0 a2=40003ed140 a3=25 items=0 ppid=1 pid=2832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:03.871363 kernel: audit: type=1300 audit(1761955923.779:811): arch=c00000b7 syscall=5 success=no exit=-22 a0=40006b6ea0 a1=40004e27e0 a2=40003ed140 a3=25 items=0 ppid=1 pid=2832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:03.779000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:12:03.885583 kernel: audit: type=1327 audit(1761955923.779:811): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:12:03.899166 kubelet[2832]: I1101 00:12:03.899102 2832 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Nov 1 00:12:03.926141 kubelet[2832]: I1101 00:12:03.926104 2832 factory.go:223] Registration of the containerd container factory successfully Nov 1 00:12:03.926335 kubelet[2832]: I1101 00:12:03.926314 2832 factory.go:223] Registration of the systemd container factory successfully Nov 1 00:12:03.930722 kubelet[2832]: I1101 00:12:03.930667 2832 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Nov 1 00:12:03.930722 kubelet[2832]: I1101 00:12:03.930713 2832 status_manager.go:230] "Starting to sync pod status with apiserver" Nov 1 00:12:03.930928 kubelet[2832]: I1101 00:12:03.930741 2832 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Nov 1 00:12:03.930928 kubelet[2832]: I1101 00:12:03.930756 2832 kubelet.go:2436] "Starting kubelet main sync loop" Nov 1 00:12:03.930928 kubelet[2832]: E1101 00:12:03.930825 2832 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Nov 1 00:12:03.969135 kubelet[2832]: E1101 00:12:03.969097 2832 kubelet.go:1600] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Nov 1 00:12:04.031324 kubelet[2832]: E1101 00:12:04.031282 2832 kubelet.go:2460] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Nov 1 00:12:04.061244 kubelet[2832]: I1101 00:12:04.061189 2832 cpu_manager.go:221] "Starting CPU manager" policy="none" Nov 1 00:12:04.061244 kubelet[2832]: I1101 00:12:04.061228 2832 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Nov 1 00:12:04.061244 kubelet[2832]: I1101 00:12:04.061269 2832 state_mem.go:36] "Initialized new in-memory state store" Nov 1 00:12:04.061579 kubelet[2832]: I1101 00:12:04.061532 2832 state_mem.go:88] "Updated default CPUSet" cpuSet="" Nov 1 00:12:04.061650 kubelet[2832]: I1101 00:12:04.061571 2832 state_mem.go:96] "Updated CPUSet assignments" assignments={} Nov 1 00:12:04.061650 kubelet[2832]: I1101 00:12:04.061609 2832 policy_none.go:49] "None policy: Start" Nov 1 00:12:04.061650 kubelet[2832]: I1101 00:12:04.061631 2832 memory_manager.go:186] "Starting memorymanager" policy="None" Nov 1 00:12:04.061873 kubelet[2832]: I1101 00:12:04.061654 2832 state_mem.go:35] "Initializing new in-memory state store" Nov 1 00:12:04.061942 kubelet[2832]: I1101 00:12:04.061874 2832 state_mem.go:75] "Updated machine memory state" Nov 1 00:12:04.069639 kubelet[2832]: E1101 00:12:04.069580 2832 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Nov 1 00:12:04.068000 audit[2832]: AVC avc: denied { mac_admin } for pid=2832 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:04.078123 kubelet[2832]: E1101 00:12:04.078063 2832 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Nov 1 00:12:04.080260 kernel: audit: type=1400 audit(1761955924.068:812): avc: denied { mac_admin } for pid=2832 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:04.068000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:12:04.068000 audit[2832]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000eff590 a1=4000e227c8 a2=4000eff560 a3=25 items=0 ppid=1 pid=2832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:04.068000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:12:04.080685 kubelet[2832]: I1101 00:12:04.078330 2832 eviction_manager.go:189] "Eviction manager: starting control loop" Nov 1 00:12:04.080685 kubelet[2832]: I1101 00:12:04.078369 2832 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Nov 1 00:12:04.080685 kubelet[2832]: I1101 00:12:04.079207 2832 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Nov 1 00:12:04.087449 kubelet[2832]: E1101 00:12:04.087307 2832 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Nov 1 00:12:04.192347 kubelet[2832]: I1101 00:12:04.192285 2832 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-24-47" Nov 1 00:12:04.206646 kubelet[2832]: I1101 00:12:04.206596 2832 kubelet_node_status.go:124] "Node was previously registered" node="ip-172-31-24-47" Nov 1 00:12:04.206945 kubelet[2832]: I1101 00:12:04.206925 2832 kubelet_node_status.go:78] "Successfully registered node" node="ip-172-31-24-47" Nov 1 00:12:04.234258 kubelet[2832]: I1101 00:12:04.234224 2832 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ip-172-31-24-47" Nov 1 00:12:04.234799 kubelet[2832]: I1101 00:12:04.234366 2832 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ip-172-31-24-47" Nov 1 00:12:04.235228 kubelet[2832]: I1101 00:12:04.235181 2832 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ip-172-31-24-47" Nov 1 00:12:04.255579 kubelet[2832]: E1101 00:12:04.255536 2832 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-ip-172-31-24-47\" already exists" pod="kube-system/kube-apiserver-ip-172-31-24-47" Nov 1 00:12:04.324357 kubelet[2832]: I1101 00:12:04.324226 2832 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/722f2f966210aac57b0e73b5b7e5f392-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-24-47\" (UID: \"722f2f966210aac57b0e73b5b7e5f392\") " pod="kube-system/kube-controller-manager-ip-172-31-24-47" Nov 1 00:12:04.324519 kubelet[2832]: I1101 00:12:04.324389 2832 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/1a139bb3045ccb83ea958030afe9d3b6-kubeconfig\") pod \"kube-scheduler-ip-172-31-24-47\" (UID: \"1a139bb3045ccb83ea958030afe9d3b6\") " pod="kube-system/kube-scheduler-ip-172-31-24-47" Nov 1 00:12:04.324519 kubelet[2832]: I1101 00:12:04.324480 2832 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/ef1074c03c1af95f4944e5ff222a8b90-k8s-certs\") pod \"kube-apiserver-ip-172-31-24-47\" (UID: \"ef1074c03c1af95f4944e5ff222a8b90\") " pod="kube-system/kube-apiserver-ip-172-31-24-47" Nov 1 00:12:04.324671 kubelet[2832]: I1101 00:12:04.324580 2832 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/ef1074c03c1af95f4944e5ff222a8b90-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-24-47\" (UID: \"ef1074c03c1af95f4944e5ff222a8b90\") " pod="kube-system/kube-apiserver-ip-172-31-24-47" Nov 1 00:12:04.324738 kubelet[2832]: I1101 00:12:04.324668 2832 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/722f2f966210aac57b0e73b5b7e5f392-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-24-47\" (UID: \"722f2f966210aac57b0e73b5b7e5f392\") " pod="kube-system/kube-controller-manager-ip-172-31-24-47" Nov 1 00:12:04.324800 kubelet[2832]: I1101 00:12:04.324742 2832 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/722f2f966210aac57b0e73b5b7e5f392-kubeconfig\") pod \"kube-controller-manager-ip-172-31-24-47\" (UID: \"722f2f966210aac57b0e73b5b7e5f392\") " pod="kube-system/kube-controller-manager-ip-172-31-24-47" Nov 1 00:12:04.324861 kubelet[2832]: I1101 00:12:04.324832 2832 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/ef1074c03c1af95f4944e5ff222a8b90-ca-certs\") pod \"kube-apiserver-ip-172-31-24-47\" (UID: \"ef1074c03c1af95f4944e5ff222a8b90\") " pod="kube-system/kube-apiserver-ip-172-31-24-47" Nov 1 00:12:04.325048 kubelet[2832]: I1101 00:12:04.324931 2832 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/722f2f966210aac57b0e73b5b7e5f392-ca-certs\") pod \"kube-controller-manager-ip-172-31-24-47\" (UID: \"722f2f966210aac57b0e73b5b7e5f392\") " pod="kube-system/kube-controller-manager-ip-172-31-24-47" Nov 1 00:12:04.325158 kubelet[2832]: I1101 00:12:04.325122 2832 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/722f2f966210aac57b0e73b5b7e5f392-k8s-certs\") pod \"kube-controller-manager-ip-172-31-24-47\" (UID: \"722f2f966210aac57b0e73b5b7e5f392\") " pod="kube-system/kube-controller-manager-ip-172-31-24-47" Nov 1 00:12:04.705000 audit[2677]: AVC avc: denied { watch } for pid=2677 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521019 scontext=system_u:system_r:svirt_lxc_net_t:s0:c413,c578 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:12:04.705000 audit[2677]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4001656f00 a2=fc6 a3=0 items=0 ppid=2422 pid=2677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c413,c578 key=(null) Nov 1 00:12:04.705000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:12:04.705000 audit[2677]: AVC avc: denied { watch } for pid=2677 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521019 scontext=system_u:system_r:svirt_lxc_net_t:s0:c413,c578 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:12:04.705000 audit[2677]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4001656f20 a2=fc6 a3=0 items=0 ppid=2422 pid=2677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c413,c578 key=(null) Nov 1 00:12:04.705000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:12:04.707000 audit[2677]: AVC avc: denied { watch } for pid=2677 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521019 scontext=system_u:system_r:svirt_lxc_net_t:s0:c413,c578 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:12:04.707000 audit[2677]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40016570c0 a2=fc6 a3=0 items=0 ppid=2422 pid=2677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c413,c578 key=(null) Nov 1 00:12:04.707000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:12:04.707000 audit[2677]: AVC avc: denied { watch } for pid=2677 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521019 scontext=system_u:system_r:svirt_lxc_net_t:s0:c413,c578 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:12:04.707000 audit[2677]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40016570e0 a2=fc6 a3=0 items=0 ppid=2422 pid=2677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c413,c578 key=(null) Nov 1 00:12:04.707000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:12:04.766397 kubelet[2832]: I1101 00:12:04.766328 2832 apiserver.go:52] "Watching apiserver" Nov 1 00:12:04.823001 kubelet[2832]: I1101 00:12:04.822930 2832 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Nov 1 00:12:05.077390 kubelet[2832]: I1101 00:12:05.077215 2832 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ip-172-31-24-47" podStartSLOduration=1.077194437 podStartE2EDuration="1.077194437s" podCreationTimestamp="2025-11-01 00:12:04 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:12:05.05384378 +0000 UTC m=+1.463757574" watchObservedRunningTime="2025-11-01 00:12:05.077194437 +0000 UTC m=+1.487108207" Nov 1 00:12:05.093335 kubelet[2832]: I1101 00:12:05.093256 2832 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-ip-172-31-24-47" podStartSLOduration=3.093233605 podStartE2EDuration="3.093233605s" podCreationTimestamp="2025-11-01 00:12:02 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:12:05.078129581 +0000 UTC m=+1.488043339" watchObservedRunningTime="2025-11-01 00:12:05.093233605 +0000 UTC m=+1.503147375" Nov 1 00:12:05.112795 kubelet[2832]: I1101 00:12:05.112699 2832 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-ip-172-31-24-47" podStartSLOduration=1.112675072 podStartE2EDuration="1.112675072s" podCreationTimestamp="2025-11-01 00:12:04 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:12:05.094737837 +0000 UTC m=+1.504651619" watchObservedRunningTime="2025-11-01 00:12:05.112675072 +0000 UTC m=+1.522588854" Nov 1 00:12:05.503000 audit[2677]: AVC avc: denied { watch } for pid=2677 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=521052 scontext=system_u:system_r:svirt_lxc_net_t:s0:c413,c578 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Nov 1 00:12:05.503000 audit[2677]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000d284c0 a2=fc6 a3=0 items=0 ppid=2422 pid=2677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c413,c578 key=(null) Nov 1 00:12:05.503000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:12:07.038805 kubelet[2832]: I1101 00:12:07.038767 2832 kuberuntime_manager.go:1746] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Nov 1 00:12:07.040328 env[1820]: time="2025-11-01T00:12:07.040280539Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Nov 1 00:12:07.041428 kubelet[2832]: I1101 00:12:07.041395 2832 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Nov 1 00:12:07.803649 systemd[1]: Created slice kubepods-besteffort-poddec7a628_d295_4e6b_95a1_cb82e7308d19.slice. Nov 1 00:12:07.849176 kubelet[2832]: I1101 00:12:07.849040 2832 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/dec7a628-d295-4e6b-95a1-cb82e7308d19-kube-proxy\") pod \"kube-proxy-stlqj\" (UID: \"dec7a628-d295-4e6b-95a1-cb82e7308d19\") " pod="kube-system/kube-proxy-stlqj" Nov 1 00:12:07.849582 kubelet[2832]: I1101 00:12:07.849529 2832 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/dec7a628-d295-4e6b-95a1-cb82e7308d19-xtables-lock\") pod \"kube-proxy-stlqj\" (UID: \"dec7a628-d295-4e6b-95a1-cb82e7308d19\") " pod="kube-system/kube-proxy-stlqj" Nov 1 00:12:07.849961 kubelet[2832]: I1101 00:12:07.849868 2832 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/dec7a628-d295-4e6b-95a1-cb82e7308d19-lib-modules\") pod \"kube-proxy-stlqj\" (UID: \"dec7a628-d295-4e6b-95a1-cb82e7308d19\") " pod="kube-system/kube-proxy-stlqj" Nov 1 00:12:07.850430 kubelet[2832]: I1101 00:12:07.850313 2832 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9l22r\" (UniqueName: \"kubernetes.io/projected/dec7a628-d295-4e6b-95a1-cb82e7308d19-kube-api-access-9l22r\") pod \"kube-proxy-stlqj\" (UID: \"dec7a628-d295-4e6b-95a1-cb82e7308d19\") " pod="kube-system/kube-proxy-stlqj" Nov 1 00:12:07.970557 kubelet[2832]: E1101 00:12:07.970501 2832 projected.go:289] Couldn't get configMap kube-system/kube-root-ca.crt: configmap "kube-root-ca.crt" not found Nov 1 00:12:07.970557 kubelet[2832]: E1101 00:12:07.970553 2832 projected.go:194] Error preparing data for projected volume kube-api-access-9l22r for pod kube-system/kube-proxy-stlqj: configmap "kube-root-ca.crt" not found Nov 1 00:12:07.970853 kubelet[2832]: E1101 00:12:07.970671 2832 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/dec7a628-d295-4e6b-95a1-cb82e7308d19-kube-api-access-9l22r podName:dec7a628-d295-4e6b-95a1-cb82e7308d19 nodeName:}" failed. No retries permitted until 2025-11-01 00:12:08.470633324 +0000 UTC m=+4.880547094 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-9l22r" (UniqueName: "kubernetes.io/projected/dec7a628-d295-4e6b-95a1-cb82e7308d19-kube-api-access-9l22r") pod "kube-proxy-stlqj" (UID: "dec7a628-d295-4e6b-95a1-cb82e7308d19") : configmap "kube-root-ca.crt" not found Nov 1 00:12:08.316762 systemd[1]: Created slice kubepods-besteffort-podf5f33cb3_9e4e_41a3_87a2_6d67a470c4f6.slice. Nov 1 00:12:08.355268 kubelet[2832]: I1101 00:12:08.355214 2832 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-nh5gx\" (UniqueName: \"kubernetes.io/projected/f5f33cb3-9e4e-41a3-87a2-6d67a470c4f6-kube-api-access-nh5gx\") pod \"tigera-operator-7dcd859c48-7snjl\" (UID: \"f5f33cb3-9e4e-41a3-87a2-6d67a470c4f6\") " pod="tigera-operator/tigera-operator-7dcd859c48-7snjl" Nov 1 00:12:08.355854 kubelet[2832]: I1101 00:12:08.355290 2832 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/f5f33cb3-9e4e-41a3-87a2-6d67a470c4f6-var-lib-calico\") pod \"tigera-operator-7dcd859c48-7snjl\" (UID: \"f5f33cb3-9e4e-41a3-87a2-6d67a470c4f6\") " pod="tigera-operator/tigera-operator-7dcd859c48-7snjl" Nov 1 00:12:08.467361 kubelet[2832]: I1101 00:12:08.467303 2832 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Nov 1 00:12:08.624682 env[1820]: time="2025-11-01T00:12:08.623760438Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-7dcd859c48-7snjl,Uid:f5f33cb3-9e4e-41a3-87a2-6d67a470c4f6,Namespace:tigera-operator,Attempt:0,}" Nov 1 00:12:08.652932 env[1820]: time="2025-11-01T00:12:08.652779696Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:12:08.653193 env[1820]: time="2025-11-01T00:12:08.652886078Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:12:08.653193 env[1820]: time="2025-11-01T00:12:08.652914254Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:12:08.653929 env[1820]: time="2025-11-01T00:12:08.653550422Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8eebe2e7cde327b6f9c376e11715037eeb56911e98cbc2ce260799bdd45c5d4a pid=2891 runtime=io.containerd.runc.v2 Nov 1 00:12:08.688809 systemd[1]: Started cri-containerd-8eebe2e7cde327b6f9c376e11715037eeb56911e98cbc2ce260799bdd45c5d4a.scope. Nov 1 00:12:08.721302 env[1820]: time="2025-11-01T00:12:08.721238907Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-stlqj,Uid:dec7a628-d295-4e6b-95a1-cb82e7308d19,Namespace:kube-system,Attempt:0,}" Nov 1 00:12:08.752029 kernel: kauditd_printk_skb: 18 callbacks suppressed Nov 1 00:12:08.752186 kernel: audit: type=1400 audit(1761955928.747:818): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.768478 kernel: audit: type=1400 audit(1761955928.747:819): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.768627 kernel: audit: type=1400 audit(1761955928.747:820): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.768773 env[1820]: time="2025-11-01T00:12:08.764730365Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:12:08.768773 env[1820]: time="2025-11-01T00:12:08.764803531Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:12:08.768773 env[1820]: time="2025-11-01T00:12:08.764829019Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:12:08.768773 env[1820]: time="2025-11-01T00:12:08.765071664Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/77019ddb0032f72d3d178632355c2a1e6fe40c6b9a29c7c66bdec88824eaaabf pid=2927 runtime=io.containerd.runc.v2 Nov 1 00:12:08.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.784119 kernel: audit: type=1400 audit(1761955928.747:821): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.784347 kernel: audit: type=1400 audit(1761955928.747:822): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.802296 kernel: audit: type=1400 audit(1761955928.747:823): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.802427 kernel: audit: type=1400 audit(1761955928.747:824): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.805297 systemd[1]: Started cri-containerd-77019ddb0032f72d3d178632355c2a1e6fe40c6b9a29c7c66bdec88824eaaabf.scope. Nov 1 00:12:08.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.821302 kernel: audit: type=1400 audit(1761955928.747:825): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.830242 kernel: audit: type=1400 audit(1761955928.747:826): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.749000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.838187 kernel: audit: type=1400 audit(1761955928.749:827): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.749000 audit: BPF prog-id=106 op=LOAD Nov 1 00:12:08.757000 audit[2902]: AVC avc: denied { bpf } for pid=2902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.757000 audit[2902]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400019db38 a2=10 a3=0 items=0 ppid=2891 pid=2902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:08.757000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865656265326537636465333237623666396333373665313137313530 Nov 1 00:12:08.757000 audit[2902]: AVC avc: denied { perfmon } for pid=2902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.757000 audit[2902]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400019d5a0 a2=3c a3=0 items=0 ppid=2891 pid=2902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:08.757000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865656265326537636465333237623666396333373665313137313530 Nov 1 00:12:08.758000 audit[2902]: AVC avc: denied { bpf } for pid=2902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.758000 audit[2902]: AVC avc: denied { bpf } for pid=2902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.758000 audit[2902]: AVC avc: denied { bpf } for pid=2902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.758000 audit[2902]: AVC avc: denied { perfmon } for pid=2902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.758000 audit[2902]: AVC avc: denied { perfmon } for pid=2902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.758000 audit[2902]: AVC avc: denied { perfmon } for pid=2902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.758000 audit[2902]: AVC avc: denied { perfmon } for pid=2902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.758000 audit[2902]: AVC avc: denied { perfmon } for pid=2902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.758000 audit[2902]: AVC avc: denied { bpf } for pid=2902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.758000 audit[2902]: AVC avc: denied { bpf } for pid=2902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.758000 audit: BPF prog-id=107 op=LOAD Nov 1 00:12:08.758000 audit[2902]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400019d8e0 a2=78 a3=0 items=0 ppid=2891 pid=2902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:08.758000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865656265326537636465333237623666396333373665313137313530 Nov 1 00:12:08.758000 audit[2902]: AVC avc: denied { bpf } for pid=2902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.758000 audit[2902]: AVC avc: denied { bpf } for pid=2902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.758000 audit[2902]: AVC avc: denied { perfmon } for pid=2902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.758000 audit[2902]: AVC avc: denied { perfmon } for pid=2902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.758000 audit[2902]: AVC avc: denied { perfmon } for pid=2902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.758000 audit[2902]: AVC avc: denied { perfmon } for pid=2902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.758000 audit[2902]: AVC avc: denied { perfmon } for pid=2902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.758000 audit[2902]: AVC avc: denied { bpf } for pid=2902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.758000 audit[2902]: AVC avc: denied { bpf } for pid=2902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.758000 audit: BPF prog-id=108 op=LOAD Nov 1 00:12:08.758000 audit[2902]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400019d670 a2=78 a3=0 items=0 ppid=2891 pid=2902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:08.758000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865656265326537636465333237623666396333373665313137313530 Nov 1 00:12:08.758000 audit: BPF prog-id=108 op=UNLOAD Nov 1 00:12:08.758000 audit: BPF prog-id=107 op=UNLOAD Nov 1 00:12:08.758000 audit[2902]: AVC avc: denied { bpf } for pid=2902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.758000 audit[2902]: AVC avc: denied { bpf } for pid=2902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.758000 audit[2902]: AVC avc: denied { bpf } for pid=2902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.758000 audit[2902]: AVC avc: denied { perfmon } for pid=2902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.758000 audit[2902]: AVC avc: denied { perfmon } for pid=2902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.758000 audit[2902]: AVC avc: denied { perfmon } for pid=2902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.758000 audit[2902]: AVC avc: denied { perfmon } for pid=2902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.758000 audit[2902]: AVC avc: denied { perfmon } for pid=2902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.758000 audit[2902]: AVC avc: denied { bpf } for pid=2902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.758000 audit[2902]: AVC avc: denied { bpf } for pid=2902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.758000 audit: BPF prog-id=109 op=LOAD Nov 1 00:12:08.758000 audit[2902]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400019db40 a2=78 a3=0 items=0 ppid=2891 pid=2902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:08.758000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865656265326537636465333237623666396333373665313137313530 Nov 1 00:12:08.873377 env[1820]: time="2025-11-01T00:12:08.873301591Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-7dcd859c48-7snjl,Uid:f5f33cb3-9e4e-41a3-87a2-6d67a470c4f6,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"8eebe2e7cde327b6f9c376e11715037eeb56911e98cbc2ce260799bdd45c5d4a\"" Nov 1 00:12:08.879142 env[1820]: time="2025-11-01T00:12:08.878939189Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.7\"" Nov 1 00:12:08.892000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.892000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.892000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.892000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.892000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.892000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.892000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.892000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.892000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.892000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.892000 audit: BPF prog-id=110 op=LOAD Nov 1 00:12:08.894000 audit[2937]: AVC avc: denied { bpf } for pid=2937 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.894000 audit[2937]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2927 pid=2937 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:08.894000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737303139646462303033326637326433643137383633323335356332 Nov 1 00:12:08.895000 audit[2937]: AVC avc: denied { perfmon } for pid=2937 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.895000 audit[2937]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2927 pid=2937 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:08.895000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737303139646462303033326637326433643137383633323335356332 Nov 1 00:12:08.895000 audit[2937]: AVC avc: denied { bpf } for pid=2937 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.895000 audit[2937]: AVC avc: denied { bpf } for pid=2937 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.895000 audit[2937]: AVC avc: denied { bpf } for pid=2937 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.895000 audit[2937]: AVC avc: denied { perfmon } for pid=2937 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.895000 audit[2937]: AVC avc: denied { perfmon } for pid=2937 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.895000 audit[2937]: AVC avc: denied { perfmon } for pid=2937 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.895000 audit[2937]: AVC avc: denied { perfmon } for pid=2937 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.895000 audit[2937]: AVC avc: denied { perfmon } for pid=2937 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.895000 audit[2937]: AVC avc: denied { bpf } for pid=2937 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.895000 audit[2937]: AVC avc: denied { bpf } for pid=2937 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.895000 audit: BPF prog-id=111 op=LOAD Nov 1 00:12:08.895000 audit[2937]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2927 pid=2937 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:08.895000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737303139646462303033326637326433643137383633323335356332 Nov 1 00:12:08.896000 audit[2937]: AVC avc: denied { bpf } for pid=2937 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.896000 audit[2937]: AVC avc: denied { bpf } for pid=2937 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.896000 audit[2937]: AVC avc: denied { perfmon } for pid=2937 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.896000 audit[2937]: AVC avc: denied { perfmon } for pid=2937 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.896000 audit[2937]: AVC avc: denied { perfmon } for pid=2937 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.896000 audit[2937]: AVC avc: denied { perfmon } for pid=2937 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.896000 audit[2937]: AVC avc: denied { perfmon } for pid=2937 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.896000 audit[2937]: AVC avc: denied { bpf } for pid=2937 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.896000 audit[2937]: AVC avc: denied { bpf } for pid=2937 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.896000 audit: BPF prog-id=112 op=LOAD Nov 1 00:12:08.896000 audit[2937]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2927 pid=2937 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:08.896000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737303139646462303033326637326433643137383633323335356332 Nov 1 00:12:08.897000 audit: BPF prog-id=112 op=UNLOAD Nov 1 00:12:08.898000 audit: BPF prog-id=111 op=UNLOAD Nov 1 00:12:08.898000 audit[2937]: AVC avc: denied { bpf } for pid=2937 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.898000 audit[2937]: AVC avc: denied { bpf } for pid=2937 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.898000 audit[2937]: AVC avc: denied { bpf } for pid=2937 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.898000 audit[2937]: AVC avc: denied { perfmon } for pid=2937 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.898000 audit[2937]: AVC avc: denied { perfmon } for pid=2937 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.898000 audit[2937]: AVC avc: denied { perfmon } for pid=2937 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.898000 audit[2937]: AVC avc: denied { perfmon } for pid=2937 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.898000 audit[2937]: AVC avc: denied { perfmon } for pid=2937 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.898000 audit[2937]: AVC avc: denied { bpf } for pid=2937 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.898000 audit[2937]: AVC avc: denied { bpf } for pid=2937 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:08.898000 audit: BPF prog-id=113 op=LOAD Nov 1 00:12:08.898000 audit[2937]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2927 pid=2937 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:08.898000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737303139646462303033326637326433643137383633323335356332 Nov 1 00:12:08.933146 env[1820]: time="2025-11-01T00:12:08.933081279Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-stlqj,Uid:dec7a628-d295-4e6b-95a1-cb82e7308d19,Namespace:kube-system,Attempt:0,} returns sandbox id \"77019ddb0032f72d3d178632355c2a1e6fe40c6b9a29c7c66bdec88824eaaabf\"" Nov 1 00:12:08.940941 env[1820]: time="2025-11-01T00:12:08.940881678Z" level=info msg="CreateContainer within sandbox \"77019ddb0032f72d3d178632355c2a1e6fe40c6b9a29c7c66bdec88824eaaabf\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Nov 1 00:12:08.969051 env[1820]: time="2025-11-01T00:12:08.968885249Z" level=info msg="CreateContainer within sandbox \"77019ddb0032f72d3d178632355c2a1e6fe40c6b9a29c7c66bdec88824eaaabf\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"8e1584d8521b55175d793d232df4f724daf26e0f9a180086199e3ee30495e349\"" Nov 1 00:12:08.973910 env[1820]: time="2025-11-01T00:12:08.973528256Z" level=info msg="StartContainer for \"8e1584d8521b55175d793d232df4f724daf26e0f9a180086199e3ee30495e349\"" Nov 1 00:12:09.006899 systemd[1]: Started cri-containerd-8e1584d8521b55175d793d232df4f724daf26e0f9a180086199e3ee30495e349.scope. Nov 1 00:12:09.062000 audit[2975]: AVC avc: denied { perfmon } for pid=2975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:09.062000 audit[2975]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2927 pid=2975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:09.062000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865313538346438353231623535313735643739336432333264663466 Nov 1 00:12:09.062000 audit[2975]: AVC avc: denied { bpf } for pid=2975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:09.062000 audit[2975]: AVC avc: denied { bpf } for pid=2975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:09.062000 audit[2975]: AVC avc: denied { bpf } for pid=2975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:09.062000 audit[2975]: AVC avc: denied { perfmon } for pid=2975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:09.062000 audit[2975]: AVC avc: denied { perfmon } for pid=2975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:09.062000 audit[2975]: AVC avc: denied { perfmon } for pid=2975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:09.062000 audit[2975]: AVC avc: denied { perfmon } for pid=2975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:09.062000 audit[2975]: AVC avc: denied { perfmon } for pid=2975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:09.062000 audit[2975]: AVC avc: denied { bpf } for pid=2975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:09.062000 audit[2975]: AVC avc: denied { bpf } for pid=2975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:09.062000 audit: BPF prog-id=114 op=LOAD Nov 1 00:12:09.062000 audit[2975]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2927 pid=2975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:09.062000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865313538346438353231623535313735643739336432333264663466 Nov 1 00:12:09.064000 audit[2975]: AVC avc: denied { bpf } for pid=2975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:09.064000 audit[2975]: AVC avc: denied { bpf } for pid=2975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:09.064000 audit[2975]: AVC avc: denied { perfmon } for pid=2975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:09.064000 audit[2975]: AVC avc: denied { perfmon } for pid=2975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:09.064000 audit[2975]: AVC avc: denied { perfmon } for pid=2975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:09.064000 audit[2975]: AVC avc: denied { perfmon } for pid=2975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:09.064000 audit[2975]: AVC avc: denied { perfmon } for pid=2975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:09.064000 audit[2975]: AVC avc: denied { bpf } for pid=2975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:09.064000 audit[2975]: AVC avc: denied { bpf } for pid=2975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:09.064000 audit: BPF prog-id=115 op=LOAD Nov 1 00:12:09.064000 audit[2975]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2927 pid=2975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:09.064000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865313538346438353231623535313735643739336432333264663466 Nov 1 00:12:09.065000 audit: BPF prog-id=115 op=UNLOAD Nov 1 00:12:09.065000 audit: BPF prog-id=114 op=UNLOAD Nov 1 00:12:09.065000 audit[2975]: AVC avc: denied { bpf } for pid=2975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:09.065000 audit[2975]: AVC avc: denied { bpf } for pid=2975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:09.065000 audit[2975]: AVC avc: denied { bpf } for pid=2975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:09.065000 audit[2975]: AVC avc: denied { perfmon } for pid=2975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:09.065000 audit[2975]: AVC avc: denied { perfmon } for pid=2975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:09.065000 audit[2975]: AVC avc: denied { perfmon } for pid=2975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:09.065000 audit[2975]: AVC avc: denied { perfmon } for pid=2975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:09.065000 audit[2975]: AVC avc: denied { perfmon } for pid=2975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:09.065000 audit[2975]: AVC avc: denied { bpf } for pid=2975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:09.065000 audit[2975]: AVC avc: denied { bpf } for pid=2975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:09.065000 audit: BPF prog-id=116 op=LOAD Nov 1 00:12:09.065000 audit[2975]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2927 pid=2975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:09.065000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865313538346438353231623535313735643739336432333264663466 Nov 1 00:12:09.100526 env[1820]: time="2025-11-01T00:12:09.100466299Z" level=info msg="StartContainer for \"8e1584d8521b55175d793d232df4f724daf26e0f9a180086199e3ee30495e349\" returns successfully" Nov 1 00:12:09.360000 audit[3038]: NETFILTER_CFG table=mangle:38 family=10 entries=1 op=nft_register_chain pid=3038 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:12:09.360000 audit[3038]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc114a3b0 a2=0 a3=1 items=0 ppid=2988 pid=3038 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:09.360000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Nov 1 00:12:09.363000 audit[3040]: NETFILTER_CFG table=nat:39 family=10 entries=1 op=nft_register_chain pid=3040 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:12:09.363000 audit[3040]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffffe34590 a2=0 a3=1 items=0 ppid=2988 pid=3040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:09.363000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Nov 1 00:12:09.367000 audit[3043]: NETFILTER_CFG table=filter:40 family=10 entries=1 op=nft_register_chain pid=3043 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:12:09.367000 audit[3043]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffdaa6fce0 a2=0 a3=1 items=0 ppid=2988 pid=3043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:09.367000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Nov 1 00:12:09.370000 audit[3042]: NETFILTER_CFG table=mangle:41 family=2 entries=1 op=nft_register_chain pid=3042 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:12:09.370000 audit[3042]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe7fb4ab0 a2=0 a3=1 items=0 ppid=2988 pid=3042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:09.370000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Nov 1 00:12:09.378000 audit[3045]: NETFILTER_CFG table=nat:42 family=2 entries=1 op=nft_register_chain pid=3045 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:12:09.378000 audit[3045]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffea570c40 a2=0 a3=1 items=0 ppid=2988 pid=3045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:09.378000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Nov 1 00:12:09.382000 audit[3046]: NETFILTER_CFG table=filter:43 family=2 entries=1 op=nft_register_chain pid=3046 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:12:09.382000 audit[3046]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe3176400 a2=0 a3=1 items=0 ppid=2988 pid=3046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:09.382000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Nov 1 00:12:09.479107 systemd[1]: run-containerd-runc-k8s.io-8eebe2e7cde327b6f9c376e11715037eeb56911e98cbc2ce260799bdd45c5d4a-runc.qNqPut.mount: Deactivated successfully. Nov 1 00:12:09.478000 audit[3047]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=3047 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:12:09.478000 audit[3047]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffe228eb30 a2=0 a3=1 items=0 ppid=2988 pid=3047 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:09.478000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Nov 1 00:12:09.490000 audit[3049]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=3049 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:12:09.490000 audit[3049]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=fffff38d5510 a2=0 a3=1 items=0 ppid=2988 pid=3049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:09.490000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Nov 1 00:12:09.498000 audit[3052]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=3052 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:12:09.498000 audit[3052]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffc1316530 a2=0 a3=1 items=0 ppid=2988 pid=3052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:09.498000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Nov 1 00:12:09.501000 audit[3053]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=3053 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:12:09.501000 audit[3053]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffbe7fa70 a2=0 a3=1 items=0 ppid=2988 pid=3053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:09.501000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Nov 1 00:12:09.506000 audit[3055]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=3055 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:12:09.506000 audit[3055]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffdea9f8e0 a2=0 a3=1 items=0 ppid=2988 pid=3055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:09.506000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Nov 1 00:12:09.508000 audit[3056]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=3056 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:12:09.508000 audit[3056]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffeeb4c2a0 a2=0 a3=1 items=0 ppid=2988 pid=3056 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:09.508000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Nov 1 00:12:09.514000 audit[3058]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=3058 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:12:09.514000 audit[3058]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffe0ea0b20 a2=0 a3=1 items=0 ppid=2988 pid=3058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:09.514000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Nov 1 00:12:09.521000 audit[3061]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=3061 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:12:09.521000 audit[3061]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffc77387e0 a2=0 a3=1 items=0 ppid=2988 pid=3061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:09.521000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Nov 1 00:12:09.524000 audit[3062]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=3062 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:12:09.524000 audit[3062]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdcf81970 a2=0 a3=1 items=0 ppid=2988 pid=3062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:09.524000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Nov 1 00:12:09.529000 audit[3064]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=3064 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:12:09.529000 audit[3064]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffdb721fc0 a2=0 a3=1 items=0 ppid=2988 pid=3064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:09.529000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Nov 1 00:12:09.532000 audit[3065]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=3065 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:12:09.532000 audit[3065]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcc1b3d00 a2=0 a3=1 items=0 ppid=2988 pid=3065 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:09.532000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Nov 1 00:12:09.537000 audit[3067]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=3067 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:12:09.537000 audit[3067]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd1804610 a2=0 a3=1 items=0 ppid=2988 pid=3067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:09.537000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Nov 1 00:12:09.545000 audit[3070]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=3070 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:12:09.545000 audit[3070]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc986f5b0 a2=0 a3=1 items=0 ppid=2988 pid=3070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:09.545000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Nov 1 00:12:09.558000 audit[3073]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=3073 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:12:09.558000 audit[3073]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd46746a0 a2=0 a3=1 items=0 ppid=2988 pid=3073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:09.558000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Nov 1 00:12:09.561000 audit[3074]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=3074 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:12:09.561000 audit[3074]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffffb9dbe70 a2=0 a3=1 items=0 ppid=2988 pid=3074 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:09.561000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Nov 1 00:12:09.567000 audit[3076]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=3076 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:12:09.567000 audit[3076]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffca5cda50 a2=0 a3=1 items=0 ppid=2988 pid=3076 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:09.567000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Nov 1 00:12:09.574000 audit[3079]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=3079 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:12:09.574000 audit[3079]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffff3f52ff0 a2=0 a3=1 items=0 ppid=2988 pid=3079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:09.574000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Nov 1 00:12:09.577000 audit[3080]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=3080 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:12:09.577000 audit[3080]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe08a1700 a2=0 a3=1 items=0 ppid=2988 pid=3080 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:09.577000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Nov 1 00:12:09.582000 audit[3082]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=3082 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:12:09.582000 audit[3082]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=fffff0aef390 a2=0 a3=1 items=0 ppid=2988 pid=3082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:09.582000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Nov 1 00:12:09.625000 audit[3088]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=3088 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:12:09.625000 audit[3088]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffd49a2de0 a2=0 a3=1 items=0 ppid=2988 pid=3088 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:09.625000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:12:09.638000 audit[3088]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=3088 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:12:09.638000 audit[3088]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5508 a0=3 a1=ffffd49a2de0 a2=0 a3=1 items=0 ppid=2988 pid=3088 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:09.638000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:12:09.642000 audit[3093]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=3093 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:12:09.642000 audit[3093]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=fffff5cf5cd0 a2=0 a3=1 items=0 ppid=2988 pid=3093 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:09.642000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Nov 1 00:12:09.649000 audit[3095]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=3095 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:12:09.649000 audit[3095]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffe479ff60 a2=0 a3=1 items=0 ppid=2988 pid=3095 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:09.649000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Nov 1 00:12:09.659000 audit[3098]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=3098 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:12:09.659000 audit[3098]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffc1603e00 a2=0 a3=1 items=0 ppid=2988 pid=3098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:09.659000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Nov 1 00:12:09.663000 audit[3099]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=3099 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:12:09.663000 audit[3099]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc59aa280 a2=0 a3=1 items=0 ppid=2988 pid=3099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:09.663000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Nov 1 00:12:09.669000 audit[3101]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=3101 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:12:09.669000 audit[3101]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffef15f460 a2=0 a3=1 items=0 ppid=2988 pid=3101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:09.669000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Nov 1 00:12:09.671000 audit[3102]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=3102 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:12:09.671000 audit[3102]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcfcae830 a2=0 a3=1 items=0 ppid=2988 pid=3102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:09.671000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Nov 1 00:12:09.677000 audit[3104]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=3104 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:12:09.677000 audit[3104]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffeba40670 a2=0 a3=1 items=0 ppid=2988 pid=3104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:09.677000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Nov 1 00:12:09.684000 audit[3107]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=3107 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:12:09.684000 audit[3107]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=fffffff6d6b0 a2=0 a3=1 items=0 ppid=2988 pid=3107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:09.684000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Nov 1 00:12:09.687000 audit[3108]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=3108 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:12:09.687000 audit[3108]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffc49dd40 a2=0 a3=1 items=0 ppid=2988 pid=3108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:09.687000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Nov 1 00:12:09.693000 audit[3110]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=3110 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:12:09.693000 audit[3110]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffff74c5820 a2=0 a3=1 items=0 ppid=2988 pid=3110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:09.693000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Nov 1 00:12:09.695000 audit[3111]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=3111 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:12:09.695000 audit[3111]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd7ea65f0 a2=0 a3=1 items=0 ppid=2988 pid=3111 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:09.695000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Nov 1 00:12:09.701000 audit[3113]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=3113 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:12:09.701000 audit[3113]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc9b359c0 a2=0 a3=1 items=0 ppid=2988 pid=3113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:09.701000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Nov 1 00:12:09.708000 audit[3116]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=3116 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:12:09.708000 audit[3116]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff922cf50 a2=0 a3=1 items=0 ppid=2988 pid=3116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:09.708000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Nov 1 00:12:09.720000 audit[3119]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=3119 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:12:09.720000 audit[3119]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd966a300 a2=0 a3=1 items=0 ppid=2988 pid=3119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:09.720000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Nov 1 00:12:09.723000 audit[3120]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=3120 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:12:09.723000 audit[3120]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffdea45450 a2=0 a3=1 items=0 ppid=2988 pid=3120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:09.723000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Nov 1 00:12:09.729000 audit[3122]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=3122 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:12:09.729000 audit[3122]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffd5978920 a2=0 a3=1 items=0 ppid=2988 pid=3122 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:09.729000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Nov 1 00:12:09.736000 audit[3125]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=3125 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:12:09.736000 audit[3125]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffdb7bd470 a2=0 a3=1 items=0 ppid=2988 pid=3125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:09.736000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Nov 1 00:12:09.739000 audit[3126]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=3126 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:12:09.739000 audit[3126]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd1b85ca0 a2=0 a3=1 items=0 ppid=2988 pid=3126 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:09.739000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Nov 1 00:12:09.744000 audit[3128]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=3128 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:12:09.744000 audit[3128]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffd60a4aa0 a2=0 a3=1 items=0 ppid=2988 pid=3128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:09.744000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Nov 1 00:12:09.747000 audit[3129]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=3129 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:12:09.747000 audit[3129]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd6206100 a2=0 a3=1 items=0 ppid=2988 pid=3129 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:09.747000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Nov 1 00:12:09.752000 audit[3131]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=3131 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:12:09.752000 audit[3131]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffde9ca820 a2=0 a3=1 items=0 ppid=2988 pid=3131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:09.752000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Nov 1 00:12:09.761000 audit[3134]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=3134 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:12:09.761000 audit[3134]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff6670a00 a2=0 a3=1 items=0 ppid=2988 pid=3134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:09.761000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Nov 1 00:12:09.771000 audit[3136]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=3136 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Nov 1 00:12:09.771000 audit[3136]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2088 a0=3 a1=ffffe65e9f80 a2=0 a3=1 items=0 ppid=2988 pid=3136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:09.771000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:12:09.773000 audit[3136]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=3136 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Nov 1 00:12:09.773000 audit[3136]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2056 a0=3 a1=ffffe65e9f80 a2=0 a3=1 items=0 ppid=2988 pid=3136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:09.773000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:12:11.388205 kubelet[2832]: I1101 00:12:11.387756 2832 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-stlqj" podStartSLOduration=4.387734848 podStartE2EDuration="4.387734848s" podCreationTimestamp="2025-11-01 00:12:07 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:12:10.05407209 +0000 UTC m=+6.463985884" watchObservedRunningTime="2025-11-01 00:12:11.387734848 +0000 UTC m=+7.797648618" Nov 1 00:12:11.392173 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3891321461.mount: Deactivated successfully. Nov 1 00:12:13.932108 env[1820]: time="2025-11-01T00:12:13.932034802Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:12:13.936436 env[1820]: time="2025-11-01T00:12:13.936363414Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:19f52e4b7ea471a91d4186e9701288b905145dc20d4928cbbf2eac8d9dfce54b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:12:13.942110 env[1820]: time="2025-11-01T00:12:13.942046344Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:12:13.952432 env[1820]: time="2025-11-01T00:12:13.951963660Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:1b629a1403f5b6d7243f7dd523d04b8a50352a33c1d4d6970b6002a8733acf2e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:12:13.955383 env[1820]: time="2025-11-01T00:12:13.955310369Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.7\" returns image reference \"sha256:19f52e4b7ea471a91d4186e9701288b905145dc20d4928cbbf2eac8d9dfce54b\"" Nov 1 00:12:13.962664 env[1820]: time="2025-11-01T00:12:13.962589684Z" level=info msg="CreateContainer within sandbox \"8eebe2e7cde327b6f9c376e11715037eeb56911e98cbc2ce260799bdd45c5d4a\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Nov 1 00:12:13.981489 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1396645112.mount: Deactivated successfully. Nov 1 00:12:13.991258 env[1820]: time="2025-11-01T00:12:13.991192771Z" level=info msg="CreateContainer within sandbox \"8eebe2e7cde327b6f9c376e11715037eeb56911e98cbc2ce260799bdd45c5d4a\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"3a6c03da9d59567fe132a7031691c407e495ce9523886c047000116d382a4cce\"" Nov 1 00:12:13.994903 env[1820]: time="2025-11-01T00:12:13.992793873Z" level=info msg="StartContainer for \"3a6c03da9d59567fe132a7031691c407e495ce9523886c047000116d382a4cce\"" Nov 1 00:12:14.033156 systemd[1]: Started cri-containerd-3a6c03da9d59567fe132a7031691c407e495ce9523886c047000116d382a4cce.scope. Nov 1 00:12:14.098274 kernel: kauditd_printk_skb: 300 callbacks suppressed Nov 1 00:12:14.098399 kernel: audit: type=1400 audit(1761955934.087:911): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:14.087000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:14.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:14.106732 kernel: audit: type=1400 audit(1761955934.090:912): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:14.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:14.115104 kernel: audit: type=1400 audit(1761955934.090:913): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:14.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:14.123232 kernel: audit: type=1400 audit(1761955934.090:914): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:14.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:14.131801 kernel: audit: type=1400 audit(1761955934.090:915): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:14.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:14.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:14.150175 kernel: audit: type=1400 audit(1761955934.090:916): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:14.150261 kernel: audit: type=1400 audit(1761955934.090:917): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:14.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:14.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:14.160233 kernel: audit: type=1400 audit(1761955934.090:918): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:14.183881 kernel: audit: type=1400 audit(1761955934.090:919): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:14.184200 kernel: audit: type=1400 audit(1761955934.097:920): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:14.097000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:14.097000 audit: BPF prog-id=117 op=LOAD Nov 1 00:12:14.098000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:14.098000 audit[3145]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2891 pid=3145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:14.098000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361366330336461396435393536376665313332613730333136393163 Nov 1 00:12:14.098000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:14.098000 audit[3145]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2891 pid=3145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:14.098000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361366330336461396435393536376665313332613730333136393163 Nov 1 00:12:14.098000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:14.098000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:14.098000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:14.098000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:14.098000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:14.098000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:14.098000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:14.098000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:14.098000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:14.098000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:14.098000 audit: BPF prog-id=118 op=LOAD Nov 1 00:12:14.098000 audit[3145]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2891 pid=3145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:14.098000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361366330336461396435393536376665313332613730333136393163 Nov 1 00:12:14.105000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:14.105000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:14.105000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:14.105000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:14.105000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:14.105000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:14.105000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:14.105000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:14.105000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:14.105000 audit: BPF prog-id=119 op=LOAD Nov 1 00:12:14.105000 audit[3145]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2891 pid=3145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:14.105000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361366330336461396435393536376665313332613730333136393163 Nov 1 00:12:14.105000 audit: BPF prog-id=119 op=UNLOAD Nov 1 00:12:14.105000 audit: BPF prog-id=118 op=UNLOAD Nov 1 00:12:14.106000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:14.106000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:14.106000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:14.106000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:14.106000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:14.106000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:14.106000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:14.106000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:14.106000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:14.106000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:14.106000 audit: BPF prog-id=120 op=LOAD Nov 1 00:12:14.106000 audit[3145]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2891 pid=3145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:14.106000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361366330336461396435393536376665313332613730333136393163 Nov 1 00:12:14.192810 env[1820]: time="2025-11-01T00:12:14.192529274Z" level=info msg="StartContainer for \"3a6c03da9d59567fe132a7031691c407e495ce9523886c047000116d382a4cce\" returns successfully" Nov 1 00:12:14.974850 systemd[1]: run-containerd-runc-k8s.io-3a6c03da9d59567fe132a7031691c407e495ce9523886c047000116d382a4cce-runc.H2WCqJ.mount: Deactivated successfully. Nov 1 00:12:21.020000 audit[2100]: USER_END pid=2100 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:12:21.021277 sudo[2100]: pam_unix(sudo:session): session closed for user root Nov 1 00:12:21.023848 kernel: kauditd_printk_skb: 47 callbacks suppressed Nov 1 00:12:21.024014 kernel: audit: type=1106 audit(1761955941.020:929): pid=2100 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:12:21.020000 audit[2100]: CRED_DISP pid=2100 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:12:21.045006 kernel: audit: type=1104 audit(1761955941.020:930): pid=2100 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:12:21.056191 sshd[2097]: pam_unix(sshd:session): session closed for user core Nov 1 00:12:21.057000 audit[2097]: USER_END pid=2097 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:12:21.072633 systemd[1]: sshd@6-172.31.24.47:22-147.75.109.163:44964.service: Deactivated successfully. Nov 1 00:12:21.074896 systemd[1]: session-7.scope: Deactivated successfully. Nov 1 00:12:21.075318 systemd[1]: session-7.scope: Consumed 12.901s CPU time. Nov 1 00:12:21.077958 systemd-logind[1813]: Session 7 logged out. Waiting for processes to exit. Nov 1 00:12:21.057000 audit[2097]: CRED_DISP pid=2097 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:12:21.089369 kernel: audit: type=1106 audit(1761955941.057:931): pid=2097 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:12:21.089533 kernel: audit: type=1104 audit(1761955941.057:932): pid=2097 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:12:21.090206 systemd-logind[1813]: Removed session 7. Nov 1 00:12:21.072000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.24.47:22-147.75.109.163:44964 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:21.106618 kernel: audit: type=1131 audit(1761955941.072:933): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.24.47:22-147.75.109.163:44964 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:12:27.279000 audit[3218]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=3218 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:12:27.279000 audit[3218]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffcd078440 a2=0 a3=1 items=0 ppid=2988 pid=3218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:27.300866 kernel: audit: type=1325 audit(1761955947.279:934): table=filter:89 family=2 entries=15 op=nft_register_rule pid=3218 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:12:27.301099 kernel: audit: type=1300 audit(1761955947.279:934): arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffcd078440 a2=0 a3=1 items=0 ppid=2988 pid=3218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:27.279000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:12:27.307827 kernel: audit: type=1327 audit(1761955947.279:934): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:12:27.312000 audit[3218]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=3218 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:12:27.312000 audit[3218]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffcd078440 a2=0 a3=1 items=0 ppid=2988 pid=3218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:27.332393 kernel: audit: type=1325 audit(1761955947.312:935): table=nat:90 family=2 entries=12 op=nft_register_rule pid=3218 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:12:27.332544 kernel: audit: type=1300 audit(1761955947.312:935): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffcd078440 a2=0 a3=1 items=0 ppid=2988 pid=3218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:27.312000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:12:27.339663 kernel: audit: type=1327 audit(1761955947.312:935): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:12:27.389000 audit[3220]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=3220 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:12:27.389000 audit[3220]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffe333ecb0 a2=0 a3=1 items=0 ppid=2988 pid=3220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:27.411723 kernel: audit: type=1325 audit(1761955947.389:936): table=filter:91 family=2 entries=16 op=nft_register_rule pid=3220 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:12:27.411888 kernel: audit: type=1300 audit(1761955947.389:936): arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffe333ecb0 a2=0 a3=1 items=0 ppid=2988 pid=3220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:27.389000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:12:27.419434 kernel: audit: type=1327 audit(1761955947.389:936): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:12:27.428000 audit[3220]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=3220 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:12:27.444008 kernel: audit: type=1325 audit(1761955947.428:937): table=nat:92 family=2 entries=12 op=nft_register_rule pid=3220 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:12:27.428000 audit[3220]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffe333ecb0 a2=0 a3=1 items=0 ppid=2988 pid=3220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:27.428000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:12:33.120000 audit[3222]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=3222 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:12:33.126490 kernel: kauditd_printk_skb: 2 callbacks suppressed Nov 1 00:12:33.126646 kernel: audit: type=1325 audit(1761955953.120:938): table=filter:93 family=2 entries=17 op=nft_register_rule pid=3222 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:12:33.120000 audit[3222]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=fffff726d290 a2=0 a3=1 items=0 ppid=2988 pid=3222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:33.120000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:12:33.155823 kernel: audit: type=1300 audit(1761955953.120:938): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=fffff726d290 a2=0 a3=1 items=0 ppid=2988 pid=3222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:33.155948 kernel: audit: type=1327 audit(1761955953.120:938): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:12:33.160000 audit[3222]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=3222 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:12:33.160000 audit[3222]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffff726d290 a2=0 a3=1 items=0 ppid=2988 pid=3222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:33.182057 kernel: audit: type=1325 audit(1761955953.160:939): table=nat:94 family=2 entries=12 op=nft_register_rule pid=3222 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:12:33.182339 kernel: audit: type=1300 audit(1761955953.160:939): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffff726d290 a2=0 a3=1 items=0 ppid=2988 pid=3222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:33.160000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:12:33.188756 kernel: audit: type=1327 audit(1761955953.160:939): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:12:33.200000 audit[3224]: NETFILTER_CFG table=filter:95 family=2 entries=18 op=nft_register_rule pid=3224 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:12:33.200000 audit[3224]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffcb59adb0 a2=0 a3=1 items=0 ppid=2988 pid=3224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:33.220573 kernel: audit: type=1325 audit(1761955953.200:940): table=filter:95 family=2 entries=18 op=nft_register_rule pid=3224 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:12:33.220720 kernel: audit: type=1300 audit(1761955953.200:940): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffcb59adb0 a2=0 a3=1 items=0 ppid=2988 pid=3224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:33.200000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:12:33.226695 kernel: audit: type=1327 audit(1761955953.200:940): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:12:33.226000 audit[3224]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=3224 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:12:33.226000 audit[3224]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffcb59adb0 a2=0 a3=1 items=0 ppid=2988 pid=3224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:33.226000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:12:33.239046 kernel: audit: type=1325 audit(1761955953.226:941): table=nat:96 family=2 entries=12 op=nft_register_rule pid=3224 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:12:34.175000 audit[3226]: NETFILTER_CFG table=filter:97 family=2 entries=19 op=nft_register_rule pid=3226 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:12:34.175000 audit[3226]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffd6b330f0 a2=0 a3=1 items=0 ppid=2988 pid=3226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:34.175000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:12:34.201000 audit[3226]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=3226 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:12:34.201000 audit[3226]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffd6b330f0 a2=0 a3=1 items=0 ppid=2988 pid=3226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:34.201000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:12:35.229000 audit[3229]: NETFILTER_CFG table=filter:99 family=2 entries=20 op=nft_register_rule pid=3229 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:12:35.229000 audit[3229]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffca251fa0 a2=0 a3=1 items=0 ppid=2988 pid=3229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:35.229000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:12:35.238000 audit[3229]: NETFILTER_CFG table=nat:100 family=2 entries=12 op=nft_register_rule pid=3229 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:12:35.238000 audit[3229]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffca251fa0 a2=0 a3=1 items=0 ppid=2988 pid=3229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:35.238000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:12:37.479000 audit[3231]: NETFILTER_CFG table=filter:101 family=2 entries=21 op=nft_register_rule pid=3231 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:12:37.479000 audit[3231]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=fffffcec0830 a2=0 a3=1 items=0 ppid=2988 pid=3231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:37.479000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:12:37.486000 audit[3231]: NETFILTER_CFG table=nat:102 family=2 entries=12 op=nft_register_rule pid=3231 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:12:37.486000 audit[3231]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffffcec0830 a2=0 a3=1 items=0 ppid=2988 pid=3231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:37.486000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:12:37.521236 kubelet[2832]: I1101 00:12:37.521143 2832 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-7dcd859c48-7snjl" podStartSLOduration=24.440716257 podStartE2EDuration="29.521121597s" podCreationTimestamp="2025-11-01 00:12:08 +0000 UTC" firstStartedPulling="2025-11-01 00:12:08.87611628 +0000 UTC m=+5.286030050" lastFinishedPulling="2025-11-01 00:12:13.95652162 +0000 UTC m=+10.366435390" observedRunningTime="2025-11-01 00:12:15.089698238 +0000 UTC m=+11.499612008" watchObservedRunningTime="2025-11-01 00:12:37.521121597 +0000 UTC m=+33.931035355" Nov 1 00:12:37.521000 audit[3233]: NETFILTER_CFG table=filter:103 family=2 entries=22 op=nft_register_rule pid=3233 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:12:37.521000 audit[3233]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=ffffcf360d10 a2=0 a3=1 items=0 ppid=2988 pid=3233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:37.521000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:12:37.529000 audit[3233]: NETFILTER_CFG table=nat:104 family=2 entries=12 op=nft_register_rule pid=3233 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:12:37.529000 audit[3233]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffcf360d10 a2=0 a3=1 items=0 ppid=2988 pid=3233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:37.529000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:12:37.534748 systemd[1]: Created slice kubepods-besteffort-podebd0386b_d6e1_4c5d_bb5e_e31f5ed0c3fe.slice. Nov 1 00:12:37.650171 kubelet[2832]: I1101 00:12:37.650069 2832 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/ebd0386b-d6e1-4c5d-bb5e-e31f5ed0c3fe-tigera-ca-bundle\") pod \"calico-typha-77cdcdb64-cj7pm\" (UID: \"ebd0386b-d6e1-4c5d-bb5e-e31f5ed0c3fe\") " pod="calico-system/calico-typha-77cdcdb64-cj7pm" Nov 1 00:12:37.650476 kubelet[2832]: I1101 00:12:37.650440 2832 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/ebd0386b-d6e1-4c5d-bb5e-e31f5ed0c3fe-typha-certs\") pod \"calico-typha-77cdcdb64-cj7pm\" (UID: \"ebd0386b-d6e1-4c5d-bb5e-e31f5ed0c3fe\") " pod="calico-system/calico-typha-77cdcdb64-cj7pm" Nov 1 00:12:37.650669 kubelet[2832]: I1101 00:12:37.650638 2832 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-n2vmk\" (UniqueName: \"kubernetes.io/projected/ebd0386b-d6e1-4c5d-bb5e-e31f5ed0c3fe-kube-api-access-n2vmk\") pod \"calico-typha-77cdcdb64-cj7pm\" (UID: \"ebd0386b-d6e1-4c5d-bb5e-e31f5ed0c3fe\") " pod="calico-system/calico-typha-77cdcdb64-cj7pm" Nov 1 00:12:37.722373 systemd[1]: Created slice kubepods-besteffort-pod5f0b3f83_a899_47dd_9fe5_e459db2a363c.slice. Nov 1 00:12:37.840828 env[1820]: time="2025-11-01T00:12:37.840645773Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-77cdcdb64-cj7pm,Uid:ebd0386b-d6e1-4c5d-bb5e-e31f5ed0c3fe,Namespace:calico-system,Attempt:0,}" Nov 1 00:12:37.852734 kubelet[2832]: I1101 00:12:37.852623 2832 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-l4qhb\" (UniqueName: \"kubernetes.io/projected/5f0b3f83-a899-47dd-9fe5-e459db2a363c-kube-api-access-l4qhb\") pod \"calico-node-8fd74\" (UID: \"5f0b3f83-a899-47dd-9fe5-e459db2a363c\") " pod="calico-system/calico-node-8fd74" Nov 1 00:12:37.853136 kubelet[2832]: I1101 00:12:37.853084 2832 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/5f0b3f83-a899-47dd-9fe5-e459db2a363c-var-run-calico\") pod \"calico-node-8fd74\" (UID: \"5f0b3f83-a899-47dd-9fe5-e459db2a363c\") " pod="calico-system/calico-node-8fd74" Nov 1 00:12:37.865058 kubelet[2832]: I1101 00:12:37.860311 2832 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/5f0b3f83-a899-47dd-9fe5-e459db2a363c-cni-log-dir\") pod \"calico-node-8fd74\" (UID: \"5f0b3f83-a899-47dd-9fe5-e459db2a363c\") " pod="calico-system/calico-node-8fd74" Nov 1 00:12:37.865058 kubelet[2832]: I1101 00:12:37.860384 2832 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/5f0b3f83-a899-47dd-9fe5-e459db2a363c-cni-net-dir\") pod \"calico-node-8fd74\" (UID: \"5f0b3f83-a899-47dd-9fe5-e459db2a363c\") " pod="calico-system/calico-node-8fd74" Nov 1 00:12:37.865058 kubelet[2832]: I1101 00:12:37.860427 2832 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/5f0b3f83-a899-47dd-9fe5-e459db2a363c-tigera-ca-bundle\") pod \"calico-node-8fd74\" (UID: \"5f0b3f83-a899-47dd-9fe5-e459db2a363c\") " pod="calico-system/calico-node-8fd74" Nov 1 00:12:37.865058 kubelet[2832]: I1101 00:12:37.860466 2832 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/5f0b3f83-a899-47dd-9fe5-e459db2a363c-flexvol-driver-host\") pod \"calico-node-8fd74\" (UID: \"5f0b3f83-a899-47dd-9fe5-e459db2a363c\") " pod="calico-system/calico-node-8fd74" Nov 1 00:12:37.865058 kubelet[2832]: I1101 00:12:37.860505 2832 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/5f0b3f83-a899-47dd-9fe5-e459db2a363c-node-certs\") pod \"calico-node-8fd74\" (UID: \"5f0b3f83-a899-47dd-9fe5-e459db2a363c\") " pod="calico-system/calico-node-8fd74" Nov 1 00:12:37.865468 kubelet[2832]: I1101 00:12:37.860541 2832 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/5f0b3f83-a899-47dd-9fe5-e459db2a363c-policysync\") pod \"calico-node-8fd74\" (UID: \"5f0b3f83-a899-47dd-9fe5-e459db2a363c\") " pod="calico-system/calico-node-8fd74" Nov 1 00:12:37.865468 kubelet[2832]: I1101 00:12:37.860585 2832 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/5f0b3f83-a899-47dd-9fe5-e459db2a363c-cni-bin-dir\") pod \"calico-node-8fd74\" (UID: \"5f0b3f83-a899-47dd-9fe5-e459db2a363c\") " pod="calico-system/calico-node-8fd74" Nov 1 00:12:37.865468 kubelet[2832]: I1101 00:12:37.860619 2832 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/5f0b3f83-a899-47dd-9fe5-e459db2a363c-lib-modules\") pod \"calico-node-8fd74\" (UID: \"5f0b3f83-a899-47dd-9fe5-e459db2a363c\") " pod="calico-system/calico-node-8fd74" Nov 1 00:12:37.865468 kubelet[2832]: I1101 00:12:37.860657 2832 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/5f0b3f83-a899-47dd-9fe5-e459db2a363c-var-lib-calico\") pod \"calico-node-8fd74\" (UID: \"5f0b3f83-a899-47dd-9fe5-e459db2a363c\") " pod="calico-system/calico-node-8fd74" Nov 1 00:12:37.865468 kubelet[2832]: I1101 00:12:37.860705 2832 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/5f0b3f83-a899-47dd-9fe5-e459db2a363c-xtables-lock\") pod \"calico-node-8fd74\" (UID: \"5f0b3f83-a899-47dd-9fe5-e459db2a363c\") " pod="calico-system/calico-node-8fd74" Nov 1 00:12:37.886434 env[1820]: time="2025-11-01T00:12:37.886080282Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:12:37.886434 env[1820]: time="2025-11-01T00:12:37.886155343Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:12:37.886434 env[1820]: time="2025-11-01T00:12:37.886182115Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:12:37.887322 env[1820]: time="2025-11-01T00:12:37.887223989Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/32a87e8288393d8eff3600eb734a9d495c6dd4efafefb236951d8d064a15b72c pid=3243 runtime=io.containerd.runc.v2 Nov 1 00:12:37.968918 systemd[1]: Started cri-containerd-32a87e8288393d8eff3600eb734a9d495c6dd4efafefb236951d8d064a15b72c.scope. Nov 1 00:12:37.973465 kubelet[2832]: E1101 00:12:37.971588 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:37.973465 kubelet[2832]: W1101 00:12:37.971627 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:37.973465 kubelet[2832]: E1101 00:12:37.971676 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:37.973465 kubelet[2832]: E1101 00:12:37.972099 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:37.973465 kubelet[2832]: W1101 00:12:37.972118 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:37.973465 kubelet[2832]: E1101 00:12:37.972141 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:37.973465 kubelet[2832]: E1101 00:12:37.973150 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:37.973465 kubelet[2832]: W1101 00:12:37.973180 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:37.973465 kubelet[2832]: E1101 00:12:37.973214 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:37.976362 kubelet[2832]: E1101 00:12:37.976308 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:37.976362 kubelet[2832]: W1101 00:12:37.976348 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:37.976597 kubelet[2832]: E1101 00:12:37.976384 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:37.977166 kubelet[2832]: E1101 00:12:37.977111 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:37.977166 kubelet[2832]: W1101 00:12:37.977147 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:37.977375 kubelet[2832]: E1101 00:12:37.977177 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:37.982147 kubelet[2832]: E1101 00:12:37.979623 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:37.982147 kubelet[2832]: W1101 00:12:37.979666 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:37.982147 kubelet[2832]: E1101 00:12:37.979700 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:37.982147 kubelet[2832]: E1101 00:12:37.980223 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:37.982147 kubelet[2832]: W1101 00:12:37.980243 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:37.982147 kubelet[2832]: E1101 00:12:37.980269 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:37.982147 kubelet[2832]: E1101 00:12:37.980797 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:37.982147 kubelet[2832]: W1101 00:12:37.980825 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:37.982147 kubelet[2832]: E1101 00:12:37.980857 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:37.982147 kubelet[2832]: E1101 00:12:37.981355 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:37.982878 kubelet[2832]: W1101 00:12:37.981380 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:37.982878 kubelet[2832]: E1101 00:12:37.981407 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:37.983234 kubelet[2832]: E1101 00:12:37.983154 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:37.983234 kubelet[2832]: W1101 00:12:37.983203 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:37.983428 kubelet[2832]: E1101 00:12:37.983241 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:37.990038 kubelet[2832]: E1101 00:12:37.985633 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:37.990038 kubelet[2832]: W1101 00:12:37.985702 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:37.990038 kubelet[2832]: E1101 00:12:37.985737 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:37.990038 kubelet[2832]: E1101 00:12:37.986222 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:37.990038 kubelet[2832]: W1101 00:12:37.986247 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:37.990038 kubelet[2832]: E1101 00:12:37.986275 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:37.990038 kubelet[2832]: E1101 00:12:37.986668 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:37.990038 kubelet[2832]: W1101 00:12:37.986694 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:37.990038 kubelet[2832]: E1101 00:12:37.986750 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:37.990038 kubelet[2832]: E1101 00:12:37.987337 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:37.990875 kubelet[2832]: W1101 00:12:37.987367 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:37.990875 kubelet[2832]: E1101 00:12:37.987399 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:37.990875 kubelet[2832]: E1101 00:12:37.987819 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:37.990875 kubelet[2832]: W1101 00:12:37.987842 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:37.990875 kubelet[2832]: E1101 00:12:37.987868 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:37.990875 kubelet[2832]: E1101 00:12:37.988235 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:37.990875 kubelet[2832]: W1101 00:12:37.988255 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:37.990875 kubelet[2832]: E1101 00:12:37.988279 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:37.990875 kubelet[2832]: E1101 00:12:37.988679 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:37.990875 kubelet[2832]: W1101 00:12:37.988699 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:37.991833 kubelet[2832]: E1101 00:12:37.988723 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:37.994148 kubelet[2832]: E1101 00:12:37.994090 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-7qfc7" podUID="2c016bf7-bf29-4156-a534-853af2a9ae4f" Nov 1 00:12:38.011473 kubelet[2832]: E1101 00:12:38.011435 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.011707 kubelet[2832]: W1101 00:12:38.011677 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.011895 kubelet[2832]: E1101 00:12:38.011866 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.032234 env[1820]: time="2025-11-01T00:12:38.032157946Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-8fd74,Uid:5f0b3f83-a899-47dd-9fe5-e459db2a363c,Namespace:calico-system,Attempt:0,}" Nov 1 00:12:38.064443 env[1820]: time="2025-11-01T00:12:38.064310641Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:12:38.064624 env[1820]: time="2025-11-01T00:12:38.064470662Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:12:38.064624 env[1820]: time="2025-11-01T00:12:38.064556439Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:12:38.065561 env[1820]: time="2025-11-01T00:12:38.064931155Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/df0f99b1c845a8efda238076997aef552e6d150ca7682ab0534d2d473c247f39 pid=3289 runtime=io.containerd.runc.v2 Nov 1 00:12:38.077523 kubelet[2832]: E1101 00:12:38.077455 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.077523 kubelet[2832]: W1101 00:12:38.077505 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.077793 kubelet[2832]: E1101 00:12:38.077540 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.080232 kubelet[2832]: E1101 00:12:38.080174 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.080412 kubelet[2832]: W1101 00:12:38.080219 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.080412 kubelet[2832]: E1101 00:12:38.080296 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.080725 kubelet[2832]: E1101 00:12:38.080682 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.080725 kubelet[2832]: W1101 00:12:38.080715 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.080887 kubelet[2832]: E1101 00:12:38.080740 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.081235 kubelet[2832]: E1101 00:12:38.081122 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.081235 kubelet[2832]: W1101 00:12:38.081152 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.081235 kubelet[2832]: E1101 00:12:38.081179 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.081555 kubelet[2832]: E1101 00:12:38.081510 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.081555 kubelet[2832]: W1101 00:12:38.081545 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.081816 kubelet[2832]: E1101 00:12:38.081570 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.081964 kubelet[2832]: E1101 00:12:38.081919 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.081964 kubelet[2832]: W1101 00:12:38.081955 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.082167 kubelet[2832]: E1101 00:12:38.082043 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.082448 kubelet[2832]: E1101 00:12:38.082395 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.082448 kubelet[2832]: W1101 00:12:38.082435 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.082621 kubelet[2832]: E1101 00:12:38.082463 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.088022 kubelet[2832]: E1101 00:12:38.083656 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.088022 kubelet[2832]: W1101 00:12:38.083704 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.088022 kubelet[2832]: E1101 00:12:38.083740 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.088022 kubelet[2832]: E1101 00:12:38.084285 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.088022 kubelet[2832]: W1101 00:12:38.084312 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.088022 kubelet[2832]: E1101 00:12:38.084340 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.088022 kubelet[2832]: E1101 00:12:38.087725 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.088022 kubelet[2832]: W1101 00:12:38.087757 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.088022 kubelet[2832]: E1101 00:12:38.087789 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.088959 kubelet[2832]: E1101 00:12:38.088913 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.088959 kubelet[2832]: W1101 00:12:38.088950 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.089159 kubelet[2832]: E1101 00:12:38.089036 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.097354 kubelet[2832]: E1101 00:12:38.089491 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.097354 kubelet[2832]: W1101 00:12:38.089525 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.097354 kubelet[2832]: E1101 00:12:38.089552 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.097354 kubelet[2832]: E1101 00:12:38.089927 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.097354 kubelet[2832]: W1101 00:12:38.089963 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.097354 kubelet[2832]: E1101 00:12:38.090057 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.097354 kubelet[2832]: E1101 00:12:38.090405 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.097354 kubelet[2832]: W1101 00:12:38.090441 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.097354 kubelet[2832]: E1101 00:12:38.090463 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.097354 kubelet[2832]: E1101 00:12:38.090829 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.098096 kubelet[2832]: W1101 00:12:38.090867 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.098096 kubelet[2832]: E1101 00:12:38.090891 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.098096 kubelet[2832]: E1101 00:12:38.091363 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.098096 kubelet[2832]: W1101 00:12:38.091384 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.098096 kubelet[2832]: E1101 00:12:38.091407 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.098096 kubelet[2832]: E1101 00:12:38.091926 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.098096 kubelet[2832]: W1101 00:12:38.091945 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.098096 kubelet[2832]: E1101 00:12:38.092040 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.098096 kubelet[2832]: E1101 00:12:38.092538 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.098096 kubelet[2832]: W1101 00:12:38.092558 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.098780 kubelet[2832]: E1101 00:12:38.092578 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.098780 kubelet[2832]: E1101 00:12:38.093096 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.098780 kubelet[2832]: W1101 00:12:38.093115 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.098780 kubelet[2832]: E1101 00:12:38.093163 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.098780 kubelet[2832]: E1101 00:12:38.093608 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.098780 kubelet[2832]: W1101 00:12:38.093625 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.098780 kubelet[2832]: E1101 00:12:38.093646 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.120564 systemd[1]: Started cri-containerd-df0f99b1c845a8efda238076997aef552e6d150ca7682ab0534d2d473c247f39.scope. Nov 1 00:12:38.164570 kubelet[2832]: E1101 00:12:38.164532 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.164826 kubelet[2832]: W1101 00:12:38.164797 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.165020 kubelet[2832]: E1101 00:12:38.164992 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.165216 kubelet[2832]: I1101 00:12:38.165175 2832 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/2c016bf7-bf29-4156-a534-853af2a9ae4f-kubelet-dir\") pod \"csi-node-driver-7qfc7\" (UID: \"2c016bf7-bf29-4156-a534-853af2a9ae4f\") " pod="calico-system/csi-node-driver-7qfc7" Nov 1 00:12:38.165698 kubelet[2832]: E1101 00:12:38.165657 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.165698 kubelet[2832]: W1101 00:12:38.165689 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.165921 kubelet[2832]: E1101 00:12:38.165717 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.166316 kubelet[2832]: E1101 00:12:38.166128 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.166316 kubelet[2832]: W1101 00:12:38.166163 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.166316 kubelet[2832]: E1101 00:12:38.166191 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.166572 kubelet[2832]: E1101 00:12:38.166551 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.166650 kubelet[2832]: W1101 00:12:38.166569 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.166650 kubelet[2832]: E1101 00:12:38.166591 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.166650 kubelet[2832]: I1101 00:12:38.166633 2832 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/2c016bf7-bf29-4156-a534-853af2a9ae4f-varrun\") pod \"csi-node-driver-7qfc7\" (UID: \"2c016bf7-bf29-4156-a534-853af2a9ae4f\") " pod="calico-system/csi-node-driver-7qfc7" Nov 1 00:12:38.169933 kubelet[2832]: E1101 00:12:38.166932 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.169933 kubelet[2832]: W1101 00:12:38.166965 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.169933 kubelet[2832]: E1101 00:12:38.167008 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.169933 kubelet[2832]: I1101 00:12:38.167041 2832 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-rj9qj\" (UniqueName: \"kubernetes.io/projected/2c016bf7-bf29-4156-a534-853af2a9ae4f-kube-api-access-rj9qj\") pod \"csi-node-driver-7qfc7\" (UID: \"2c016bf7-bf29-4156-a534-853af2a9ae4f\") " pod="calico-system/csi-node-driver-7qfc7" Nov 1 00:12:38.170794 kubelet[2832]: E1101 00:12:38.170745 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.170794 kubelet[2832]: W1101 00:12:38.170787 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.171010 kubelet[2832]: E1101 00:12:38.170821 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.171010 kubelet[2832]: I1101 00:12:38.170891 2832 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/2c016bf7-bf29-4156-a534-853af2a9ae4f-registration-dir\") pod \"csi-node-driver-7qfc7\" (UID: \"2c016bf7-bf29-4156-a534-853af2a9ae4f\") " pod="calico-system/csi-node-driver-7qfc7" Nov 1 00:12:38.171406 kubelet[2832]: E1101 00:12:38.171367 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.171406 kubelet[2832]: W1101 00:12:38.171399 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.171574 kubelet[2832]: E1101 00:12:38.171425 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.171574 kubelet[2832]: I1101 00:12:38.171474 2832 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/2c016bf7-bf29-4156-a534-853af2a9ae4f-socket-dir\") pod \"csi-node-driver-7qfc7\" (UID: \"2c016bf7-bf29-4156-a534-853af2a9ae4f\") " pod="calico-system/csi-node-driver-7qfc7" Nov 1 00:12:38.171910 kubelet[2832]: E1101 00:12:38.171866 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.171910 kubelet[2832]: W1101 00:12:38.171902 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.172129 kubelet[2832]: E1101 00:12:38.171932 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.172316 kubelet[2832]: E1101 00:12:38.172281 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.172316 kubelet[2832]: W1101 00:12:38.172310 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.172470 kubelet[2832]: E1101 00:12:38.172334 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.172738 kubelet[2832]: E1101 00:12:38.172624 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.172738 kubelet[2832]: W1101 00:12:38.172652 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.172738 kubelet[2832]: E1101 00:12:38.172677 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.173081 kubelet[2832]: E1101 00:12:38.173011 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.173081 kubelet[2832]: W1101 00:12:38.173039 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.173081 kubelet[2832]: E1101 00:12:38.173061 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.173474 kubelet[2832]: E1101 00:12:38.173381 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.173474 kubelet[2832]: W1101 00:12:38.173408 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.173474 kubelet[2832]: E1101 00:12:38.173434 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.176017 kubelet[2832]: E1101 00:12:38.173796 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.176017 kubelet[2832]: W1101 00:12:38.173824 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.176017 kubelet[2832]: E1101 00:12:38.173848 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.176017 kubelet[2832]: E1101 00:12:38.174265 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.176017 kubelet[2832]: W1101 00:12:38.174301 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.176017 kubelet[2832]: E1101 00:12:38.174325 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.176017 kubelet[2832]: E1101 00:12:38.174646 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.176017 kubelet[2832]: W1101 00:12:38.174680 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.176017 kubelet[2832]: E1101 00:12:38.174704 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.219000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.223281 kernel: kauditd_printk_skb: 26 callbacks suppressed Nov 1 00:12:38.223443 kernel: audit: type=1400 audit(1761955958.219:950): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.219000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.241000 kernel: audit: type=1400 audit(1761955958.219:951): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.219000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.250637 kernel: audit: type=1400 audit(1761955958.219:952): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.219000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.260876 kernel: audit: type=1400 audit(1761955958.219:953): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.219000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.271936 kernel: audit: type=1400 audit(1761955958.219:954): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.273188 kubelet[2832]: E1101 00:12:38.273136 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.273188 kubelet[2832]: W1101 00:12:38.273175 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.273423 kubelet[2832]: E1101 00:12:38.273209 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.273688 kubelet[2832]: E1101 00:12:38.273643 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.273688 kubelet[2832]: W1101 00:12:38.273674 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.273890 kubelet[2832]: E1101 00:12:38.273700 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.275136 kubelet[2832]: E1101 00:12:38.275082 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.275136 kubelet[2832]: W1101 00:12:38.275124 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.275371 kubelet[2832]: E1101 00:12:38.275159 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.276138 kubelet[2832]: E1101 00:12:38.276091 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.276138 kubelet[2832]: W1101 00:12:38.276127 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.276404 kubelet[2832]: E1101 00:12:38.276160 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.276582 kubelet[2832]: E1101 00:12:38.276544 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.276582 kubelet[2832]: W1101 00:12:38.276574 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.276763 kubelet[2832]: E1101 00:12:38.276598 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.219000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.284650 kernel: audit: type=1400 audit(1761955958.219:955): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.284863 kubelet[2832]: E1101 00:12:38.284815 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.284863 kubelet[2832]: W1101 00:12:38.284857 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.285094 kubelet[2832]: E1101 00:12:38.284891 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.285400 kubelet[2832]: E1101 00:12:38.285360 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.285400 kubelet[2832]: W1101 00:12:38.285391 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.285586 kubelet[2832]: E1101 00:12:38.285417 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.219000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.293380 kernel: audit: type=1400 audit(1761955958.219:956): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.293510 kubelet[2832]: E1101 00:12:38.293478 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.293658 kubelet[2832]: W1101 00:12:38.293509 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.293658 kubelet[2832]: E1101 00:12:38.293549 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.294082 kubelet[2832]: E1101 00:12:38.293951 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.294082 kubelet[2832]: W1101 00:12:38.294048 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.294082 kubelet[2832]: E1101 00:12:38.294077 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.219000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.302106 kernel: audit: type=1400 audit(1761955958.219:957): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.302270 kubelet[2832]: E1101 00:12:38.302190 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.302270 kubelet[2832]: W1101 00:12:38.302221 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.302270 kubelet[2832]: E1101 00:12:38.302252 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.302730 kubelet[2832]: E1101 00:12:38.302692 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.302730 kubelet[2832]: W1101 00:12:38.302722 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.302907 kubelet[2832]: E1101 00:12:38.302752 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.219000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.311031 kernel: audit: type=1400 audit(1761955958.219:958): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.311222 kubelet[2832]: E1101 00:12:38.311183 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.311222 kubelet[2832]: W1101 00:12:38.311213 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.311410 kubelet[2832]: E1101 00:12:38.311244 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.311827 kubelet[2832]: E1101 00:12:38.311788 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.311827 kubelet[2832]: W1101 00:12:38.311820 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.219000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.312171 kubelet[2832]: E1101 00:12:38.311847 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.320010 kernel: audit: type=1400 audit(1761955958.219:959): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.320176 kubelet[2832]: E1101 00:12:38.320100 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.320176 kubelet[2832]: W1101 00:12:38.320129 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.320176 kubelet[2832]: E1101 00:12:38.320159 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.320649 kubelet[2832]: E1101 00:12:38.320609 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.320649 kubelet[2832]: W1101 00:12:38.320639 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.320843 kubelet[2832]: E1101 00:12:38.320665 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.219000 audit: BPF prog-id=121 op=LOAD Nov 1 00:12:38.230000 audit[3254]: AVC avc: denied { bpf } for pid=3254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.230000 audit[3254]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=3243 pid=3254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:38.230000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332613837653832383833393364386566663336303065623733346139 Nov 1 00:12:38.230000 audit[3254]: AVC avc: denied { perfmon } for pid=3254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.230000 audit[3254]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=3243 pid=3254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:38.230000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332613837653832383833393364386566663336303065623733346139 Nov 1 00:12:38.230000 audit[3254]: AVC avc: denied { bpf } for pid=3254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.230000 audit[3254]: AVC avc: denied { bpf } for pid=3254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.230000 audit[3254]: AVC avc: denied { bpf } for pid=3254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.230000 audit[3254]: AVC avc: denied { perfmon } for pid=3254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.230000 audit[3254]: AVC avc: denied { perfmon } for pid=3254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.230000 audit[3254]: AVC avc: denied { perfmon } for pid=3254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.230000 audit[3254]: AVC avc: denied { perfmon } for pid=3254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.230000 audit[3254]: AVC avc: denied { perfmon } for pid=3254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.230000 audit[3254]: AVC avc: denied { bpf } for pid=3254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.230000 audit[3254]: AVC avc: denied { bpf } for pid=3254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.230000 audit: BPF prog-id=122 op=LOAD Nov 1 00:12:38.230000 audit[3254]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=3243 pid=3254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:38.230000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332613837653832383833393364386566663336303065623733346139 Nov 1 00:12:38.230000 audit[3254]: AVC avc: denied { bpf } for pid=3254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.230000 audit[3254]: AVC avc: denied { bpf } for pid=3254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.230000 audit[3254]: AVC avc: denied { perfmon } for pid=3254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.230000 audit[3254]: AVC avc: denied { perfmon } for pid=3254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.230000 audit[3254]: AVC avc: denied { perfmon } for pid=3254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.230000 audit[3254]: AVC avc: denied { perfmon } for pid=3254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.230000 audit[3254]: AVC avc: denied { perfmon } for pid=3254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.230000 audit[3254]: AVC avc: denied { bpf } for pid=3254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.230000 audit[3254]: AVC avc: denied { bpf } for pid=3254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.230000 audit: BPF prog-id=123 op=LOAD Nov 1 00:12:38.230000 audit[3254]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=3243 pid=3254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:38.230000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332613837653832383833393364386566663336303065623733346139 Nov 1 00:12:38.230000 audit: BPF prog-id=123 op=UNLOAD Nov 1 00:12:38.230000 audit: BPF prog-id=122 op=UNLOAD Nov 1 00:12:38.230000 audit[3254]: AVC avc: denied { bpf } for pid=3254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.230000 audit[3254]: AVC avc: denied { bpf } for pid=3254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.230000 audit[3254]: AVC avc: denied { bpf } for pid=3254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.230000 audit[3254]: AVC avc: denied { perfmon } for pid=3254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.230000 audit[3254]: AVC avc: denied { perfmon } for pid=3254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.230000 audit[3254]: AVC avc: denied { perfmon } for pid=3254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.230000 audit[3254]: AVC avc: denied { perfmon } for pid=3254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.230000 audit[3254]: AVC avc: denied { perfmon } for pid=3254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.230000 audit[3254]: AVC avc: denied { bpf } for pid=3254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.230000 audit[3254]: AVC avc: denied { bpf } for pid=3254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.230000 audit: BPF prog-id=124 op=LOAD Nov 1 00:12:38.230000 audit[3254]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=3243 pid=3254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:38.230000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332613837653832383833393364386566663336303065623733346139 Nov 1 00:12:38.327255 kubelet[2832]: E1101 00:12:38.325004 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.327255 kubelet[2832]: W1101 00:12:38.325046 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.327255 kubelet[2832]: E1101 00:12:38.325104 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.328233 kubelet[2832]: E1101 00:12:38.328182 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.328233 kubelet[2832]: W1101 00:12:38.328223 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.328482 kubelet[2832]: E1101 00:12:38.328256 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.329148 kubelet[2832]: E1101 00:12:38.328712 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.329148 kubelet[2832]: W1101 00:12:38.328742 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.329148 kubelet[2832]: E1101 00:12:38.328767 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.329405 kubelet[2832]: E1101 00:12:38.329190 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.329405 kubelet[2832]: W1101 00:12:38.329211 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.329405 kubelet[2832]: E1101 00:12:38.329244 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.331208 kubelet[2832]: E1101 00:12:38.331154 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.331208 kubelet[2832]: W1101 00:12:38.331194 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.331433 kubelet[2832]: E1101 00:12:38.331230 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.331809 kubelet[2832]: E1101 00:12:38.331757 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.331809 kubelet[2832]: W1101 00:12:38.331793 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.332038 kubelet[2832]: E1101 00:12:38.331822 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.332414 kubelet[2832]: E1101 00:12:38.332375 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.332414 kubelet[2832]: W1101 00:12:38.332407 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.332599 kubelet[2832]: E1101 00:12:38.332433 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.332852 kubelet[2832]: E1101 00:12:38.332811 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.332852 kubelet[2832]: W1101 00:12:38.332838 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.333047 kubelet[2832]: E1101 00:12:38.332861 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.333404 kubelet[2832]: E1101 00:12:38.333366 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.333404 kubelet[2832]: W1101 00:12:38.333397 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.333579 kubelet[2832]: E1101 00:12:38.333423 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.336541 kubelet[2832]: E1101 00:12:38.333818 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.336541 kubelet[2832]: W1101 00:12:38.333847 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.336541 kubelet[2832]: E1101 00:12:38.333872 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.410209 kubelet[2832]: E1101 00:12:38.410144 2832 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:12:38.410209 kubelet[2832]: W1101 00:12:38.410191 2832 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:12:38.410457 kubelet[2832]: E1101 00:12:38.410226 2832 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:12:38.489000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.489000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.489000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.489000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.489000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.489000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.489000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.489000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.489000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.489000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.489000 audit: BPF prog-id=125 op=LOAD Nov 1 00:12:38.490000 audit[3298]: AVC avc: denied { bpf } for pid=3298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.490000 audit[3298]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3289 pid=3298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:38.490000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466306639396231633834356138656664613233383037363939376165 Nov 1 00:12:38.490000 audit[3298]: AVC avc: denied { perfmon } for pid=3298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.490000 audit[3298]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3289 pid=3298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:38.490000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466306639396231633834356138656664613233383037363939376165 Nov 1 00:12:38.490000 audit[3298]: AVC avc: denied { bpf } for pid=3298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.490000 audit[3298]: AVC avc: denied { bpf } for pid=3298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.490000 audit[3298]: AVC avc: denied { bpf } for pid=3298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.490000 audit[3298]: AVC avc: denied { perfmon } for pid=3298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.490000 audit[3298]: AVC avc: denied { perfmon } for pid=3298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.490000 audit[3298]: AVC avc: denied { perfmon } for pid=3298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.490000 audit[3298]: AVC avc: denied { perfmon } for pid=3298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.490000 audit[3298]: AVC avc: denied { perfmon } for pid=3298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.490000 audit[3298]: AVC avc: denied { bpf } for pid=3298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.490000 audit[3298]: AVC avc: denied { bpf } for pid=3298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.490000 audit: BPF prog-id=126 op=LOAD Nov 1 00:12:38.490000 audit[3298]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3289 pid=3298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:38.490000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466306639396231633834356138656664613233383037363939376165 Nov 1 00:12:38.491000 audit[3298]: AVC avc: denied { bpf } for pid=3298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.491000 audit[3298]: AVC avc: denied { bpf } for pid=3298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.491000 audit[3298]: AVC avc: denied { perfmon } for pid=3298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.491000 audit[3298]: AVC avc: denied { perfmon } for pid=3298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.491000 audit[3298]: AVC avc: denied { perfmon } for pid=3298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.491000 audit[3298]: AVC avc: denied { perfmon } for pid=3298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.491000 audit[3298]: AVC avc: denied { perfmon } for pid=3298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.491000 audit[3298]: AVC avc: denied { bpf } for pid=3298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.491000 audit[3298]: AVC avc: denied { bpf } for pid=3298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.491000 audit: BPF prog-id=127 op=LOAD Nov 1 00:12:38.491000 audit[3298]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3289 pid=3298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:38.491000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466306639396231633834356138656664613233383037363939376165 Nov 1 00:12:38.491000 audit: BPF prog-id=127 op=UNLOAD Nov 1 00:12:38.491000 audit: BPF prog-id=126 op=UNLOAD Nov 1 00:12:38.491000 audit[3298]: AVC avc: denied { bpf } for pid=3298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.491000 audit[3298]: AVC avc: denied { bpf } for pid=3298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.491000 audit[3298]: AVC avc: denied { bpf } for pid=3298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.491000 audit[3298]: AVC avc: denied { perfmon } for pid=3298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.491000 audit[3298]: AVC avc: denied { perfmon } for pid=3298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.491000 audit[3298]: AVC avc: denied { perfmon } for pid=3298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.491000 audit[3298]: AVC avc: denied { perfmon } for pid=3298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.491000 audit[3298]: AVC avc: denied { perfmon } for pid=3298 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.491000 audit[3298]: AVC avc: denied { bpf } for pid=3298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.491000 audit[3298]: AVC avc: denied { bpf } for pid=3298 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:38.491000 audit: BPF prog-id=128 op=LOAD Nov 1 00:12:38.491000 audit[3298]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3289 pid=3298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:38.491000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466306639396231633834356138656664613233383037363939376165 Nov 1 00:12:38.528023 env[1820]: time="2025-11-01T00:12:38.525247127Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-8fd74,Uid:5f0b3f83-a899-47dd-9fe5-e459db2a363c,Namespace:calico-system,Attempt:0,} returns sandbox id \"df0f99b1c845a8efda238076997aef552e6d150ca7682ab0534d2d473c247f39\"" Nov 1 00:12:38.529955 env[1820]: time="2025-11-01T00:12:38.529829826Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4\"" Nov 1 00:12:38.565000 audit[3394]: NETFILTER_CFG table=filter:105 family=2 entries=22 op=nft_register_rule pid=3394 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:12:38.565000 audit[3394]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=ffffe5034480 a2=0 a3=1 items=0 ppid=2988 pid=3394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:38.565000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:12:38.572000 audit[3394]: NETFILTER_CFG table=nat:106 family=2 entries=12 op=nft_register_rule pid=3394 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:12:38.572000 audit[3394]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffe5034480 a2=0 a3=1 items=0 ppid=2988 pid=3394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:38.572000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:12:38.576530 env[1820]: time="2025-11-01T00:12:38.576475453Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-77cdcdb64-cj7pm,Uid:ebd0386b-d6e1-4c5d-bb5e-e31f5ed0c3fe,Namespace:calico-system,Attempt:0,} returns sandbox id \"32a87e8288393d8eff3600eb734a9d495c6dd4efafefb236951d8d064a15b72c\"" Nov 1 00:12:38.773292 systemd[1]: run-containerd-runc-k8s.io-32a87e8288393d8eff3600eb734a9d495c6dd4efafefb236951d8d064a15b72c-runc.EnTgyf.mount: Deactivated successfully. Nov 1 00:12:39.779290 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3530117814.mount: Deactivated successfully. Nov 1 00:12:39.937115 kubelet[2832]: E1101 00:12:39.937054 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-7qfc7" podUID="2c016bf7-bf29-4156-a534-853af2a9ae4f" Nov 1 00:12:39.961378 env[1820]: time="2025-11-01T00:12:39.961318379Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:12:39.965115 env[1820]: time="2025-11-01T00:12:39.965047390Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:90ff755393144dc5a3c05f95ffe1a3ecd2f89b98ecf36d9e4721471b80af4640,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:12:39.967337 env[1820]: time="2025-11-01T00:12:39.967272283Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:12:39.969214 env[1820]: time="2025-11-01T00:12:39.969151128Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:50bdfe370b7308fa9957ed1eaccd094aa4f27f9a4f1dfcfef2f8a7696a1551e1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:12:39.970254 env[1820]: time="2025-11-01T00:12:39.970201294Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4\" returns image reference \"sha256:90ff755393144dc5a3c05f95ffe1a3ecd2f89b98ecf36d9e4721471b80af4640\"" Nov 1 00:12:39.974034 env[1820]: time="2025-11-01T00:12:39.973605186Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.4\"" Nov 1 00:12:39.978304 env[1820]: time="2025-11-01T00:12:39.978143652Z" level=info msg="CreateContainer within sandbox \"df0f99b1c845a8efda238076997aef552e6d150ca7682ab0534d2d473c247f39\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Nov 1 00:12:40.012438 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2027699077.mount: Deactivated successfully. Nov 1 00:12:40.022313 env[1820]: time="2025-11-01T00:12:40.022222833Z" level=info msg="CreateContainer within sandbox \"df0f99b1c845a8efda238076997aef552e6d150ca7682ab0534d2d473c247f39\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"b9c37d1700d9204da8f54b580f80fb1399cc40fdd6e0a3f5ce1900597b2f898b\"" Nov 1 00:12:40.023276 env[1820]: time="2025-11-01T00:12:40.023133377Z" level=info msg="StartContainer for \"b9c37d1700d9204da8f54b580f80fb1399cc40fdd6e0a3f5ce1900597b2f898b\"" Nov 1 00:12:40.071440 systemd[1]: Started cri-containerd-b9c37d1700d9204da8f54b580f80fb1399cc40fdd6e0a3f5ce1900597b2f898b.scope. Nov 1 00:12:40.128000 audit[3412]: AVC avc: denied { perfmon } for pid=3412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:40.128000 audit[3412]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3289 pid=3412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:40.128000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239633337643137303064393230346461386635346235383066383066 Nov 1 00:12:40.130000 audit[3412]: AVC avc: denied { bpf } for pid=3412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:40.130000 audit[3412]: AVC avc: denied { bpf } for pid=3412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:40.130000 audit[3412]: AVC avc: denied { bpf } for pid=3412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:40.130000 audit[3412]: AVC avc: denied { perfmon } for pid=3412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:40.130000 audit[3412]: AVC avc: denied { perfmon } for pid=3412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:40.130000 audit[3412]: AVC avc: denied { perfmon } for pid=3412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:40.130000 audit[3412]: AVC avc: denied { perfmon } for pid=3412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:40.130000 audit[3412]: AVC avc: denied { perfmon } for pid=3412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:40.130000 audit[3412]: AVC avc: denied { bpf } for pid=3412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:40.130000 audit[3412]: AVC avc: denied { bpf } for pid=3412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:40.130000 audit: BPF prog-id=129 op=LOAD Nov 1 00:12:40.130000 audit[3412]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3289 pid=3412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:40.130000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239633337643137303064393230346461386635346235383066383066 Nov 1 00:12:40.132000 audit[3412]: AVC avc: denied { bpf } for pid=3412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:40.132000 audit[3412]: AVC avc: denied { bpf } for pid=3412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:40.132000 audit[3412]: AVC avc: denied { perfmon } for pid=3412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:40.132000 audit[3412]: AVC avc: denied { perfmon } for pid=3412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:40.132000 audit[3412]: AVC avc: denied { perfmon } for pid=3412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:40.132000 audit[3412]: AVC avc: denied { perfmon } for pid=3412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:40.132000 audit[3412]: AVC avc: denied { perfmon } for pid=3412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:40.132000 audit[3412]: AVC avc: denied { bpf } for pid=3412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:40.132000 audit[3412]: AVC avc: denied { bpf } for pid=3412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:40.132000 audit: BPF prog-id=130 op=LOAD Nov 1 00:12:40.132000 audit[3412]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3289 pid=3412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:40.132000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239633337643137303064393230346461386635346235383066383066 Nov 1 00:12:40.132000 audit: BPF prog-id=130 op=UNLOAD Nov 1 00:12:40.132000 audit: BPF prog-id=129 op=UNLOAD Nov 1 00:12:40.132000 audit[3412]: AVC avc: denied { bpf } for pid=3412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:40.132000 audit[3412]: AVC avc: denied { bpf } for pid=3412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:40.132000 audit[3412]: AVC avc: denied { bpf } for pid=3412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:40.132000 audit[3412]: AVC avc: denied { perfmon } for pid=3412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:40.132000 audit[3412]: AVC avc: denied { perfmon } for pid=3412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:40.132000 audit[3412]: AVC avc: denied { perfmon } for pid=3412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:40.132000 audit[3412]: AVC avc: denied { perfmon } for pid=3412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:40.132000 audit[3412]: AVC avc: denied { perfmon } for pid=3412 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:40.132000 audit[3412]: AVC avc: denied { bpf } for pid=3412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:40.132000 audit[3412]: AVC avc: denied { bpf } for pid=3412 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:40.132000 audit: BPF prog-id=131 op=LOAD Nov 1 00:12:40.132000 audit[3412]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3289 pid=3412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:40.132000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239633337643137303064393230346461386635346235383066383066 Nov 1 00:12:40.169985 env[1820]: time="2025-11-01T00:12:40.169888636Z" level=info msg="StartContainer for \"b9c37d1700d9204da8f54b580f80fb1399cc40fdd6e0a3f5ce1900597b2f898b\" returns successfully" Nov 1 00:12:40.202029 systemd[1]: cri-containerd-b9c37d1700d9204da8f54b580f80fb1399cc40fdd6e0a3f5ce1900597b2f898b.scope: Deactivated successfully. Nov 1 00:12:40.204000 audit: BPF prog-id=131 op=UNLOAD Nov 1 00:12:40.392308 env[1820]: time="2025-11-01T00:12:40.390685177Z" level=info msg="shim disconnected" id=b9c37d1700d9204da8f54b580f80fb1399cc40fdd6e0a3f5ce1900597b2f898b Nov 1 00:12:40.392308 env[1820]: time="2025-11-01T00:12:40.390754550Z" level=warning msg="cleaning up after shim disconnected" id=b9c37d1700d9204da8f54b580f80fb1399cc40fdd6e0a3f5ce1900597b2f898b namespace=k8s.io Nov 1 00:12:40.392308 env[1820]: time="2025-11-01T00:12:40.390778166Z" level=info msg="cleaning up dead shim" Nov 1 00:12:40.405384 env[1820]: time="2025-11-01T00:12:40.405312844Z" level=warning msg="cleanup warnings time=\"2025-11-01T00:12:40Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3452 runtime=io.containerd.runc.v2\n" Nov 1 00:12:40.779502 systemd[1]: run-containerd-runc-k8s.io-b9c37d1700d9204da8f54b580f80fb1399cc40fdd6e0a3f5ce1900597b2f898b-runc.XBAdAw.mount: Deactivated successfully. Nov 1 00:12:40.779709 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-b9c37d1700d9204da8f54b580f80fb1399cc40fdd6e0a3f5ce1900597b2f898b-rootfs.mount: Deactivated successfully. Nov 1 00:12:41.932502 kubelet[2832]: E1101 00:12:41.931746 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-7qfc7" podUID="2c016bf7-bf29-4156-a534-853af2a9ae4f" Nov 1 00:12:42.908210 env[1820]: time="2025-11-01T00:12:42.908131049Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:12:42.911561 env[1820]: time="2025-11-01T00:12:42.911491932Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5fe38d12a54098df5aaf5ec7228dc2f976f60cb4f434d7256f03126b004fdc5b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:12:42.915249 env[1820]: time="2025-11-01T00:12:42.915197217Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:12:42.919639 env[1820]: time="2025-11-01T00:12:42.919572805Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:6f437220b5b3c627fb4a0fc8dc323363101f3c22a8f337612c2a1ddfb73b810c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:12:42.921369 env[1820]: time="2025-11-01T00:12:42.921309389Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.4\" returns image reference \"sha256:5fe38d12a54098df5aaf5ec7228dc2f976f60cb4f434d7256f03126b004fdc5b\"" Nov 1 00:12:42.924213 env[1820]: time="2025-11-01T00:12:42.924161262Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.4\"" Nov 1 00:12:42.967906 env[1820]: time="2025-11-01T00:12:42.967846350Z" level=info msg="CreateContainer within sandbox \"32a87e8288393d8eff3600eb734a9d495c6dd4efafefb236951d8d064a15b72c\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Nov 1 00:12:42.987499 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount54925471.mount: Deactivated successfully. Nov 1 00:12:42.995146 env[1820]: time="2025-11-01T00:12:42.995061073Z" level=info msg="CreateContainer within sandbox \"32a87e8288393d8eff3600eb734a9d495c6dd4efafefb236951d8d064a15b72c\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"e934a40c6e114c91ab82a27c940a96adda697bffd3c449908067cd19a2bc773b\"" Nov 1 00:12:42.997956 env[1820]: time="2025-11-01T00:12:42.996392521Z" level=info msg="StartContainer for \"e934a40c6e114c91ab82a27c940a96adda697bffd3c449908067cd19a2bc773b\"" Nov 1 00:12:43.035448 systemd[1]: Started cri-containerd-e934a40c6e114c91ab82a27c940a96adda697bffd3c449908067cd19a2bc773b.scope. Nov 1 00:12:43.078000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:43.078000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:43.079000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:43.079000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:43.079000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:43.079000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:43.079000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:43.079000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:43.079000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:43.079000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:43.079000 audit: BPF prog-id=132 op=LOAD Nov 1 00:12:43.080000 audit[3479]: AVC avc: denied { bpf } for pid=3479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:43.080000 audit[3479]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3243 pid=3479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:43.080000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539333461343063366531313463393161623832613237633934306139 Nov 1 00:12:43.080000 audit[3479]: AVC avc: denied { perfmon } for pid=3479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:43.080000 audit[3479]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3243 pid=3479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:43.080000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539333461343063366531313463393161623832613237633934306139 Nov 1 00:12:43.080000 audit[3479]: AVC avc: denied { bpf } for pid=3479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:43.080000 audit[3479]: AVC avc: denied { bpf } for pid=3479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:43.080000 audit[3479]: AVC avc: denied { bpf } for pid=3479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:43.080000 audit[3479]: AVC avc: denied { perfmon } for pid=3479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:43.080000 audit[3479]: AVC avc: denied { perfmon } for pid=3479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:43.080000 audit[3479]: AVC avc: denied { perfmon } for pid=3479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:43.080000 audit[3479]: AVC avc: denied { perfmon } for pid=3479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:43.080000 audit[3479]: AVC avc: denied { perfmon } for pid=3479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:43.080000 audit[3479]: AVC avc: denied { bpf } for pid=3479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:43.080000 audit[3479]: AVC avc: denied { bpf } for pid=3479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:43.080000 audit: BPF prog-id=133 op=LOAD Nov 1 00:12:43.080000 audit[3479]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3243 pid=3479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:43.080000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539333461343063366531313463393161623832613237633934306139 Nov 1 00:12:43.080000 audit[3479]: AVC avc: denied { bpf } for pid=3479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:43.080000 audit[3479]: AVC avc: denied { bpf } for pid=3479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:43.080000 audit[3479]: AVC avc: denied { perfmon } for pid=3479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:43.080000 audit[3479]: AVC avc: denied { perfmon } for pid=3479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:43.080000 audit[3479]: AVC avc: denied { perfmon } for pid=3479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:43.080000 audit[3479]: AVC avc: denied { perfmon } for pid=3479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:43.080000 audit[3479]: AVC avc: denied { perfmon } for pid=3479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:43.080000 audit[3479]: AVC avc: denied { bpf } for pid=3479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:43.080000 audit[3479]: AVC avc: denied { bpf } for pid=3479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:43.080000 audit: BPF prog-id=134 op=LOAD Nov 1 00:12:43.080000 audit[3479]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3243 pid=3479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:43.080000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539333461343063366531313463393161623832613237633934306139 Nov 1 00:12:43.080000 audit: BPF prog-id=134 op=UNLOAD Nov 1 00:12:43.081000 audit: BPF prog-id=133 op=UNLOAD Nov 1 00:12:43.081000 audit[3479]: AVC avc: denied { bpf } for pid=3479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:43.081000 audit[3479]: AVC avc: denied { bpf } for pid=3479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:43.081000 audit[3479]: AVC avc: denied { bpf } for pid=3479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:43.081000 audit[3479]: AVC avc: denied { perfmon } for pid=3479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:43.081000 audit[3479]: AVC avc: denied { perfmon } for pid=3479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:43.081000 audit[3479]: AVC avc: denied { perfmon } for pid=3479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:43.081000 audit[3479]: AVC avc: denied { perfmon } for pid=3479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:43.081000 audit[3479]: AVC avc: denied { perfmon } for pid=3479 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:43.081000 audit[3479]: AVC avc: denied { bpf } for pid=3479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:43.081000 audit[3479]: AVC avc: denied { bpf } for pid=3479 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:43.081000 audit: BPF prog-id=135 op=LOAD Nov 1 00:12:43.081000 audit[3479]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3243 pid=3479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:43.081000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539333461343063366531313463393161623832613237633934306139 Nov 1 00:12:43.123488 env[1820]: time="2025-11-01T00:12:43.123412030Z" level=info msg="StartContainer for \"e934a40c6e114c91ab82a27c940a96adda697bffd3c449908067cd19a2bc773b\" returns successfully" Nov 1 00:12:43.938483 kubelet[2832]: E1101 00:12:43.937136 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-7qfc7" podUID="2c016bf7-bf29-4156-a534-853af2a9ae4f" Nov 1 00:12:44.182672 kubelet[2832]: I1101 00:12:44.180834 2832 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-77cdcdb64-cj7pm" podStartSLOduration=2.838316544 podStartE2EDuration="7.18081228s" podCreationTimestamp="2025-11-01 00:12:37 +0000 UTC" firstStartedPulling="2025-11-01 00:12:38.581011532 +0000 UTC m=+34.990925302" lastFinishedPulling="2025-11-01 00:12:42.923507268 +0000 UTC m=+39.333421038" observedRunningTime="2025-11-01 00:12:43.180247025 +0000 UTC m=+39.590160807" watchObservedRunningTime="2025-11-01 00:12:44.18081228 +0000 UTC m=+40.590726050" Nov 1 00:12:44.235000 audit[3511]: NETFILTER_CFG table=filter:107 family=2 entries=21 op=nft_register_rule pid=3511 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:12:44.238815 kernel: kauditd_printk_skb: 211 callbacks suppressed Nov 1 00:12:44.238965 kernel: audit: type=1325 audit(1761955964.235:1013): table=filter:107 family=2 entries=21 op=nft_register_rule pid=3511 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:12:44.235000 audit[3511]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffc9a28b60 a2=0 a3=1 items=0 ppid=2988 pid=3511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:44.257587 kernel: audit: type=1300 audit(1761955964.235:1013): arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffc9a28b60 a2=0 a3=1 items=0 ppid=2988 pid=3511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:44.257831 kernel: audit: type=1327 audit(1761955964.235:1013): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:12:44.235000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:12:44.260000 audit[3511]: NETFILTER_CFG table=nat:108 family=2 entries=19 op=nft_register_chain pid=3511 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:12:44.269828 kernel: audit: type=1325 audit(1761955964.260:1014): table=nat:108 family=2 entries=19 op=nft_register_chain pid=3511 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:12:44.260000 audit[3511]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=ffffc9a28b60 a2=0 a3=1 items=0 ppid=2988 pid=3511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:44.282263 kernel: audit: type=1300 audit(1761955964.260:1014): arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=ffffc9a28b60 a2=0 a3=1 items=0 ppid=2988 pid=3511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:44.282545 kernel: audit: type=1327 audit(1761955964.260:1014): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:12:44.260000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:12:45.934018 kubelet[2832]: E1101 00:12:45.932129 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-7qfc7" podUID="2c016bf7-bf29-4156-a534-853af2a9ae4f" Nov 1 00:12:47.320427 env[1820]: time="2025-11-01T00:12:47.320353390Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:12:47.323302 env[1820]: time="2025-11-01T00:12:47.323232131Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e60d442b6496497355efdf45eaa3ea72f5a2b28a5187aeab33442933f3c735d2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:12:47.326110 env[1820]: time="2025-11-01T00:12:47.326055095Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:12:47.328380 env[1820]: time="2025-11-01T00:12:47.328317836Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:273501a9cfbd848ade2b6a8452dfafdd3adb4f9bf9aec45c398a5d19b8026627,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:12:47.329700 env[1820]: time="2025-11-01T00:12:47.329650202Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.4\" returns image reference \"sha256:e60d442b6496497355efdf45eaa3ea72f5a2b28a5187aeab33442933f3c735d2\"" Nov 1 00:12:47.342058 env[1820]: time="2025-11-01T00:12:47.341948346Z" level=info msg="CreateContainer within sandbox \"df0f99b1c845a8efda238076997aef552e6d150ca7682ab0534d2d473c247f39\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Nov 1 00:12:47.364034 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3936364041.mount: Deactivated successfully. Nov 1 00:12:47.371888 env[1820]: time="2025-11-01T00:12:47.371813929Z" level=info msg="CreateContainer within sandbox \"df0f99b1c845a8efda238076997aef552e6d150ca7682ab0534d2d473c247f39\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"081491cc6ecd54cc21496aed91ed2bc36afb7b226ffc6f2b031b31742c1b4414\"" Nov 1 00:12:47.375313 env[1820]: time="2025-11-01T00:12:47.375150016Z" level=info msg="StartContainer for \"081491cc6ecd54cc21496aed91ed2bc36afb7b226ffc6f2b031b31742c1b4414\"" Nov 1 00:12:47.453764 systemd[1]: Started cri-containerd-081491cc6ecd54cc21496aed91ed2bc36afb7b226ffc6f2b031b31742c1b4414.scope. Nov 1 00:12:47.492000 audit[3521]: AVC avc: denied { perfmon } for pid=3521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:47.492000 audit[3521]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=400019d5a0 a2=3c a3=0 items=0 ppid=3289 pid=3521 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:47.513198 kernel: audit: type=1400 audit(1761955967.492:1015): avc: denied { perfmon } for pid=3521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:47.513328 kernel: audit: type=1300 audit(1761955967.492:1015): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=400019d5a0 a2=3c a3=0 items=0 ppid=3289 pid=3521 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:47.492000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038313439316363366563643534636332313439366165643931656432 Nov 1 00:12:47.525496 kernel: audit: type=1327 audit(1761955967.492:1015): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038313439316363366563643534636332313439366165643931656432 Nov 1 00:12:47.525651 kernel: audit: type=1400 audit(1761955967.492:1016): avc: denied { bpf } for pid=3521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:47.492000 audit[3521]: AVC avc: denied { bpf } for pid=3521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:47.492000 audit[3521]: AVC avc: denied { bpf } for pid=3521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:47.492000 audit[3521]: AVC avc: denied { bpf } for pid=3521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:47.492000 audit[3521]: AVC avc: denied { perfmon } for pid=3521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:47.492000 audit[3521]: AVC avc: denied { perfmon } for pid=3521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:47.492000 audit[3521]: AVC avc: denied { perfmon } for pid=3521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:47.492000 audit[3521]: AVC avc: denied { perfmon } for pid=3521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:47.492000 audit[3521]: AVC avc: denied { perfmon } for pid=3521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:47.492000 audit[3521]: AVC avc: denied { bpf } for pid=3521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:47.492000 audit[3521]: AVC avc: denied { bpf } for pid=3521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:47.492000 audit: BPF prog-id=136 op=LOAD Nov 1 00:12:47.492000 audit[3521]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400019d8e0 a2=78 a3=0 items=0 ppid=3289 pid=3521 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:47.492000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038313439316363366563643534636332313439366165643931656432 Nov 1 00:12:47.502000 audit[3521]: AVC avc: denied { bpf } for pid=3521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:47.502000 audit[3521]: AVC avc: denied { bpf } for pid=3521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:47.502000 audit[3521]: AVC avc: denied { perfmon } for pid=3521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:47.502000 audit[3521]: AVC avc: denied { perfmon } for pid=3521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:47.502000 audit[3521]: AVC avc: denied { perfmon } for pid=3521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:47.502000 audit[3521]: AVC avc: denied { perfmon } for pid=3521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:47.502000 audit[3521]: AVC avc: denied { perfmon } for pid=3521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:47.502000 audit[3521]: AVC avc: denied { bpf } for pid=3521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:47.502000 audit[3521]: AVC avc: denied { bpf } for pid=3521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:47.502000 audit: BPF prog-id=137 op=LOAD Nov 1 00:12:47.502000 audit[3521]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=400019d670 a2=78 a3=0 items=0 ppid=3289 pid=3521 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:47.502000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038313439316363366563643534636332313439366165643931656432 Nov 1 00:12:47.512000 audit: BPF prog-id=137 op=UNLOAD Nov 1 00:12:47.512000 audit: BPF prog-id=136 op=UNLOAD Nov 1 00:12:47.512000 audit[3521]: AVC avc: denied { bpf } for pid=3521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:47.512000 audit[3521]: AVC avc: denied { bpf } for pid=3521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:47.512000 audit[3521]: AVC avc: denied { bpf } for pid=3521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:47.512000 audit[3521]: AVC avc: denied { perfmon } for pid=3521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:47.512000 audit[3521]: AVC avc: denied { perfmon } for pid=3521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:47.512000 audit[3521]: AVC avc: denied { perfmon } for pid=3521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:47.512000 audit[3521]: AVC avc: denied { perfmon } for pid=3521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:47.512000 audit[3521]: AVC avc: denied { perfmon } for pid=3521 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:47.512000 audit[3521]: AVC avc: denied { bpf } for pid=3521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:47.512000 audit[3521]: AVC avc: denied { bpf } for pid=3521 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:12:47.512000 audit: BPF prog-id=138 op=LOAD Nov 1 00:12:47.512000 audit[3521]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400019db40 a2=78 a3=0 items=0 ppid=3289 pid=3521 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:12:47.512000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038313439316363366563643534636332313439366165643931656432 Nov 1 00:12:47.564494 env[1820]: time="2025-11-01T00:12:47.564429053Z" level=info msg="StartContainer for \"081491cc6ecd54cc21496aed91ed2bc36afb7b226ffc6f2b031b31742c1b4414\" returns successfully" Nov 1 00:12:47.934155 kubelet[2832]: E1101 00:12:47.934098 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-7qfc7" podUID="2c016bf7-bf29-4156-a534-853af2a9ae4f" Nov 1 00:12:48.644800 env[1820]: time="2025-11-01T00:12:48.644700498Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Nov 1 00:12:48.651166 systemd[1]: cri-containerd-081491cc6ecd54cc21496aed91ed2bc36afb7b226ffc6f2b031b31742c1b4414.scope: Deactivated successfully. Nov 1 00:12:48.651612 systemd[1]: cri-containerd-081491cc6ecd54cc21496aed91ed2bc36afb7b226ffc6f2b031b31742c1b4414.scope: Consumed 1.103s CPU time. Nov 1 00:12:48.654000 audit: BPF prog-id=138 op=UNLOAD Nov 1 00:12:48.690590 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-081491cc6ecd54cc21496aed91ed2bc36afb7b226ffc6f2b031b31742c1b4414-rootfs.mount: Deactivated successfully. Nov 1 00:12:48.698378 kubelet[2832]: I1101 00:12:48.697008 2832 kubelet_node_status.go:501] "Fast updating node status as it just became ready" Nov 1 00:12:48.795201 systemd[1]: Created slice kubepods-besteffort-podf4a69723_82d1_4c78_aa91_140b6f4c3c36.slice. Nov 1 00:12:48.802654 kubelet[2832]: I1101 00:12:48.802371 2832 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-z6sh2\" (UniqueName: \"kubernetes.io/projected/f4a69723-82d1-4c78-aa91-140b6f4c3c36-kube-api-access-z6sh2\") pod \"whisker-9c6fb494b-75m8v\" (UID: \"f4a69723-82d1-4c78-aa91-140b6f4c3c36\") " pod="calico-system/whisker-9c6fb494b-75m8v" Nov 1 00:12:48.809701 kubelet[2832]: I1101 00:12:48.809658 2832 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/f4a69723-82d1-4c78-aa91-140b6f4c3c36-whisker-backend-key-pair\") pod \"whisker-9c6fb494b-75m8v\" (UID: \"f4a69723-82d1-4c78-aa91-140b6f4c3c36\") " pod="calico-system/whisker-9c6fb494b-75m8v" Nov 1 00:12:48.811775 kubelet[2832]: I1101 00:12:48.809926 2832 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/f4a69723-82d1-4c78-aa91-140b6f4c3c36-whisker-ca-bundle\") pod \"whisker-9c6fb494b-75m8v\" (UID: \"f4a69723-82d1-4c78-aa91-140b6f4c3c36\") " pod="calico-system/whisker-9c6fb494b-75m8v" Nov 1 00:12:48.834075 systemd[1]: Created slice kubepods-burstable-pod7dfbc4c3_4aed_49cd_a78d_d346944385a4.slice. Nov 1 00:12:48.855169 systemd[1]: Created slice kubepods-besteffort-podde7ca9fd_9d9e_4866_9cab_137a354c3eda.slice. Nov 1 00:12:48.870423 systemd[1]: Created slice kubepods-besteffort-pode0c48ca1_c3ce_4df4_a9c4_ebf24818e57a.slice. Nov 1 00:12:48.895669 systemd[1]: Created slice kubepods-besteffort-pod7f4cf6fd_6544_4217_95df_022c9368163b.slice. Nov 1 00:12:48.910409 kubelet[2832]: I1101 00:12:48.910351 2832 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/7f4cf6fd-6544-4217-95df-022c9368163b-tigera-ca-bundle\") pod \"calico-kube-controllers-5d8bd955b8-hbwc2\" (UID: \"7f4cf6fd-6544-4217-95df-022c9368163b\") " pod="calico-system/calico-kube-controllers-5d8bd955b8-hbwc2" Nov 1 00:12:48.910409 kubelet[2832]: I1101 00:12:48.910419 2832 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-7jnvr\" (UniqueName: \"kubernetes.io/projected/7f4cf6fd-6544-4217-95df-022c9368163b-kube-api-access-7jnvr\") pod \"calico-kube-controllers-5d8bd955b8-hbwc2\" (UID: \"7f4cf6fd-6544-4217-95df-022c9368163b\") " pod="calico-system/calico-kube-controllers-5d8bd955b8-hbwc2" Nov 1 00:12:48.910672 kubelet[2832]: I1101 00:12:48.910487 2832 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/7dfbc4c3-4aed-49cd-a78d-d346944385a4-config-volume\") pod \"coredns-674b8bbfcf-zgm5l\" (UID: \"7dfbc4c3-4aed-49cd-a78d-d346944385a4\") " pod="kube-system/coredns-674b8bbfcf-zgm5l" Nov 1 00:12:48.910672 kubelet[2832]: I1101 00:12:48.910529 2832 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-ffjgs\" (UniqueName: \"kubernetes.io/projected/7dfbc4c3-4aed-49cd-a78d-d346944385a4-kube-api-access-ffjgs\") pod \"coredns-674b8bbfcf-zgm5l\" (UID: \"7dfbc4c3-4aed-49cd-a78d-d346944385a4\") " pod="kube-system/coredns-674b8bbfcf-zgm5l" Nov 1 00:12:48.910672 kubelet[2832]: I1101 00:12:48.910576 2832 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/2015b9d0-1146-401a-9af6-fcdda8aedfda-calico-apiserver-certs\") pod \"calico-apiserver-789667c9c4-fpxfk\" (UID: \"2015b9d0-1146-401a-9af6-fcdda8aedfda\") " pod="calico-apiserver/calico-apiserver-789667c9c4-fpxfk" Nov 1 00:12:48.910672 kubelet[2832]: I1101 00:12:48.910614 2832 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/e0c48ca1-c3ce-4df4-a9c4-ebf24818e57a-goldmane-key-pair\") pod \"goldmane-666569f655-h7lrq\" (UID: \"e0c48ca1-c3ce-4df4-a9c4-ebf24818e57a\") " pod="calico-system/goldmane-666569f655-h7lrq" Nov 1 00:12:48.910672 kubelet[2832]: I1101 00:12:48.910661 2832 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-cdsgs\" (UniqueName: \"kubernetes.io/projected/2015b9d0-1146-401a-9af6-fcdda8aedfda-kube-api-access-cdsgs\") pod \"calico-apiserver-789667c9c4-fpxfk\" (UID: \"2015b9d0-1146-401a-9af6-fcdda8aedfda\") " pod="calico-apiserver/calico-apiserver-789667c9c4-fpxfk" Nov 1 00:12:48.911086 kubelet[2832]: I1101 00:12:48.910702 2832 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-q2n49\" (UniqueName: \"kubernetes.io/projected/e0c48ca1-c3ce-4df4-a9c4-ebf24818e57a-kube-api-access-q2n49\") pod \"goldmane-666569f655-h7lrq\" (UID: \"e0c48ca1-c3ce-4df4-a9c4-ebf24818e57a\") " pod="calico-system/goldmane-666569f655-h7lrq" Nov 1 00:12:48.911086 kubelet[2832]: I1101 00:12:48.910750 2832 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/de7ca9fd-9d9e-4866-9cab-137a354c3eda-calico-apiserver-certs\") pod \"calico-apiserver-789667c9c4-gltc6\" (UID: \"de7ca9fd-9d9e-4866-9cab-137a354c3eda\") " pod="calico-apiserver/calico-apiserver-789667c9c4-gltc6" Nov 1 00:12:48.911086 kubelet[2832]: I1101 00:12:48.910789 2832 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/e0c48ca1-c3ce-4df4-a9c4-ebf24818e57a-config\") pod \"goldmane-666569f655-h7lrq\" (UID: \"e0c48ca1-c3ce-4df4-a9c4-ebf24818e57a\") " pod="calico-system/goldmane-666569f655-h7lrq" Nov 1 00:12:48.913881 kubelet[2832]: I1101 00:12:48.913812 2832 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-lgxsj\" (UniqueName: \"kubernetes.io/projected/de7ca9fd-9d9e-4866-9cab-137a354c3eda-kube-api-access-lgxsj\") pod \"calico-apiserver-789667c9c4-gltc6\" (UID: \"de7ca9fd-9d9e-4866-9cab-137a354c3eda\") " pod="calico-apiserver/calico-apiserver-789667c9c4-gltc6" Nov 1 00:12:48.914110 kubelet[2832]: I1101 00:12:48.913884 2832 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/e0c48ca1-c3ce-4df4-a9c4-ebf24818e57a-goldmane-ca-bundle\") pod \"goldmane-666569f655-h7lrq\" (UID: \"e0c48ca1-c3ce-4df4-a9c4-ebf24818e57a\") " pod="calico-system/goldmane-666569f655-h7lrq" Nov 1 00:12:48.951278 systemd[1]: Created slice kubepods-burstable-pod5344d4ec_b790_4603_a008_c051a1d6febf.slice. Nov 1 00:12:48.987477 systemd[1]: Created slice kubepods-besteffort-pod2015b9d0_1146_401a_9af6_fcdda8aedfda.slice. Nov 1 00:12:49.015519 kubelet[2832]: I1101 00:12:49.015451 2832 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-v9rvm\" (UniqueName: \"kubernetes.io/projected/5344d4ec-b790-4603-a008-c051a1d6febf-kube-api-access-v9rvm\") pod \"coredns-674b8bbfcf-x4xqs\" (UID: \"5344d4ec-b790-4603-a008-c051a1d6febf\") " pod="kube-system/coredns-674b8bbfcf-x4xqs" Nov 1 00:12:49.016153 kubelet[2832]: I1101 00:12:49.015805 2832 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/5344d4ec-b790-4603-a008-c051a1d6febf-config-volume\") pod \"coredns-674b8bbfcf-x4xqs\" (UID: \"5344d4ec-b790-4603-a008-c051a1d6febf\") " pod="kube-system/coredns-674b8bbfcf-x4xqs" Nov 1 00:12:49.108292 env[1820]: time="2025-11-01T00:12:49.108211431Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-9c6fb494b-75m8v,Uid:f4a69723-82d1-4c78-aa91-140b6f4c3c36,Namespace:calico-system,Attempt:0,}" Nov 1 00:12:49.162390 env[1820]: time="2025-11-01T00:12:49.162225111Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-zgm5l,Uid:7dfbc4c3-4aed-49cd-a78d-d346944385a4,Namespace:kube-system,Attempt:0,}" Nov 1 00:12:49.167402 env[1820]: time="2025-11-01T00:12:49.167027197Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-789667c9c4-gltc6,Uid:de7ca9fd-9d9e-4866-9cab-137a354c3eda,Namespace:calico-apiserver,Attempt:0,}" Nov 1 00:12:49.211611 env[1820]: time="2025-11-01T00:12:49.211512535Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-h7lrq,Uid:e0c48ca1-c3ce-4df4-a9c4-ebf24818e57a,Namespace:calico-system,Attempt:0,}" Nov 1 00:12:49.213760 env[1820]: time="2025-11-01T00:12:49.213445419Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-5d8bd955b8-hbwc2,Uid:7f4cf6fd-6544-4217-95df-022c9368163b,Namespace:calico-system,Attempt:0,}" Nov 1 00:12:49.258611 env[1820]: time="2025-11-01T00:12:49.258525240Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-x4xqs,Uid:5344d4ec-b790-4603-a008-c051a1d6febf,Namespace:kube-system,Attempt:0,}" Nov 1 00:12:49.298572 env[1820]: time="2025-11-01T00:12:49.298481146Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-789667c9c4-fpxfk,Uid:2015b9d0-1146-401a-9af6-fcdda8aedfda,Namespace:calico-apiserver,Attempt:0,}" Nov 1 00:12:49.730256 env[1820]: time="2025-11-01T00:12:49.730163303Z" level=info msg="shim disconnected" id=081491cc6ecd54cc21496aed91ed2bc36afb7b226ffc6f2b031b31742c1b4414 Nov 1 00:12:49.731676 env[1820]: time="2025-11-01T00:12:49.731625066Z" level=warning msg="cleaning up after shim disconnected" id=081491cc6ecd54cc21496aed91ed2bc36afb7b226ffc6f2b031b31742c1b4414 namespace=k8s.io Nov 1 00:12:49.731861 env[1820]: time="2025-11-01T00:12:49.731830158Z" level=info msg="cleaning up dead shim" Nov 1 00:12:49.750837 env[1820]: time="2025-11-01T00:12:49.750778615Z" level=warning msg="cleanup warnings time=\"2025-11-01T00:12:49Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3572 runtime=io.containerd.runc.v2\n" Nov 1 00:12:49.944179 systemd[1]: Created slice kubepods-besteffort-pod2c016bf7_bf29_4156_a534_853af2a9ae4f.slice. Nov 1 00:12:49.954590 env[1820]: time="2025-11-01T00:12:49.954474721Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-7qfc7,Uid:2c016bf7-bf29-4156-a534-853af2a9ae4f,Namespace:calico-system,Attempt:0,}" Nov 1 00:12:50.197161 env[1820]: time="2025-11-01T00:12:50.197018223Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.4\"" Nov 1 00:12:50.285804 env[1820]: time="2025-11-01T00:12:50.285682462Z" level=error msg="Failed to destroy network for sandbox \"49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:12:50.286758 env[1820]: time="2025-11-01T00:12:50.286660262Z" level=error msg="encountered an error cleaning up failed sandbox \"49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:12:50.286928 env[1820]: time="2025-11-01T00:12:50.286775043Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-9c6fb494b-75m8v,Uid:f4a69723-82d1-4c78-aa91-140b6f4c3c36,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:12:50.287301 kubelet[2832]: E1101 00:12:50.287210 2832 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:12:50.287879 kubelet[2832]: E1101 00:12:50.287360 2832 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-9c6fb494b-75m8v" Nov 1 00:12:50.287879 kubelet[2832]: E1101 00:12:50.287421 2832 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-9c6fb494b-75m8v" Nov 1 00:12:50.287879 kubelet[2832]: E1101 00:12:50.287537 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-9c6fb494b-75m8v_calico-system(f4a69723-82d1-4c78-aa91-140b6f4c3c36)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-9c6fb494b-75m8v_calico-system(f4a69723-82d1-4c78-aa91-140b6f4c3c36)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-9c6fb494b-75m8v" podUID="f4a69723-82d1-4c78-aa91-140b6f4c3c36" Nov 1 00:12:50.355193 env[1820]: time="2025-11-01T00:12:50.355110337Z" level=error msg="Failed to destroy network for sandbox \"17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:12:50.356150 env[1820]: time="2025-11-01T00:12:50.356030633Z" level=error msg="encountered an error cleaning up failed sandbox \"17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:12:50.356416 env[1820]: time="2025-11-01T00:12:50.356363323Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-zgm5l,Uid:7dfbc4c3-4aed-49cd-a78d-d346944385a4,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:12:50.356899 kubelet[2832]: E1101 00:12:50.356799 2832 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:12:50.357249 kubelet[2832]: E1101 00:12:50.356944 2832 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-zgm5l" Nov 1 00:12:50.357249 kubelet[2832]: E1101 00:12:50.357021 2832 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-zgm5l" Nov 1 00:12:50.357249 kubelet[2832]: E1101 00:12:50.357145 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-zgm5l_kube-system(7dfbc4c3-4aed-49cd-a78d-d346944385a4)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-zgm5l_kube-system(7dfbc4c3-4aed-49cd-a78d-d346944385a4)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-zgm5l" podUID="7dfbc4c3-4aed-49cd-a78d-d346944385a4" Nov 1 00:12:50.381431 env[1820]: time="2025-11-01T00:12:50.381355020Z" level=error msg="Failed to destroy network for sandbox \"381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:12:50.382418 env[1820]: time="2025-11-01T00:12:50.382340189Z" level=error msg="encountered an error cleaning up failed sandbox \"381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:12:50.382694 env[1820]: time="2025-11-01T00:12:50.382636194Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-x4xqs,Uid:5344d4ec-b790-4603-a008-c051a1d6febf,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:12:50.385764 kubelet[2832]: E1101 00:12:50.385203 2832 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:12:50.385764 kubelet[2832]: E1101 00:12:50.385284 2832 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-x4xqs" Nov 1 00:12:50.385764 kubelet[2832]: E1101 00:12:50.385319 2832 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-x4xqs" Nov 1 00:12:50.388851 kubelet[2832]: E1101 00:12:50.385396 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-x4xqs_kube-system(5344d4ec-b790-4603-a008-c051a1d6febf)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-x4xqs_kube-system(5344d4ec-b790-4603-a008-c051a1d6febf)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-x4xqs" podUID="5344d4ec-b790-4603-a008-c051a1d6febf" Nov 1 00:12:50.389405 env[1820]: time="2025-11-01T00:12:50.389331457Z" level=error msg="Failed to destroy network for sandbox \"f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:12:50.390573 env[1820]: time="2025-11-01T00:12:50.390475554Z" level=error msg="encountered an error cleaning up failed sandbox \"f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:12:50.391053 env[1820]: time="2025-11-01T00:12:50.390899168Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-5d8bd955b8-hbwc2,Uid:7f4cf6fd-6544-4217-95df-022c9368163b,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:12:50.392070 kubelet[2832]: E1101 00:12:50.391702 2832 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:12:50.392070 kubelet[2832]: E1101 00:12:50.391783 2832 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-5d8bd955b8-hbwc2" Nov 1 00:12:50.392070 kubelet[2832]: E1101 00:12:50.391825 2832 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-5d8bd955b8-hbwc2" Nov 1 00:12:50.394611 kubelet[2832]: E1101 00:12:50.391913 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-5d8bd955b8-hbwc2_calico-system(7f4cf6fd-6544-4217-95df-022c9368163b)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-5d8bd955b8-hbwc2_calico-system(7f4cf6fd-6544-4217-95df-022c9368163b)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-5d8bd955b8-hbwc2" podUID="7f4cf6fd-6544-4217-95df-022c9368163b" Nov 1 00:12:50.404850 env[1820]: time="2025-11-01T00:12:50.404774495Z" level=error msg="Failed to destroy network for sandbox \"27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:12:50.406747 env[1820]: time="2025-11-01T00:12:50.405673419Z" level=error msg="encountered an error cleaning up failed sandbox \"27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:12:50.407127 env[1820]: time="2025-11-01T00:12:50.407028813Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-789667c9c4-fpxfk,Uid:2015b9d0-1146-401a-9af6-fcdda8aedfda,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:12:50.407755 kubelet[2832]: E1101 00:12:50.407607 2832 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:12:50.407755 kubelet[2832]: E1101 00:12:50.407704 2832 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-789667c9c4-fpxfk" Nov 1 00:12:50.407755 kubelet[2832]: E1101 00:12:50.407742 2832 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-789667c9c4-fpxfk" Nov 1 00:12:50.408145 kubelet[2832]: E1101 00:12:50.407831 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-789667c9c4-fpxfk_calico-apiserver(2015b9d0-1146-401a-9af6-fcdda8aedfda)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-789667c9c4-fpxfk_calico-apiserver(2015b9d0-1146-401a-9af6-fcdda8aedfda)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-789667c9c4-fpxfk" podUID="2015b9d0-1146-401a-9af6-fcdda8aedfda" Nov 1 00:12:50.411301 env[1820]: time="2025-11-01T00:12:50.410463193Z" level=error msg="Failed to destroy network for sandbox \"b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:12:50.411579 env[1820]: time="2025-11-01T00:12:50.411219112Z" level=error msg="encountered an error cleaning up failed sandbox \"b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:12:50.411681 env[1820]: time="2025-11-01T00:12:50.411575346Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-789667c9c4-gltc6,Uid:de7ca9fd-9d9e-4866-9cab-137a354c3eda,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:12:50.412142 kubelet[2832]: E1101 00:12:50.412045 2832 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:12:50.412288 kubelet[2832]: E1101 00:12:50.412191 2832 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-789667c9c4-gltc6" Nov 1 00:12:50.412288 kubelet[2832]: E1101 00:12:50.412233 2832 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-789667c9c4-gltc6" Nov 1 00:12:50.412489 kubelet[2832]: E1101 00:12:50.412382 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-789667c9c4-gltc6_calico-apiserver(de7ca9fd-9d9e-4866-9cab-137a354c3eda)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-789667c9c4-gltc6_calico-apiserver(de7ca9fd-9d9e-4866-9cab-137a354c3eda)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-789667c9c4-gltc6" podUID="de7ca9fd-9d9e-4866-9cab-137a354c3eda" Nov 1 00:12:50.437029 env[1820]: time="2025-11-01T00:12:50.434913892Z" level=error msg="Failed to destroy network for sandbox \"6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:12:50.438324 env[1820]: time="2025-11-01T00:12:50.438226531Z" level=error msg="encountered an error cleaning up failed sandbox \"6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:12:50.438699 env[1820]: time="2025-11-01T00:12:50.438649773Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-h7lrq,Uid:e0c48ca1-c3ce-4df4-a9c4-ebf24818e57a,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:12:50.440062 kubelet[2832]: E1101 00:12:50.439251 2832 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:12:50.440062 kubelet[2832]: E1101 00:12:50.439349 2832 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-666569f655-h7lrq" Nov 1 00:12:50.440062 kubelet[2832]: E1101 00:12:50.439410 2832 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-666569f655-h7lrq" Nov 1 00:12:50.440375 kubelet[2832]: E1101 00:12:50.439510 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-666569f655-h7lrq_calico-system(e0c48ca1-c3ce-4df4-a9c4-ebf24818e57a)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-666569f655-h7lrq_calico-system(e0c48ca1-c3ce-4df4-a9c4-ebf24818e57a)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-666569f655-h7lrq" podUID="e0c48ca1-c3ce-4df4-a9c4-ebf24818e57a" Nov 1 00:12:50.452849 env[1820]: time="2025-11-01T00:12:50.452667612Z" level=error msg="Failed to destroy network for sandbox \"b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:12:50.454831 env[1820]: time="2025-11-01T00:12:50.454760674Z" level=error msg="encountered an error cleaning up failed sandbox \"b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:12:50.455154 env[1820]: time="2025-11-01T00:12:50.455082383Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-7qfc7,Uid:2c016bf7-bf29-4156-a534-853af2a9ae4f,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:12:50.457895 kubelet[2832]: E1101 00:12:50.456254 2832 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:12:50.457895 kubelet[2832]: E1101 00:12:50.456339 2832 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-7qfc7" Nov 1 00:12:50.457895 kubelet[2832]: E1101 00:12:50.456379 2832 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-7qfc7" Nov 1 00:12:50.458310 kubelet[2832]: E1101 00:12:50.456450 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-7qfc7_calico-system(2c016bf7-bf29-4156-a534-853af2a9ae4f)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-7qfc7_calico-system(2c016bf7-bf29-4156-a534-853af2a9ae4f)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-7qfc7" podUID="2c016bf7-bf29-4156-a534-853af2a9ae4f" Nov 1 00:12:50.691912 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5-shm.mount: Deactivated successfully. Nov 1 00:12:50.692357 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc-shm.mount: Deactivated successfully. Nov 1 00:12:50.692628 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354-shm.mount: Deactivated successfully. Nov 1 00:12:51.193610 kubelet[2832]: I1101 00:12:51.192876 2832 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354" Nov 1 00:12:51.194163 env[1820]: time="2025-11-01T00:12:51.194106634Z" level=info msg="StopPodSandbox for \"49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354\"" Nov 1 00:12:51.196840 kubelet[2832]: I1101 00:12:51.196206 2832 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5" Nov 1 00:12:51.197524 env[1820]: time="2025-11-01T00:12:51.197462606Z" level=info msg="StopPodSandbox for \"381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5\"" Nov 1 00:12:51.200489 kubelet[2832]: I1101 00:12:51.199683 2832 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766" Nov 1 00:12:51.201279 env[1820]: time="2025-11-01T00:12:51.201218719Z" level=info msg="StopPodSandbox for \"b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766\"" Nov 1 00:12:51.207959 kubelet[2832]: I1101 00:12:51.207034 2832 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308" Nov 1 00:12:51.208675 env[1820]: time="2025-11-01T00:12:51.208587929Z" level=info msg="StopPodSandbox for \"b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308\"" Nov 1 00:12:51.215518 kubelet[2832]: I1101 00:12:51.215429 2832 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08" Nov 1 00:12:51.226106 env[1820]: time="2025-11-01T00:12:51.226049678Z" level=info msg="StopPodSandbox for \"6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08\"" Nov 1 00:12:51.229828 kubelet[2832]: I1101 00:12:51.229756 2832 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13" Nov 1 00:12:51.233449 env[1820]: time="2025-11-01T00:12:51.233084651Z" level=info msg="StopPodSandbox for \"f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13\"" Nov 1 00:12:51.238864 kubelet[2832]: I1101 00:12:51.238809 2832 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16" Nov 1 00:12:51.240950 env[1820]: time="2025-11-01T00:12:51.240859523Z" level=info msg="StopPodSandbox for \"27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16\"" Nov 1 00:12:51.245313 kubelet[2832]: I1101 00:12:51.245265 2832 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc" Nov 1 00:12:51.246491 env[1820]: time="2025-11-01T00:12:51.246394632Z" level=info msg="StopPodSandbox for \"17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc\"" Nov 1 00:12:51.420738 env[1820]: time="2025-11-01T00:12:51.420640372Z" level=error msg="StopPodSandbox for \"49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354\" failed" error="failed to destroy network for sandbox \"49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:12:51.421305 kubelet[2832]: E1101 00:12:51.421236 2832 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354" Nov 1 00:12:51.421883 kubelet[2832]: E1101 00:12:51.421329 2832 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354"} Nov 1 00:12:51.421883 kubelet[2832]: E1101 00:12:51.421421 2832 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"f4a69723-82d1-4c78-aa91-140b6f4c3c36\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:12:51.421883 kubelet[2832]: E1101 00:12:51.421466 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"f4a69723-82d1-4c78-aa91-140b6f4c3c36\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-9c6fb494b-75m8v" podUID="f4a69723-82d1-4c78-aa91-140b6f4c3c36" Nov 1 00:12:51.461859 env[1820]: time="2025-11-01T00:12:51.461669618Z" level=error msg="StopPodSandbox for \"b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766\" failed" error="failed to destroy network for sandbox \"b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:12:51.465224 kubelet[2832]: E1101 00:12:51.465140 2832 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766" Nov 1 00:12:51.465412 kubelet[2832]: E1101 00:12:51.465231 2832 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766"} Nov 1 00:12:51.465412 kubelet[2832]: E1101 00:12:51.465286 2832 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"2c016bf7-bf29-4156-a534-853af2a9ae4f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:12:51.465412 kubelet[2832]: E1101 00:12:51.465327 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"2c016bf7-bf29-4156-a534-853af2a9ae4f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-7qfc7" podUID="2c016bf7-bf29-4156-a534-853af2a9ae4f" Nov 1 00:12:51.465933 env[1820]: time="2025-11-01T00:12:51.465863433Z" level=error msg="StopPodSandbox for \"381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5\" failed" error="failed to destroy network for sandbox \"381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:12:51.466491 kubelet[2832]: E1101 00:12:51.466431 2832 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5" Nov 1 00:12:51.466622 kubelet[2832]: E1101 00:12:51.466499 2832 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5"} Nov 1 00:12:51.466622 kubelet[2832]: E1101 00:12:51.466561 2832 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"5344d4ec-b790-4603-a008-c051a1d6febf\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:12:51.466622 kubelet[2832]: E1101 00:12:51.466602 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"5344d4ec-b790-4603-a008-c051a1d6febf\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-x4xqs" podUID="5344d4ec-b790-4603-a008-c051a1d6febf" Nov 1 00:12:51.499497 env[1820]: time="2025-11-01T00:12:51.499419297Z" level=error msg="StopPodSandbox for \"17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc\" failed" error="failed to destroy network for sandbox \"17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:12:51.500321 kubelet[2832]: E1101 00:12:51.500027 2832 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc" Nov 1 00:12:51.500321 kubelet[2832]: E1101 00:12:51.500118 2832 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc"} Nov 1 00:12:51.500321 kubelet[2832]: E1101 00:12:51.500198 2832 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"7dfbc4c3-4aed-49cd-a78d-d346944385a4\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:12:51.500321 kubelet[2832]: E1101 00:12:51.500265 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"7dfbc4c3-4aed-49cd-a78d-d346944385a4\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-zgm5l" podUID="7dfbc4c3-4aed-49cd-a78d-d346944385a4" Nov 1 00:12:51.523962 env[1820]: time="2025-11-01T00:12:51.523885874Z" level=error msg="StopPodSandbox for \"b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308\" failed" error="failed to destroy network for sandbox \"b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:12:51.524842 kubelet[2832]: E1101 00:12:51.524514 2832 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308" Nov 1 00:12:51.524842 kubelet[2832]: E1101 00:12:51.524633 2832 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308"} Nov 1 00:12:51.524842 kubelet[2832]: E1101 00:12:51.524717 2832 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"de7ca9fd-9d9e-4866-9cab-137a354c3eda\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:12:51.524842 kubelet[2832]: E1101 00:12:51.524766 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"de7ca9fd-9d9e-4866-9cab-137a354c3eda\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-789667c9c4-gltc6" podUID="de7ca9fd-9d9e-4866-9cab-137a354c3eda" Nov 1 00:12:51.528942 env[1820]: time="2025-11-01T00:12:51.528839485Z" level=error msg="StopPodSandbox for \"27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16\" failed" error="failed to destroy network for sandbox \"27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:12:51.529288 kubelet[2832]: E1101 00:12:51.529212 2832 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16" Nov 1 00:12:51.529393 kubelet[2832]: E1101 00:12:51.529291 2832 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16"} Nov 1 00:12:51.529393 kubelet[2832]: E1101 00:12:51.529347 2832 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"2015b9d0-1146-401a-9af6-fcdda8aedfda\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:12:51.529673 kubelet[2832]: E1101 00:12:51.529389 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"2015b9d0-1146-401a-9af6-fcdda8aedfda\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-789667c9c4-fpxfk" podUID="2015b9d0-1146-401a-9af6-fcdda8aedfda" Nov 1 00:12:51.530673 env[1820]: time="2025-11-01T00:12:51.530584197Z" level=error msg="StopPodSandbox for \"6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08\" failed" error="failed to destroy network for sandbox \"6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:12:51.531190 kubelet[2832]: E1101 00:12:51.531109 2832 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08" Nov 1 00:12:51.531392 kubelet[2832]: E1101 00:12:51.531193 2832 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08"} Nov 1 00:12:51.531392 kubelet[2832]: E1101 00:12:51.531251 2832 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"e0c48ca1-c3ce-4df4-a9c4-ebf24818e57a\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:12:51.531392 kubelet[2832]: E1101 00:12:51.531291 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"e0c48ca1-c3ce-4df4-a9c4-ebf24818e57a\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-666569f655-h7lrq" podUID="e0c48ca1-c3ce-4df4-a9c4-ebf24818e57a" Nov 1 00:12:51.532489 env[1820]: time="2025-11-01T00:12:51.532405181Z" level=error msg="StopPodSandbox for \"f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13\" failed" error="failed to destroy network for sandbox \"f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:12:51.533196 kubelet[2832]: E1101 00:12:51.532866 2832 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13" Nov 1 00:12:51.533196 kubelet[2832]: E1101 00:12:51.532959 2832 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13"} Nov 1 00:12:51.533196 kubelet[2832]: E1101 00:12:51.533056 2832 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"7f4cf6fd-6544-4217-95df-022c9368163b\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:12:51.533196 kubelet[2832]: E1101 00:12:51.533127 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"7f4cf6fd-6544-4217-95df-022c9368163b\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-5d8bd955b8-hbwc2" podUID="7f4cf6fd-6544-4217-95df-022c9368163b" Nov 1 00:12:58.484627 kernel: kauditd_printk_skb: 40 callbacks suppressed Nov 1 00:12:58.484857 kernel: audit: type=1400 audit(1761955978.480:1022): avc: denied { watch } for pid=2700 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521021 scontext=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:12:58.480000 audit[2700]: AVC avc: denied { watch } for pid=2700 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521021 scontext=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:12:58.480000 audit[2700]: AVC avc: denied { watch } for pid=2700 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521025 scontext=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:12:58.503499 kernel: audit: type=1400 audit(1761955978.480:1023): avc: denied { watch } for pid=2700 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521025 scontext=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:12:58.503827 kernel: audit: type=1300 audit(1761955978.480:1023): arch=c00000b7 syscall=27 success=no exit=-13 a0=6c a1=400f4c7fb0 a2=fc6 a3=0 items=0 ppid=2459 pid=2700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 key=(null) Nov 1 00:12:58.480000 audit[2700]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6c a1=400f4c7fb0 a2=fc6 a3=0 items=0 ppid=2459 pid=2700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 key=(null) Nov 1 00:12:58.480000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32342E3437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:12:58.526886 kernel: audit: type=1327 audit(1761955978.480:1023): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32342E3437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:12:58.480000 audit[2700]: AVC avc: denied { watch } for pid=2700 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521019 scontext=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:12:58.536857 kernel: audit: type=1400 audit(1761955978.480:1024): avc: denied { watch } for pid=2700 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521019 scontext=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:12:58.480000 audit[2700]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6c a1=400f725240 a2=fc6 a3=0 items=0 ppid=2459 pid=2700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 key=(null) Nov 1 00:12:58.549624 kernel: audit: type=1300 audit(1761955978.480:1024): arch=c00000b7 syscall=27 success=no exit=-13 a0=6c a1=400f725240 a2=fc6 a3=0 items=0 ppid=2459 pid=2700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 key=(null) Nov 1 00:12:58.480000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32342E3437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:12:58.560502 kernel: audit: type=1327 audit(1761955978.480:1024): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32342E3437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:12:58.480000 audit[2700]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6b a1=400f5ed560 a2=fc6 a3=0 items=0 ppid=2459 pid=2700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 key=(null) Nov 1 00:12:58.573323 kernel: audit: type=1300 audit(1761955978.480:1022): arch=c00000b7 syscall=27 success=no exit=-13 a0=6b a1=400f5ed560 a2=fc6 a3=0 items=0 ppid=2459 pid=2700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 key=(null) Nov 1 00:12:58.480000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32342E3437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:12:58.584157 kernel: audit: type=1327 audit(1761955978.480:1022): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32342E3437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:12:58.492000 audit[2700]: AVC avc: denied { watch } for pid=2700 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521027 scontext=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:12:58.594672 kernel: audit: type=1400 audit(1761955978.492:1025): avc: denied { watch } for pid=2700 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521027 scontext=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:12:58.492000 audit[2700]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6b a1=400f5ed590 a2=fc6 a3=0 items=0 ppid=2459 pid=2700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 key=(null) Nov 1 00:12:58.492000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32342E3437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:12:58.498000 audit[2700]: AVC avc: denied { watch } for pid=2700 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521025 scontext=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:12:58.498000 audit[2700]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6b a1=400f838120 a2=fc6 a3=0 items=0 ppid=2459 pid=2700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 key=(null) Nov 1 00:12:58.498000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32342E3437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:12:58.498000 audit[2700]: AVC avc: denied { watch } for pid=2700 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521019 scontext=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:12:58.498000 audit[2700]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6b a1=400f725400 a2=fc6 a3=0 items=0 ppid=2459 pid=2700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 key=(null) Nov 1 00:12:58.498000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32342E3437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:12:58.781000 audit[2677]: AVC avc: denied { watch } for pid=2677 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521019 scontext=system_u:system_r:svirt_lxc_net_t:s0:c413,c578 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:12:58.781000 audit[2677]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40021caec0 a2=fc6 a3=0 items=0 ppid=2422 pid=2677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c413,c578 key=(null) Nov 1 00:12:58.781000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:12:58.782000 audit[2677]: AVC avc: denied { watch } for pid=2677 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521025 scontext=system_u:system_r:svirt_lxc_net_t:s0:c413,c578 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:12:58.782000 audit[2677]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002b8b410 a2=fc6 a3=0 items=0 ppid=2422 pid=2677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c413,c578 key=(null) Nov 1 00:12:58.782000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:12:59.800367 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4092378435.mount: Deactivated successfully. Nov 1 00:12:59.855545 env[1820]: time="2025-11-01T00:12:59.855474904Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:12:59.858021 env[1820]: time="2025-11-01T00:12:59.857939477Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:43a5290057a103af76996c108856f92ed902f34573d7a864f55f15b8aaf4683b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:12:59.860296 env[1820]: time="2025-11-01T00:12:59.860242337Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:12:59.862362 env[1820]: time="2025-11-01T00:12:59.862310524Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e92cca333202c87d07bf57f38182fd68f0779f912ef55305eda1fccc9f33667c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:12:59.863466 env[1820]: time="2025-11-01T00:12:59.863418442Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.4\" returns image reference \"sha256:43a5290057a103af76996c108856f92ed902f34573d7a864f55f15b8aaf4683b\"" Nov 1 00:12:59.901284 env[1820]: time="2025-11-01T00:12:59.901208236Z" level=info msg="CreateContainer within sandbox \"df0f99b1c845a8efda238076997aef552e6d150ca7682ab0534d2d473c247f39\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Nov 1 00:12:59.930965 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4232263671.mount: Deactivated successfully. Nov 1 00:12:59.937952 env[1820]: time="2025-11-01T00:12:59.937748368Z" level=info msg="CreateContainer within sandbox \"df0f99b1c845a8efda238076997aef552e6d150ca7682ab0534d2d473c247f39\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"79fd55566f956de9971ecfefc31477fdb4d8c3aea32e2854068956f298d16487\"" Nov 1 00:12:59.941227 env[1820]: time="2025-11-01T00:12:59.940716428Z" level=info msg="StartContainer for \"79fd55566f956de9971ecfefc31477fdb4d8c3aea32e2854068956f298d16487\"" Nov 1 00:13:00.005611 systemd[1]: Started cri-containerd-79fd55566f956de9971ecfefc31477fdb4d8c3aea32e2854068956f298d16487.scope. Nov 1 00:13:00.056000 audit[3928]: AVC avc: denied { perfmon } for pid=3928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:00.056000 audit[3928]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3289 pid=3928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:00.056000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3739666435353536366639353664653939373165636665666333313437 Nov 1 00:13:00.058000 audit[3928]: AVC avc: denied { bpf } for pid=3928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:00.058000 audit[3928]: AVC avc: denied { bpf } for pid=3928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:00.058000 audit[3928]: AVC avc: denied { bpf } for pid=3928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:00.058000 audit[3928]: AVC avc: denied { perfmon } for pid=3928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:00.058000 audit[3928]: AVC avc: denied { perfmon } for pid=3928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:00.058000 audit[3928]: AVC avc: denied { perfmon } for pid=3928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:00.058000 audit[3928]: AVC avc: denied { perfmon } for pid=3928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:00.058000 audit[3928]: AVC avc: denied { perfmon } for pid=3928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:00.058000 audit[3928]: AVC avc: denied { bpf } for pid=3928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:00.058000 audit[3928]: AVC avc: denied { bpf } for pid=3928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:00.058000 audit: BPF prog-id=139 op=LOAD Nov 1 00:13:00.058000 audit[3928]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3289 pid=3928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:00.058000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3739666435353536366639353664653939373165636665666333313437 Nov 1 00:13:00.062000 audit[3928]: AVC avc: denied { bpf } for pid=3928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:00.062000 audit[3928]: AVC avc: denied { bpf } for pid=3928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:00.062000 audit[3928]: AVC avc: denied { perfmon } for pid=3928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:00.062000 audit[3928]: AVC avc: denied { perfmon } for pid=3928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:00.062000 audit[3928]: AVC avc: denied { perfmon } for pid=3928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:00.062000 audit[3928]: AVC avc: denied { perfmon } for pid=3928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:00.062000 audit[3928]: AVC avc: denied { perfmon } for pid=3928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:00.062000 audit[3928]: AVC avc: denied { bpf } for pid=3928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:00.062000 audit[3928]: AVC avc: denied { bpf } for pid=3928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:00.062000 audit: BPF prog-id=140 op=LOAD Nov 1 00:13:00.062000 audit[3928]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3289 pid=3928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:00.062000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3739666435353536366639353664653939373165636665666333313437 Nov 1 00:13:00.063000 audit: BPF prog-id=140 op=UNLOAD Nov 1 00:13:00.064000 audit: BPF prog-id=139 op=UNLOAD Nov 1 00:13:00.064000 audit[3928]: AVC avc: denied { bpf } for pid=3928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:00.064000 audit[3928]: AVC avc: denied { bpf } for pid=3928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:00.064000 audit[3928]: AVC avc: denied { bpf } for pid=3928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:00.064000 audit[3928]: AVC avc: denied { perfmon } for pid=3928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:00.064000 audit[3928]: AVC avc: denied { perfmon } for pid=3928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:00.064000 audit[3928]: AVC avc: denied { perfmon } for pid=3928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:00.064000 audit[3928]: AVC avc: denied { perfmon } for pid=3928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:00.064000 audit[3928]: AVC avc: denied { perfmon } for pid=3928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:00.064000 audit[3928]: AVC avc: denied { bpf } for pid=3928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:00.064000 audit[3928]: AVC avc: denied { bpf } for pid=3928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:00.064000 audit: BPF prog-id=141 op=LOAD Nov 1 00:13:00.064000 audit[3928]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3289 pid=3928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:00.064000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3739666435353536366639353664653939373165636665666333313437 Nov 1 00:13:00.104727 env[1820]: time="2025-11-01T00:13:00.104598513Z" level=info msg="StartContainer for \"79fd55566f956de9971ecfefc31477fdb4d8c3aea32e2854068956f298d16487\" returns successfully" Nov 1 00:13:00.350952 kubelet[2832]: I1101 00:13:00.348662 2832 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-8fd74" podStartSLOduration=2.012544793 podStartE2EDuration="23.348635628s" podCreationTimestamp="2025-11-01 00:12:37 +0000 UTC" firstStartedPulling="2025-11-01 00:12:38.529341445 +0000 UTC m=+34.939255203" lastFinishedPulling="2025-11-01 00:12:59.865432268 +0000 UTC m=+56.275346038" observedRunningTime="2025-11-01 00:13:00.327497599 +0000 UTC m=+56.737411369" watchObservedRunningTime="2025-11-01 00:13:00.348635628 +0000 UTC m=+56.758549398" Nov 1 00:13:00.630330 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Nov 1 00:13:00.630601 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Nov 1 00:13:00.901262 env[1820]: time="2025-11-01T00:13:00.901162670Z" level=info msg="StopPodSandbox for \"49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354\"" Nov 1 00:13:01.287696 env[1820]: 2025-11-01 00:13:01.110 [INFO][4004] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354" Nov 1 00:13:01.287696 env[1820]: 2025-11-01 00:13:01.110 [INFO][4004] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354" iface="eth0" netns="/var/run/netns/cni-55063931-700b-8855-572b-b32bc5632c6e" Nov 1 00:13:01.287696 env[1820]: 2025-11-01 00:13:01.111 [INFO][4004] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354" iface="eth0" netns="/var/run/netns/cni-55063931-700b-8855-572b-b32bc5632c6e" Nov 1 00:13:01.287696 env[1820]: 2025-11-01 00:13:01.113 [INFO][4004] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354" iface="eth0" netns="/var/run/netns/cni-55063931-700b-8855-572b-b32bc5632c6e" Nov 1 00:13:01.287696 env[1820]: 2025-11-01 00:13:01.113 [INFO][4004] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354" Nov 1 00:13:01.287696 env[1820]: 2025-11-01 00:13:01.113 [INFO][4004] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354" Nov 1 00:13:01.287696 env[1820]: 2025-11-01 00:13:01.208 [INFO][4011] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354" HandleID="k8s-pod-network.49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354" Workload="ip--172--31--24--47-k8s-whisker--9c6fb494b--75m8v-eth0" Nov 1 00:13:01.287696 env[1820]: 2025-11-01 00:13:01.208 [INFO][4011] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:13:01.287696 env[1820]: 2025-11-01 00:13:01.208 [INFO][4011] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:13:01.287696 env[1820]: 2025-11-01 00:13:01.240 [WARNING][4011] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354" HandleID="k8s-pod-network.49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354" Workload="ip--172--31--24--47-k8s-whisker--9c6fb494b--75m8v-eth0" Nov 1 00:13:01.287696 env[1820]: 2025-11-01 00:13:01.240 [INFO][4011] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354" HandleID="k8s-pod-network.49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354" Workload="ip--172--31--24--47-k8s-whisker--9c6fb494b--75m8v-eth0" Nov 1 00:13:01.287696 env[1820]: 2025-11-01 00:13:01.274 [INFO][4011] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:13:01.287696 env[1820]: 2025-11-01 00:13:01.284 [INFO][4004] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354" Nov 1 00:13:01.292479 systemd[1]: run-netns-cni\x2d55063931\x2d700b\x2d8855\x2d572b\x2db32bc5632c6e.mount: Deactivated successfully. Nov 1 00:13:01.294602 env[1820]: time="2025-11-01T00:13:01.294542880Z" level=info msg="TearDown network for sandbox \"49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354\" successfully" Nov 1 00:13:01.294781 env[1820]: time="2025-11-01T00:13:01.294745693Z" level=info msg="StopPodSandbox for \"49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354\" returns successfully" Nov 1 00:13:01.365189 systemd[1]: run-containerd-runc-k8s.io-79fd55566f956de9971ecfefc31477fdb4d8c3aea32e2854068956f298d16487-runc.LVKT2c.mount: Deactivated successfully. Nov 1 00:13:01.424352 kubelet[2832]: I1101 00:13:01.423698 2832 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-z6sh2\" (UniqueName: \"kubernetes.io/projected/f4a69723-82d1-4c78-aa91-140b6f4c3c36-kube-api-access-z6sh2\") pod \"f4a69723-82d1-4c78-aa91-140b6f4c3c36\" (UID: \"f4a69723-82d1-4c78-aa91-140b6f4c3c36\") " Nov 1 00:13:01.425379 kubelet[2832]: I1101 00:13:01.425336 2832 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/f4a69723-82d1-4c78-aa91-140b6f4c3c36-whisker-ca-bundle\") pod \"f4a69723-82d1-4c78-aa91-140b6f4c3c36\" (UID: \"f4a69723-82d1-4c78-aa91-140b6f4c3c36\") " Nov 1 00:13:01.425736 kubelet[2832]: I1101 00:13:01.425694 2832 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/f4a69723-82d1-4c78-aa91-140b6f4c3c36-whisker-backend-key-pair\") pod \"f4a69723-82d1-4c78-aa91-140b6f4c3c36\" (UID: \"f4a69723-82d1-4c78-aa91-140b6f4c3c36\") " Nov 1 00:13:01.427515 kubelet[2832]: I1101 00:13:01.427462 2832 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/f4a69723-82d1-4c78-aa91-140b6f4c3c36-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "f4a69723-82d1-4c78-aa91-140b6f4c3c36" (UID: "f4a69723-82d1-4c78-aa91-140b6f4c3c36"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGIDValue "" Nov 1 00:13:01.438389 systemd[1]: var-lib-kubelet-pods-f4a69723\x2d82d1\x2d4c78\x2daa91\x2d140b6f4c3c36-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dz6sh2.mount: Deactivated successfully. Nov 1 00:13:01.444812 kubelet[2832]: I1101 00:13:01.444321 2832 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/f4a69723-82d1-4c78-aa91-140b6f4c3c36-kube-api-access-z6sh2" (OuterVolumeSpecName: "kube-api-access-z6sh2") pod "f4a69723-82d1-4c78-aa91-140b6f4c3c36" (UID: "f4a69723-82d1-4c78-aa91-140b6f4c3c36"). InnerVolumeSpecName "kube-api-access-z6sh2". PluginName "kubernetes.io/projected", VolumeGIDValue "" Nov 1 00:13:01.462356 kubelet[2832]: I1101 00:13:01.462290 2832 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/f4a69723-82d1-4c78-aa91-140b6f4c3c36-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "f4a69723-82d1-4c78-aa91-140b6f4c3c36" (UID: "f4a69723-82d1-4c78-aa91-140b6f4c3c36"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGIDValue "" Nov 1 00:13:01.527279 kubelet[2832]: I1101 00:13:01.527159 2832 reconciler_common.go:299] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/f4a69723-82d1-4c78-aa91-140b6f4c3c36-whisker-backend-key-pair\") on node \"ip-172-31-24-47\" DevicePath \"\"" Nov 1 00:13:01.527479 kubelet[2832]: I1101 00:13:01.527313 2832 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-z6sh2\" (UniqueName: \"kubernetes.io/projected/f4a69723-82d1-4c78-aa91-140b6f4c3c36-kube-api-access-z6sh2\") on node \"ip-172-31-24-47\" DevicePath \"\"" Nov 1 00:13:01.527479 kubelet[2832]: I1101 00:13:01.527400 2832 reconciler_common.go:299] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/f4a69723-82d1-4c78-aa91-140b6f4c3c36-whisker-ca-bundle\") on node \"ip-172-31-24-47\" DevicePath \"\"" Nov 1 00:13:01.688257 systemd[1]: Started sshd@7-172.31.24.47:22-147.75.109.163:47680.service. Nov 1 00:13:01.691000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.24.47:22-147.75.109.163:47680 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:01.801055 systemd[1]: var-lib-kubelet-pods-f4a69723\x2d82d1\x2d4c78\x2daa91\x2d140b6f4c3c36-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Nov 1 00:13:01.884502 sshd[4034]: Accepted publickey for core from 147.75.109.163 port 47680 ssh2: RSA SHA256:l10clL99NTgBLZDdAUsIsAniCj4DES+0hQanxvSOioM Nov 1 00:13:01.883000 audit[4034]: USER_ACCT pid=4034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:01.886000 audit[4034]: CRED_ACQ pid=4034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:01.886000 audit[4034]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd7a79130 a2=3 a3=1 items=0 ppid=1 pid=4034 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:01.886000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:13:01.888923 sshd[4034]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:13:01.900722 systemd-logind[1813]: New session 8 of user core. Nov 1 00:13:01.902381 systemd[1]: Started session-8.scope. Nov 1 00:13:01.918000 audit[4034]: USER_START pid=4034 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:01.921000 audit[4041]: CRED_ACQ pid=4041 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:01.933985 env[1820]: time="2025-11-01T00:13:01.933901754Z" level=info msg="StopPodSandbox for \"b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766\"" Nov 1 00:13:01.965879 systemd[1]: Removed slice kubepods-besteffort-podf4a69723_82d1_4c78_aa91_140b6f4c3c36.slice. Nov 1 00:13:02.220084 env[1820]: 2025-11-01 00:13:02.109 [INFO][4051] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766" Nov 1 00:13:02.220084 env[1820]: 2025-11-01 00:13:02.109 [INFO][4051] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766" iface="eth0" netns="/var/run/netns/cni-99b8aa33-f322-dd11-0912-027d1e7f2ac2" Nov 1 00:13:02.220084 env[1820]: 2025-11-01 00:13:02.120 [INFO][4051] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766" iface="eth0" netns="/var/run/netns/cni-99b8aa33-f322-dd11-0912-027d1e7f2ac2" Nov 1 00:13:02.220084 env[1820]: 2025-11-01 00:13:02.120 [INFO][4051] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766" iface="eth0" netns="/var/run/netns/cni-99b8aa33-f322-dd11-0912-027d1e7f2ac2" Nov 1 00:13:02.220084 env[1820]: 2025-11-01 00:13:02.120 [INFO][4051] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766" Nov 1 00:13:02.220084 env[1820]: 2025-11-01 00:13:02.121 [INFO][4051] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766" Nov 1 00:13:02.220084 env[1820]: 2025-11-01 00:13:02.187 [INFO][4078] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766" HandleID="k8s-pod-network.b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766" Workload="ip--172--31--24--47-k8s-csi--node--driver--7qfc7-eth0" Nov 1 00:13:02.220084 env[1820]: 2025-11-01 00:13:02.187 [INFO][4078] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:13:02.220084 env[1820]: 2025-11-01 00:13:02.187 [INFO][4078] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:13:02.220084 env[1820]: 2025-11-01 00:13:02.204 [WARNING][4078] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766" HandleID="k8s-pod-network.b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766" Workload="ip--172--31--24--47-k8s-csi--node--driver--7qfc7-eth0" Nov 1 00:13:02.220084 env[1820]: 2025-11-01 00:13:02.204 [INFO][4078] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766" HandleID="k8s-pod-network.b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766" Workload="ip--172--31--24--47-k8s-csi--node--driver--7qfc7-eth0" Nov 1 00:13:02.220084 env[1820]: 2025-11-01 00:13:02.208 [INFO][4078] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:13:02.220084 env[1820]: 2025-11-01 00:13:02.215 [INFO][4051] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766" Nov 1 00:13:02.226086 env[1820]: time="2025-11-01T00:13:02.221293585Z" level=info msg="TearDown network for sandbox \"b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766\" successfully" Nov 1 00:13:02.226086 env[1820]: time="2025-11-01T00:13:02.221373325Z" level=info msg="StopPodSandbox for \"b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766\" returns successfully" Nov 1 00:13:02.226086 env[1820]: time="2025-11-01T00:13:02.222322855Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-7qfc7,Uid:2c016bf7-bf29-4156-a534-853af2a9ae4f,Namespace:calico-system,Attempt:1,}" Nov 1 00:13:02.225831 systemd[1]: run-netns-cni\x2d99b8aa33\x2df322\x2ddd11\x2d0912\x2d027d1e7f2ac2.mount: Deactivated successfully. Nov 1 00:13:02.300540 sshd[4034]: pam_unix(sshd:session): session closed for user core Nov 1 00:13:02.304000 audit[4034]: USER_END pid=4034 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:02.304000 audit[4034]: CRED_DISP pid=4034 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:02.309000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.24.47:22-147.75.109.163:47680 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:02.308126 systemd[1]: session-8.scope: Deactivated successfully. Nov 1 00:13:02.309575 systemd[1]: sshd@7-172.31.24.47:22-147.75.109.163:47680.service: Deactivated successfully. Nov 1 00:13:02.315125 systemd-logind[1813]: Session 8 logged out. Waiting for processes to exit. Nov 1 00:13:02.326319 systemd-logind[1813]: Removed session 8. Nov 1 00:13:02.483720 systemd[1]: Created slice kubepods-besteffort-podb4871652_e36f_45a1_ab7f_b8d5032703a6.slice. Nov 1 00:13:02.542099 kubelet[2832]: I1101 00:13:02.541651 2832 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/b4871652-e36f-45a1-ab7f-b8d5032703a6-whisker-backend-key-pair\") pod \"whisker-58c6498fd4-zrpxf\" (UID: \"b4871652-e36f-45a1-ab7f-b8d5032703a6\") " pod="calico-system/whisker-58c6498fd4-zrpxf" Nov 1 00:13:02.542099 kubelet[2832]: I1101 00:13:02.541858 2832 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/b4871652-e36f-45a1-ab7f-b8d5032703a6-whisker-ca-bundle\") pod \"whisker-58c6498fd4-zrpxf\" (UID: \"b4871652-e36f-45a1-ab7f-b8d5032703a6\") " pod="calico-system/whisker-58c6498fd4-zrpxf" Nov 1 00:13:02.542099 kubelet[2832]: I1101 00:13:02.541945 2832 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-2m6c6\" (UniqueName: \"kubernetes.io/projected/b4871652-e36f-45a1-ab7f-b8d5032703a6-kube-api-access-2m6c6\") pod \"whisker-58c6498fd4-zrpxf\" (UID: \"b4871652-e36f-45a1-ab7f-b8d5032703a6\") " pod="calico-system/whisker-58c6498fd4-zrpxf" Nov 1 00:13:02.624953 (udev-worker)[3982]: Network interface NamePolicy= disabled on kernel command line. Nov 1 00:13:02.635192 systemd-networkd[1539]: cali7204fe04d62: Link UP Nov 1 00:13:02.644022 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Nov 1 00:13:02.644149 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali7204fe04d62: link becomes ready Nov 1 00:13:02.645205 systemd-networkd[1539]: cali7204fe04d62: Gained carrier Nov 1 00:13:02.699948 env[1820]: 2025-11-01 00:13:02.350 [INFO][4086] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Nov 1 00:13:02.699948 env[1820]: 2025-11-01 00:13:02.395 [INFO][4086] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--24--47-k8s-csi--node--driver--7qfc7-eth0 csi-node-driver- calico-system 2c016bf7-bf29-4156-a534-853af2a9ae4f 986 0 2025-11-01 00:12:37 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:857b56db8f k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s ip-172-31-24-47 csi-node-driver-7qfc7 eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] cali7204fe04d62 [] [] }} ContainerID="95508ff2a4846f20f0707106d85a8ecdb69b544eb06c072d8a0ece3c636675a6" Namespace="calico-system" Pod="csi-node-driver-7qfc7" WorkloadEndpoint="ip--172--31--24--47-k8s-csi--node--driver--7qfc7-" Nov 1 00:13:02.699948 env[1820]: 2025-11-01 00:13:02.395 [INFO][4086] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="95508ff2a4846f20f0707106d85a8ecdb69b544eb06c072d8a0ece3c636675a6" Namespace="calico-system" Pod="csi-node-driver-7qfc7" WorkloadEndpoint="ip--172--31--24--47-k8s-csi--node--driver--7qfc7-eth0" Nov 1 00:13:02.699948 env[1820]: 2025-11-01 00:13:02.507 [INFO][4098] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="95508ff2a4846f20f0707106d85a8ecdb69b544eb06c072d8a0ece3c636675a6" HandleID="k8s-pod-network.95508ff2a4846f20f0707106d85a8ecdb69b544eb06c072d8a0ece3c636675a6" Workload="ip--172--31--24--47-k8s-csi--node--driver--7qfc7-eth0" Nov 1 00:13:02.699948 env[1820]: 2025-11-01 00:13:02.507 [INFO][4098] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="95508ff2a4846f20f0707106d85a8ecdb69b544eb06c072d8a0ece3c636675a6" HandleID="k8s-pod-network.95508ff2a4846f20f0707106d85a8ecdb69b544eb06c072d8a0ece3c636675a6" Workload="ip--172--31--24--47-k8s-csi--node--driver--7qfc7-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002d35a0), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-24-47", "pod":"csi-node-driver-7qfc7", "timestamp":"2025-11-01 00:13:02.507260473 +0000 UTC"}, Hostname:"ip-172-31-24-47", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:13:02.699948 env[1820]: 2025-11-01 00:13:02.507 [INFO][4098] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:13:02.699948 env[1820]: 2025-11-01 00:13:02.507 [INFO][4098] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:13:02.699948 env[1820]: 2025-11-01 00:13:02.508 [INFO][4098] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-24-47' Nov 1 00:13:02.699948 env[1820]: 2025-11-01 00:13:02.539 [INFO][4098] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.95508ff2a4846f20f0707106d85a8ecdb69b544eb06c072d8a0ece3c636675a6" host="ip-172-31-24-47" Nov 1 00:13:02.699948 env[1820]: 2025-11-01 00:13:02.563 [INFO][4098] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-24-47" Nov 1 00:13:02.699948 env[1820]: 2025-11-01 00:13:02.571 [INFO][4098] ipam/ipam.go 511: Trying affinity for 192.168.49.64/26 host="ip-172-31-24-47" Nov 1 00:13:02.699948 env[1820]: 2025-11-01 00:13:02.575 [INFO][4098] ipam/ipam.go 158: Attempting to load block cidr=192.168.49.64/26 host="ip-172-31-24-47" Nov 1 00:13:02.699948 env[1820]: 2025-11-01 00:13:02.579 [INFO][4098] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.49.64/26 host="ip-172-31-24-47" Nov 1 00:13:02.699948 env[1820]: 2025-11-01 00:13:02.579 [INFO][4098] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.49.64/26 handle="k8s-pod-network.95508ff2a4846f20f0707106d85a8ecdb69b544eb06c072d8a0ece3c636675a6" host="ip-172-31-24-47" Nov 1 00:13:02.699948 env[1820]: 2025-11-01 00:13:02.582 [INFO][4098] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.95508ff2a4846f20f0707106d85a8ecdb69b544eb06c072d8a0ece3c636675a6 Nov 1 00:13:02.699948 env[1820]: 2025-11-01 00:13:02.592 [INFO][4098] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.49.64/26 handle="k8s-pod-network.95508ff2a4846f20f0707106d85a8ecdb69b544eb06c072d8a0ece3c636675a6" host="ip-172-31-24-47" Nov 1 00:13:02.699948 env[1820]: 2025-11-01 00:13:02.606 [INFO][4098] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.49.65/26] block=192.168.49.64/26 handle="k8s-pod-network.95508ff2a4846f20f0707106d85a8ecdb69b544eb06c072d8a0ece3c636675a6" host="ip-172-31-24-47" Nov 1 00:13:02.699948 env[1820]: 2025-11-01 00:13:02.606 [INFO][4098] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.49.65/26] handle="k8s-pod-network.95508ff2a4846f20f0707106d85a8ecdb69b544eb06c072d8a0ece3c636675a6" host="ip-172-31-24-47" Nov 1 00:13:02.699948 env[1820]: 2025-11-01 00:13:02.606 [INFO][4098] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:13:02.699948 env[1820]: 2025-11-01 00:13:02.606 [INFO][4098] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.49.65/26] IPv6=[] ContainerID="95508ff2a4846f20f0707106d85a8ecdb69b544eb06c072d8a0ece3c636675a6" HandleID="k8s-pod-network.95508ff2a4846f20f0707106d85a8ecdb69b544eb06c072d8a0ece3c636675a6" Workload="ip--172--31--24--47-k8s-csi--node--driver--7qfc7-eth0" Nov 1 00:13:02.701579 env[1820]: 2025-11-01 00:13:02.609 [INFO][4086] cni-plugin/k8s.go 418: Populated endpoint ContainerID="95508ff2a4846f20f0707106d85a8ecdb69b544eb06c072d8a0ece3c636675a6" Namespace="calico-system" Pod="csi-node-driver-7qfc7" WorkloadEndpoint="ip--172--31--24--47-k8s-csi--node--driver--7qfc7-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--24--47-k8s-csi--node--driver--7qfc7-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"2c016bf7-bf29-4156-a534-853af2a9ae4f", ResourceVersion:"986", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 12, 37, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-24-47", ContainerID:"", Pod:"csi-node-driver-7qfc7", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.49.65/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali7204fe04d62", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:13:02.701579 env[1820]: 2025-11-01 00:13:02.610 [INFO][4086] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.49.65/32] ContainerID="95508ff2a4846f20f0707106d85a8ecdb69b544eb06c072d8a0ece3c636675a6" Namespace="calico-system" Pod="csi-node-driver-7qfc7" WorkloadEndpoint="ip--172--31--24--47-k8s-csi--node--driver--7qfc7-eth0" Nov 1 00:13:02.701579 env[1820]: 2025-11-01 00:13:02.610 [INFO][4086] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali7204fe04d62 ContainerID="95508ff2a4846f20f0707106d85a8ecdb69b544eb06c072d8a0ece3c636675a6" Namespace="calico-system" Pod="csi-node-driver-7qfc7" WorkloadEndpoint="ip--172--31--24--47-k8s-csi--node--driver--7qfc7-eth0" Nov 1 00:13:02.701579 env[1820]: 2025-11-01 00:13:02.658 [INFO][4086] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="95508ff2a4846f20f0707106d85a8ecdb69b544eb06c072d8a0ece3c636675a6" Namespace="calico-system" Pod="csi-node-driver-7qfc7" WorkloadEndpoint="ip--172--31--24--47-k8s-csi--node--driver--7qfc7-eth0" Nov 1 00:13:02.701579 env[1820]: 2025-11-01 00:13:02.659 [INFO][4086] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="95508ff2a4846f20f0707106d85a8ecdb69b544eb06c072d8a0ece3c636675a6" Namespace="calico-system" Pod="csi-node-driver-7qfc7" WorkloadEndpoint="ip--172--31--24--47-k8s-csi--node--driver--7qfc7-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--24--47-k8s-csi--node--driver--7qfc7-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"2c016bf7-bf29-4156-a534-853af2a9ae4f", ResourceVersion:"986", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 12, 37, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-24-47", ContainerID:"95508ff2a4846f20f0707106d85a8ecdb69b544eb06c072d8a0ece3c636675a6", Pod:"csi-node-driver-7qfc7", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.49.65/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali7204fe04d62", MAC:"7a:52:a4:c8:02:d0", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:13:02.701579 env[1820]: 2025-11-01 00:13:02.692 [INFO][4086] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="95508ff2a4846f20f0707106d85a8ecdb69b544eb06c072d8a0ece3c636675a6" Namespace="calico-system" Pod="csi-node-driver-7qfc7" WorkloadEndpoint="ip--172--31--24--47-k8s-csi--node--driver--7qfc7-eth0" Nov 1 00:13:02.721371 env[1820]: time="2025-11-01T00:13:02.721172259Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:13:02.721371 env[1820]: time="2025-11-01T00:13:02.721251532Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:13:02.721371 env[1820]: time="2025-11-01T00:13:02.721278940Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:13:02.722088 env[1820]: time="2025-11-01T00:13:02.721917211Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/95508ff2a4846f20f0707106d85a8ecdb69b544eb06c072d8a0ece3c636675a6 pid=4122 runtime=io.containerd.runc.v2 Nov 1 00:13:02.744922 systemd[1]: Started cri-containerd-95508ff2a4846f20f0707106d85a8ecdb69b544eb06c072d8a0ece3c636675a6.scope. Nov 1 00:13:02.788000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:02.788000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:02.788000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:02.788000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:02.788000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:02.788000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:02.788000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:02.788000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:02.788000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:02.788000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:02.788000 audit: BPF prog-id=142 op=LOAD Nov 1 00:13:02.790000 audit[4131]: AVC avc: denied { bpf } for pid=4131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:02.790000 audit[4131]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4122 pid=4131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:02.790000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935353038666632613438343666323066303730373130366438356138 Nov 1 00:13:02.791000 audit[4131]: AVC avc: denied { perfmon } for pid=4131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:02.791000 audit[4131]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4122 pid=4131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:02.791000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935353038666632613438343666323066303730373130366438356138 Nov 1 00:13:02.791000 audit[4131]: AVC avc: denied { bpf } for pid=4131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:02.791000 audit[4131]: AVC avc: denied { bpf } for pid=4131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:02.791000 audit[4131]: AVC avc: denied { bpf } for pid=4131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:02.791000 audit[4131]: AVC avc: denied { perfmon } for pid=4131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:02.791000 audit[4131]: AVC avc: denied { perfmon } for pid=4131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:02.791000 audit[4131]: AVC avc: denied { perfmon } for pid=4131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:02.791000 audit[4131]: AVC avc: denied { perfmon } for pid=4131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:02.791000 audit[4131]: AVC avc: denied { perfmon } for pid=4131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:02.791000 audit[4131]: AVC avc: denied { bpf } for pid=4131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:02.791000 audit[4131]: AVC avc: denied { bpf } for pid=4131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:02.791000 audit: BPF prog-id=143 op=LOAD Nov 1 00:13:02.791000 audit[4131]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4122 pid=4131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:02.791000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935353038666632613438343666323066303730373130366438356138 Nov 1 00:13:02.793000 audit[4131]: AVC avc: denied { bpf } for pid=4131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:02.793000 audit[4131]: AVC avc: denied { bpf } for pid=4131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:02.793000 audit[4131]: AVC avc: denied { perfmon } for pid=4131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:02.793000 audit[4131]: AVC avc: denied { perfmon } for pid=4131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:02.793000 audit[4131]: AVC avc: denied { perfmon } for pid=4131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:02.793000 audit[4131]: AVC avc: denied { perfmon } for pid=4131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:02.793000 audit[4131]: AVC avc: denied { perfmon } for pid=4131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:02.793000 audit[4131]: AVC avc: denied { bpf } for pid=4131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:02.793000 audit[4131]: AVC avc: denied { bpf } for pid=4131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:02.793000 audit: BPF prog-id=144 op=LOAD Nov 1 00:13:02.793000 audit[4131]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4122 pid=4131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:02.793000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935353038666632613438343666323066303730373130366438356138 Nov 1 00:13:02.795000 audit: BPF prog-id=144 op=UNLOAD Nov 1 00:13:02.805320 env[1820]: time="2025-11-01T00:13:02.805262994Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-58c6498fd4-zrpxf,Uid:b4871652-e36f-45a1-ab7f-b8d5032703a6,Namespace:calico-system,Attempt:0,}" Nov 1 00:13:02.805000 audit: BPF prog-id=143 op=UNLOAD Nov 1 00:13:02.808000 audit[4131]: AVC avc: denied { bpf } for pid=4131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:02.808000 audit[4131]: AVC avc: denied { bpf } for pid=4131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:02.808000 audit[4131]: AVC avc: denied { bpf } for pid=4131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:02.808000 audit[4131]: AVC avc: denied { perfmon } for pid=4131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:02.808000 audit[4131]: AVC avc: denied { perfmon } for pid=4131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:02.808000 audit[4131]: AVC avc: denied { perfmon } for pid=4131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:02.808000 audit[4131]: AVC avc: denied { perfmon } for pid=4131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:02.808000 audit[4131]: AVC avc: denied { perfmon } for pid=4131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:02.808000 audit[4131]: AVC avc: denied { bpf } for pid=4131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:02.808000 audit[4131]: AVC avc: denied { bpf } for pid=4131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:02.808000 audit: BPF prog-id=145 op=LOAD Nov 1 00:13:02.808000 audit[4131]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4122 pid=4131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:02.808000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935353038666632613438343666323066303730373130366438356138 Nov 1 00:13:02.923795 env[1820]: time="2025-11-01T00:13:02.923713768Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-7qfc7,Uid:2c016bf7-bf29-4156-a534-853af2a9ae4f,Namespace:calico-system,Attempt:1,} returns sandbox id \"95508ff2a4846f20f0707106d85a8ecdb69b544eb06c072d8a0ece3c636675a6\"" Nov 1 00:13:02.929356 env[1820]: time="2025-11-01T00:13:02.929226514Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Nov 1 00:13:02.932643 env[1820]: time="2025-11-01T00:13:02.932586940Z" level=info msg="StopPodSandbox for \"b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308\"" Nov 1 00:13:03.188751 env[1820]: time="2025-11-01T00:13:03.188683816Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:13:03.192045 env[1820]: time="2025-11-01T00:13:03.191877190Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Nov 1 00:13:03.195208 kubelet[2832]: E1101 00:13:03.195133 2832 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:13:03.195467 kubelet[2832]: E1101 00:13:03.195215 2832 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:13:03.195580 kubelet[2832]: E1101 00:13:03.195437 2832 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.30.4,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-rj9qj,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-7qfc7_calico-system(2c016bf7-bf29-4156-a534-853af2a9ae4f): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Nov 1 00:13:03.198765 env[1820]: time="2025-11-01T00:13:03.198707267Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Nov 1 00:13:03.257929 systemd-networkd[1539]: cali5dd34f1a838: Link UP Nov 1 00:13:03.262265 systemd-networkd[1539]: cali5dd34f1a838: Gained carrier Nov 1 00:13:03.263638 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali5dd34f1a838: link becomes ready Nov 1 00:13:03.332133 env[1820]: 2025-11-01 00:13:02.950 [INFO][4149] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Nov 1 00:13:03.332133 env[1820]: 2025-11-01 00:13:02.983 [INFO][4149] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--24--47-k8s-whisker--58c6498fd4--zrpxf-eth0 whisker-58c6498fd4- calico-system b4871652-e36f-45a1-ab7f-b8d5032703a6 1005 0 2025-11-01 00:13:02 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:58c6498fd4 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s ip-172-31-24-47 whisker-58c6498fd4-zrpxf eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] cali5dd34f1a838 [] [] }} ContainerID="7d04ab3e8ba43f2426891667370a4b46afdc1b1cd6794c759b6595e9cdf907d5" Namespace="calico-system" Pod="whisker-58c6498fd4-zrpxf" WorkloadEndpoint="ip--172--31--24--47-k8s-whisker--58c6498fd4--zrpxf-" Nov 1 00:13:03.332133 env[1820]: 2025-11-01 00:13:02.983 [INFO][4149] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="7d04ab3e8ba43f2426891667370a4b46afdc1b1cd6794c759b6595e9cdf907d5" Namespace="calico-system" Pod="whisker-58c6498fd4-zrpxf" WorkloadEndpoint="ip--172--31--24--47-k8s-whisker--58c6498fd4--zrpxf-eth0" Nov 1 00:13:03.332133 env[1820]: 2025-11-01 00:13:03.090 [INFO][4184] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="7d04ab3e8ba43f2426891667370a4b46afdc1b1cd6794c759b6595e9cdf907d5" HandleID="k8s-pod-network.7d04ab3e8ba43f2426891667370a4b46afdc1b1cd6794c759b6595e9cdf907d5" Workload="ip--172--31--24--47-k8s-whisker--58c6498fd4--zrpxf-eth0" Nov 1 00:13:03.332133 env[1820]: 2025-11-01 00:13:03.099 [INFO][4184] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="7d04ab3e8ba43f2426891667370a4b46afdc1b1cd6794c759b6595e9cdf907d5" HandleID="k8s-pod-network.7d04ab3e8ba43f2426891667370a4b46afdc1b1cd6794c759b6595e9cdf907d5" Workload="ip--172--31--24--47-k8s-whisker--58c6498fd4--zrpxf-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002d3710), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-24-47", "pod":"whisker-58c6498fd4-zrpxf", "timestamp":"2025-11-01 00:13:03.090621219 +0000 UTC"}, Hostname:"ip-172-31-24-47", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:13:03.332133 env[1820]: 2025-11-01 00:13:03.101 [INFO][4184] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:13:03.332133 env[1820]: 2025-11-01 00:13:03.102 [INFO][4184] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:13:03.332133 env[1820]: 2025-11-01 00:13:03.105 [INFO][4184] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-24-47' Nov 1 00:13:03.332133 env[1820]: 2025-11-01 00:13:03.148 [INFO][4184] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.7d04ab3e8ba43f2426891667370a4b46afdc1b1cd6794c759b6595e9cdf907d5" host="ip-172-31-24-47" Nov 1 00:13:03.332133 env[1820]: 2025-11-01 00:13:03.162 [INFO][4184] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-24-47" Nov 1 00:13:03.332133 env[1820]: 2025-11-01 00:13:03.178 [INFO][4184] ipam/ipam.go 511: Trying affinity for 192.168.49.64/26 host="ip-172-31-24-47" Nov 1 00:13:03.332133 env[1820]: 2025-11-01 00:13:03.184 [INFO][4184] ipam/ipam.go 158: Attempting to load block cidr=192.168.49.64/26 host="ip-172-31-24-47" Nov 1 00:13:03.332133 env[1820]: 2025-11-01 00:13:03.192 [INFO][4184] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.49.64/26 host="ip-172-31-24-47" Nov 1 00:13:03.332133 env[1820]: 2025-11-01 00:13:03.192 [INFO][4184] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.49.64/26 handle="k8s-pod-network.7d04ab3e8ba43f2426891667370a4b46afdc1b1cd6794c759b6595e9cdf907d5" host="ip-172-31-24-47" Nov 1 00:13:03.332133 env[1820]: 2025-11-01 00:13:03.199 [INFO][4184] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.7d04ab3e8ba43f2426891667370a4b46afdc1b1cd6794c759b6595e9cdf907d5 Nov 1 00:13:03.332133 env[1820]: 2025-11-01 00:13:03.225 [INFO][4184] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.49.64/26 handle="k8s-pod-network.7d04ab3e8ba43f2426891667370a4b46afdc1b1cd6794c759b6595e9cdf907d5" host="ip-172-31-24-47" Nov 1 00:13:03.332133 env[1820]: 2025-11-01 00:13:03.239 [INFO][4184] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.49.66/26] block=192.168.49.64/26 handle="k8s-pod-network.7d04ab3e8ba43f2426891667370a4b46afdc1b1cd6794c759b6595e9cdf907d5" host="ip-172-31-24-47" Nov 1 00:13:03.332133 env[1820]: 2025-11-01 00:13:03.240 [INFO][4184] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.49.66/26] handle="k8s-pod-network.7d04ab3e8ba43f2426891667370a4b46afdc1b1cd6794c759b6595e9cdf907d5" host="ip-172-31-24-47" Nov 1 00:13:03.332133 env[1820]: 2025-11-01 00:13:03.240 [INFO][4184] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:13:03.332133 env[1820]: 2025-11-01 00:13:03.240 [INFO][4184] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.49.66/26] IPv6=[] ContainerID="7d04ab3e8ba43f2426891667370a4b46afdc1b1cd6794c759b6595e9cdf907d5" HandleID="k8s-pod-network.7d04ab3e8ba43f2426891667370a4b46afdc1b1cd6794c759b6595e9cdf907d5" Workload="ip--172--31--24--47-k8s-whisker--58c6498fd4--zrpxf-eth0" Nov 1 00:13:03.333579 env[1820]: 2025-11-01 00:13:03.243 [INFO][4149] cni-plugin/k8s.go 418: Populated endpoint ContainerID="7d04ab3e8ba43f2426891667370a4b46afdc1b1cd6794c759b6595e9cdf907d5" Namespace="calico-system" Pod="whisker-58c6498fd4-zrpxf" WorkloadEndpoint="ip--172--31--24--47-k8s-whisker--58c6498fd4--zrpxf-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--24--47-k8s-whisker--58c6498fd4--zrpxf-eth0", GenerateName:"whisker-58c6498fd4-", Namespace:"calico-system", SelfLink:"", UID:"b4871652-e36f-45a1-ab7f-b8d5032703a6", ResourceVersion:"1005", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 13, 2, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"58c6498fd4", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-24-47", ContainerID:"", Pod:"whisker-58c6498fd4-zrpxf", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.49.66/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali5dd34f1a838", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:13:03.333579 env[1820]: 2025-11-01 00:13:03.243 [INFO][4149] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.49.66/32] ContainerID="7d04ab3e8ba43f2426891667370a4b46afdc1b1cd6794c759b6595e9cdf907d5" Namespace="calico-system" Pod="whisker-58c6498fd4-zrpxf" WorkloadEndpoint="ip--172--31--24--47-k8s-whisker--58c6498fd4--zrpxf-eth0" Nov 1 00:13:03.333579 env[1820]: 2025-11-01 00:13:03.243 [INFO][4149] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali5dd34f1a838 ContainerID="7d04ab3e8ba43f2426891667370a4b46afdc1b1cd6794c759b6595e9cdf907d5" Namespace="calico-system" Pod="whisker-58c6498fd4-zrpxf" WorkloadEndpoint="ip--172--31--24--47-k8s-whisker--58c6498fd4--zrpxf-eth0" Nov 1 00:13:03.333579 env[1820]: 2025-11-01 00:13:03.264 [INFO][4149] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="7d04ab3e8ba43f2426891667370a4b46afdc1b1cd6794c759b6595e9cdf907d5" Namespace="calico-system" Pod="whisker-58c6498fd4-zrpxf" WorkloadEndpoint="ip--172--31--24--47-k8s-whisker--58c6498fd4--zrpxf-eth0" Nov 1 00:13:03.333579 env[1820]: 2025-11-01 00:13:03.266 [INFO][4149] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="7d04ab3e8ba43f2426891667370a4b46afdc1b1cd6794c759b6595e9cdf907d5" Namespace="calico-system" Pod="whisker-58c6498fd4-zrpxf" WorkloadEndpoint="ip--172--31--24--47-k8s-whisker--58c6498fd4--zrpxf-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--24--47-k8s-whisker--58c6498fd4--zrpxf-eth0", GenerateName:"whisker-58c6498fd4-", Namespace:"calico-system", SelfLink:"", UID:"b4871652-e36f-45a1-ab7f-b8d5032703a6", ResourceVersion:"1005", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 13, 2, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"58c6498fd4", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-24-47", ContainerID:"7d04ab3e8ba43f2426891667370a4b46afdc1b1cd6794c759b6595e9cdf907d5", Pod:"whisker-58c6498fd4-zrpxf", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.49.66/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali5dd34f1a838", MAC:"c2:2f:31:e2:88:a0", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:13:03.333579 env[1820]: 2025-11-01 00:13:03.329 [INFO][4149] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="7d04ab3e8ba43f2426891667370a4b46afdc1b1cd6794c759b6595e9cdf907d5" Namespace="calico-system" Pod="whisker-58c6498fd4-zrpxf" WorkloadEndpoint="ip--172--31--24--47-k8s-whisker--58c6498fd4--zrpxf-eth0" Nov 1 00:13:03.357774 env[1820]: 2025-11-01 00:13:03.075 [INFO][4175] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308" Nov 1 00:13:03.357774 env[1820]: 2025-11-01 00:13:03.076 [INFO][4175] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308" iface="eth0" netns="/var/run/netns/cni-3b28789d-027c-c672-0e01-52f62fc4ffad" Nov 1 00:13:03.357774 env[1820]: 2025-11-01 00:13:03.076 [INFO][4175] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308" iface="eth0" netns="/var/run/netns/cni-3b28789d-027c-c672-0e01-52f62fc4ffad" Nov 1 00:13:03.357774 env[1820]: 2025-11-01 00:13:03.076 [INFO][4175] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308" iface="eth0" netns="/var/run/netns/cni-3b28789d-027c-c672-0e01-52f62fc4ffad" Nov 1 00:13:03.357774 env[1820]: 2025-11-01 00:13:03.076 [INFO][4175] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308" Nov 1 00:13:03.357774 env[1820]: 2025-11-01 00:13:03.077 [INFO][4175] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308" Nov 1 00:13:03.357774 env[1820]: 2025-11-01 00:13:03.211 [INFO][4201] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308" HandleID="k8s-pod-network.b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308" Workload="ip--172--31--24--47-k8s-calico--apiserver--789667c9c4--gltc6-eth0" Nov 1 00:13:03.357774 env[1820]: 2025-11-01 00:13:03.212 [INFO][4201] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:13:03.357774 env[1820]: 2025-11-01 00:13:03.243 [INFO][4201] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:13:03.357774 env[1820]: 2025-11-01 00:13:03.331 [WARNING][4201] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308" HandleID="k8s-pod-network.b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308" Workload="ip--172--31--24--47-k8s-calico--apiserver--789667c9c4--gltc6-eth0" Nov 1 00:13:03.357774 env[1820]: 2025-11-01 00:13:03.334 [INFO][4201] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308" HandleID="k8s-pod-network.b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308" Workload="ip--172--31--24--47-k8s-calico--apiserver--789667c9c4--gltc6-eth0" Nov 1 00:13:03.357774 env[1820]: 2025-11-01 00:13:03.344 [INFO][4201] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:13:03.357774 env[1820]: 2025-11-01 00:13:03.350 [INFO][4175] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308" Nov 1 00:13:03.364248 systemd[1]: run-netns-cni\x2d3b28789d\x2d027c\x2dc672\x2d0e01\x2d52f62fc4ffad.mount: Deactivated successfully. Nov 1 00:13:03.367539 env[1820]: time="2025-11-01T00:13:03.367477002Z" level=info msg="TearDown network for sandbox \"b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308\" successfully" Nov 1 00:13:03.367713 env[1820]: time="2025-11-01T00:13:03.367679503Z" level=info msg="StopPodSandbox for \"b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308\" returns successfully" Nov 1 00:13:03.374146 env[1820]: time="2025-11-01T00:13:03.374084131Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-789667c9c4-gltc6,Uid:de7ca9fd-9d9e-4866-9cab-137a354c3eda,Namespace:calico-apiserver,Attempt:1,}" Nov 1 00:13:03.391041 env[1820]: time="2025-11-01T00:13:03.390789399Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:13:03.391041 env[1820]: time="2025-11-01T00:13:03.390869775Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:13:03.391041 env[1820]: time="2025-11-01T00:13:03.390897171Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:13:03.393376 env[1820]: time="2025-11-01T00:13:03.393265192Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/7d04ab3e8ba43f2426891667370a4b46afdc1b1cd6794c759b6595e9cdf907d5 pid=4245 runtime=io.containerd.runc.v2 Nov 1 00:13:03.464524 env[1820]: time="2025-11-01T00:13:03.464353884Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:13:03.470737 env[1820]: time="2025-11-01T00:13:03.470654207Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Nov 1 00:13:03.476766 kubelet[2832]: E1101 00:13:03.473772 2832 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:13:03.476766 kubelet[2832]: E1101 00:13:03.473873 2832 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:13:03.476766 kubelet[2832]: E1101 00:13:03.474187 2832 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-rj9qj,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-7qfc7_calico-system(2c016bf7-bf29-4156-a534-853af2a9ae4f): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Nov 1 00:13:03.476766 kubelet[2832]: E1101 00:13:03.476534 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-7qfc7" podUID="2c016bf7-bf29-4156-a534-853af2a9ae4f" Nov 1 00:13:03.485263 systemd[1]: Started cri-containerd-7d04ab3e8ba43f2426891667370a4b46afdc1b1cd6794c759b6595e9cdf907d5.scope. Nov 1 00:13:03.528498 kernel: kauditd_printk_skb: 125 callbacks suppressed Nov 1 00:13:03.528675 kernel: audit: type=1400 audit(1761955983.517:1063): avc: denied { write } for pid=4275 comm="tee" name="fd" dev="proc" ino=22086 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:13:03.517000 audit[4275]: AVC avc: denied { write } for pid=4275 comm="tee" name="fd" dev="proc" ino=22086 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:13:03.543762 kernel: audit: type=1300 audit(1761955983.517:1063): arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc4b297d7 a2=241 a3=1b6 items=1 ppid=4214 pid=4275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:03.517000 audit[4275]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc4b297d7 a2=241 a3=1b6 items=1 ppid=4214 pid=4275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:03.517000 audit: CWD cwd="/etc/service/enabled/cni/log" Nov 1 00:13:03.517000 audit: PATH item=0 name="/dev/fd/63" inode=22077 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:13:03.557467 kernel: audit: type=1307 audit(1761955983.517:1063): cwd="/etc/service/enabled/cni/log" Nov 1 00:13:03.557642 kernel: audit: type=1302 audit(1761955983.517:1063): item=0 name="/dev/fd/63" inode=22077 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:13:03.517000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:13:03.566119 kernel: audit: type=1327 audit(1761955983.517:1063): proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:13:03.688652 kernel: audit: type=1400 audit(1761955983.671:1064): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:03.688779 kernel: audit: type=1400 audit(1761955983.671:1065): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:03.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:03.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:03.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:03.699439 kernel: audit: type=1400 audit(1761955983.671:1066): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:03.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:03.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:03.753536 kernel: audit: type=1400 audit(1761955983.671:1067): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:03.753699 kernel: audit: type=1400 audit(1761955983.671:1068): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:03.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:03.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:03.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:03.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:03.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:03.671000 audit: BPF prog-id=146 op=LOAD Nov 1 00:13:03.688000 audit[4254]: AVC avc: denied { bpf } for pid=4254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:03.688000 audit[4254]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4245 pid=4254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:03.688000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764303461623365386261343366323432363839313636373337306134 Nov 1 00:13:03.689000 audit[4254]: AVC avc: denied { perfmon } for pid=4254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:03.689000 audit[4254]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4245 pid=4254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:03.689000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764303461623365386261343366323432363839313636373337306134 Nov 1 00:13:03.689000 audit[4254]: AVC avc: denied { bpf } for pid=4254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:03.689000 audit[4254]: AVC avc: denied { bpf } for pid=4254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:03.689000 audit[4254]: AVC avc: denied { bpf } for pid=4254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:03.689000 audit[4254]: AVC avc: denied { perfmon } for pid=4254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:03.689000 audit[4254]: AVC avc: denied { perfmon } for pid=4254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:03.689000 audit[4254]: AVC avc: denied { perfmon } for pid=4254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:03.689000 audit[4254]: AVC avc: denied { perfmon } for pid=4254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:03.689000 audit[4254]: AVC avc: denied { perfmon } for pid=4254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:03.689000 audit[4254]: AVC avc: denied { bpf } for pid=4254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:03.689000 audit[4254]: AVC avc: denied { bpf } for pid=4254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:03.689000 audit: BPF prog-id=147 op=LOAD Nov 1 00:13:03.689000 audit[4254]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4245 pid=4254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:03.689000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764303461623365386261343366323432363839313636373337306134 Nov 1 00:13:03.689000 audit[4254]: AVC avc: denied { bpf } for pid=4254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:03.689000 audit[4254]: AVC avc: denied { bpf } for pid=4254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:03.689000 audit[4254]: AVC avc: denied { perfmon } for pid=4254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:03.689000 audit[4254]: AVC avc: denied { perfmon } for pid=4254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:03.689000 audit[4254]: AVC avc: denied { perfmon } for pid=4254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:03.689000 audit[4254]: AVC avc: denied { perfmon } for pid=4254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:03.689000 audit[4254]: AVC avc: denied { perfmon } for pid=4254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:03.689000 audit[4254]: AVC avc: denied { bpf } for pid=4254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:03.689000 audit[4254]: AVC avc: denied { bpf } for pid=4254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:03.689000 audit: BPF prog-id=148 op=LOAD Nov 1 00:13:03.689000 audit[4254]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4245 pid=4254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:03.689000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764303461623365386261343366323432363839313636373337306134 Nov 1 00:13:03.689000 audit: BPF prog-id=148 op=UNLOAD Nov 1 00:13:03.689000 audit: BPF prog-id=147 op=UNLOAD Nov 1 00:13:03.689000 audit[4254]: AVC avc: denied { bpf } for pid=4254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:03.689000 audit[4254]: AVC avc: denied { bpf } for pid=4254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:03.689000 audit[4254]: AVC avc: denied { bpf } for pid=4254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:03.689000 audit[4254]: AVC avc: denied { perfmon } for pid=4254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:03.689000 audit[4254]: AVC avc: denied { perfmon } for pid=4254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:03.689000 audit[4254]: AVC avc: denied { perfmon } for pid=4254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:03.689000 audit[4254]: AVC avc: denied { perfmon } for pid=4254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:03.689000 audit[4254]: AVC avc: denied { perfmon } for pid=4254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:03.689000 audit[4254]: AVC avc: denied { bpf } for pid=4254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:03.689000 audit[4254]: AVC avc: denied { bpf } for pid=4254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:03.689000 audit: BPF prog-id=149 op=LOAD Nov 1 00:13:03.689000 audit[4254]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4245 pid=4254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:03.689000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764303461623365386261343366323432363839313636373337306134 Nov 1 00:13:03.762000 audit[4287]: AVC avc: denied { write } for pid=4287 comm="tee" name="fd" dev="proc" ino=22954 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:13:03.762000 audit[4287]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffffa8607d6 a2=241 a3=1b6 items=1 ppid=4198 pid=4287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:03.762000 audit: CWD cwd="/etc/service/enabled/bird/log" Nov 1 00:13:03.762000 audit: PATH item=0 name="/dev/fd/63" inode=22936 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:13:03.762000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:13:03.880270 systemd-networkd[1539]: cali8b02372fdd6: Link UP Nov 1 00:13:03.897183 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Nov 1 00:13:03.897337 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali8b02372fdd6: link becomes ready Nov 1 00:13:03.897424 systemd-networkd[1539]: cali8b02372fdd6: Gained carrier Nov 1 00:13:03.915000 audit[4292]: AVC avc: denied { write } for pid=4292 comm="tee" name="fd" dev="proc" ino=22988 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:13:03.915000 audit[4292]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffffa3c7d5 a2=241 a3=1b6 items=1 ppid=4220 pid=4292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:03.915000 audit: CWD cwd="/etc/service/enabled/felix/log" Nov 1 00:13:03.915000 audit: PATH item=0 name="/dev/fd/63" inode=22102 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:13:03.915000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:13:03.954500 env[1820]: 2025-11-01 00:13:03.595 [INFO][4263] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Nov 1 00:13:03.954500 env[1820]: 2025-11-01 00:13:03.630 [INFO][4263] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--24--47-k8s-calico--apiserver--789667c9c4--gltc6-eth0 calico-apiserver-789667c9c4- calico-apiserver de7ca9fd-9d9e-4866-9cab-137a354c3eda 1015 0 2025-11-01 00:12:27 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:789667c9c4 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ip-172-31-24-47 calico-apiserver-789667c9c4-gltc6 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali8b02372fdd6 [] [] }} ContainerID="f688505ab2e83e29a5ef4511d107b19bfd38cfe87de4d75441e13bf3dfbdfc6f" Namespace="calico-apiserver" Pod="calico-apiserver-789667c9c4-gltc6" WorkloadEndpoint="ip--172--31--24--47-k8s-calico--apiserver--789667c9c4--gltc6-" Nov 1 00:13:03.954500 env[1820]: 2025-11-01 00:13:03.630 [INFO][4263] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="f688505ab2e83e29a5ef4511d107b19bfd38cfe87de4d75441e13bf3dfbdfc6f" Namespace="calico-apiserver" Pod="calico-apiserver-789667c9c4-gltc6" WorkloadEndpoint="ip--172--31--24--47-k8s-calico--apiserver--789667c9c4--gltc6-eth0" Nov 1 00:13:03.954500 env[1820]: 2025-11-01 00:13:03.774 [INFO][4302] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="f688505ab2e83e29a5ef4511d107b19bfd38cfe87de4d75441e13bf3dfbdfc6f" HandleID="k8s-pod-network.f688505ab2e83e29a5ef4511d107b19bfd38cfe87de4d75441e13bf3dfbdfc6f" Workload="ip--172--31--24--47-k8s-calico--apiserver--789667c9c4--gltc6-eth0" Nov 1 00:13:03.954500 env[1820]: 2025-11-01 00:13:03.775 [INFO][4302] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="f688505ab2e83e29a5ef4511d107b19bfd38cfe87de4d75441e13bf3dfbdfc6f" HandleID="k8s-pod-network.f688505ab2e83e29a5ef4511d107b19bfd38cfe87de4d75441e13bf3dfbdfc6f" Workload="ip--172--31--24--47-k8s-calico--apiserver--789667c9c4--gltc6-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002d2fe0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ip-172-31-24-47", "pod":"calico-apiserver-789667c9c4-gltc6", "timestamp":"2025-11-01 00:13:03.774865209 +0000 UTC"}, Hostname:"ip-172-31-24-47", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:13:03.954500 env[1820]: 2025-11-01 00:13:03.775 [INFO][4302] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:13:03.954500 env[1820]: 2025-11-01 00:13:03.775 [INFO][4302] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:13:03.954500 env[1820]: 2025-11-01 00:13:03.775 [INFO][4302] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-24-47' Nov 1 00:13:03.954500 env[1820]: 2025-11-01 00:13:03.795 [INFO][4302] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.f688505ab2e83e29a5ef4511d107b19bfd38cfe87de4d75441e13bf3dfbdfc6f" host="ip-172-31-24-47" Nov 1 00:13:03.954500 env[1820]: 2025-11-01 00:13:03.811 [INFO][4302] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-24-47" Nov 1 00:13:03.954500 env[1820]: 2025-11-01 00:13:03.825 [INFO][4302] ipam/ipam.go 511: Trying affinity for 192.168.49.64/26 host="ip-172-31-24-47" Nov 1 00:13:03.954500 env[1820]: 2025-11-01 00:13:03.830 [INFO][4302] ipam/ipam.go 158: Attempting to load block cidr=192.168.49.64/26 host="ip-172-31-24-47" Nov 1 00:13:03.954500 env[1820]: 2025-11-01 00:13:03.836 [INFO][4302] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.49.64/26 host="ip-172-31-24-47" Nov 1 00:13:03.954500 env[1820]: 2025-11-01 00:13:03.837 [INFO][4302] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.49.64/26 handle="k8s-pod-network.f688505ab2e83e29a5ef4511d107b19bfd38cfe87de4d75441e13bf3dfbdfc6f" host="ip-172-31-24-47" Nov 1 00:13:03.954500 env[1820]: 2025-11-01 00:13:03.840 [INFO][4302] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.f688505ab2e83e29a5ef4511d107b19bfd38cfe87de4d75441e13bf3dfbdfc6f Nov 1 00:13:03.954500 env[1820]: 2025-11-01 00:13:03.854 [INFO][4302] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.49.64/26 handle="k8s-pod-network.f688505ab2e83e29a5ef4511d107b19bfd38cfe87de4d75441e13bf3dfbdfc6f" host="ip-172-31-24-47" Nov 1 00:13:03.954500 env[1820]: 2025-11-01 00:13:03.871 [INFO][4302] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.49.67/26] block=192.168.49.64/26 handle="k8s-pod-network.f688505ab2e83e29a5ef4511d107b19bfd38cfe87de4d75441e13bf3dfbdfc6f" host="ip-172-31-24-47" Nov 1 00:13:03.954500 env[1820]: 2025-11-01 00:13:03.871 [INFO][4302] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.49.67/26] handle="k8s-pod-network.f688505ab2e83e29a5ef4511d107b19bfd38cfe87de4d75441e13bf3dfbdfc6f" host="ip-172-31-24-47" Nov 1 00:13:03.954500 env[1820]: 2025-11-01 00:13:03.872 [INFO][4302] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:13:03.954500 env[1820]: 2025-11-01 00:13:03.872 [INFO][4302] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.49.67/26] IPv6=[] ContainerID="f688505ab2e83e29a5ef4511d107b19bfd38cfe87de4d75441e13bf3dfbdfc6f" HandleID="k8s-pod-network.f688505ab2e83e29a5ef4511d107b19bfd38cfe87de4d75441e13bf3dfbdfc6f" Workload="ip--172--31--24--47-k8s-calico--apiserver--789667c9c4--gltc6-eth0" Nov 1 00:13:03.955966 env[1820]: 2025-11-01 00:13:03.876 [INFO][4263] cni-plugin/k8s.go 418: Populated endpoint ContainerID="f688505ab2e83e29a5ef4511d107b19bfd38cfe87de4d75441e13bf3dfbdfc6f" Namespace="calico-apiserver" Pod="calico-apiserver-789667c9c4-gltc6" WorkloadEndpoint="ip--172--31--24--47-k8s-calico--apiserver--789667c9c4--gltc6-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--24--47-k8s-calico--apiserver--789667c9c4--gltc6-eth0", GenerateName:"calico-apiserver-789667c9c4-", Namespace:"calico-apiserver", SelfLink:"", UID:"de7ca9fd-9d9e-4866-9cab-137a354c3eda", ResourceVersion:"1015", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 12, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"789667c9c4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-24-47", ContainerID:"", Pod:"calico-apiserver-789667c9c4-gltc6", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.49.67/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali8b02372fdd6", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:13:03.955966 env[1820]: 2025-11-01 00:13:03.877 [INFO][4263] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.49.67/32] ContainerID="f688505ab2e83e29a5ef4511d107b19bfd38cfe87de4d75441e13bf3dfbdfc6f" Namespace="calico-apiserver" Pod="calico-apiserver-789667c9c4-gltc6" WorkloadEndpoint="ip--172--31--24--47-k8s-calico--apiserver--789667c9c4--gltc6-eth0" Nov 1 00:13:03.955966 env[1820]: 2025-11-01 00:13:03.877 [INFO][4263] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali8b02372fdd6 ContainerID="f688505ab2e83e29a5ef4511d107b19bfd38cfe87de4d75441e13bf3dfbdfc6f" Namespace="calico-apiserver" Pod="calico-apiserver-789667c9c4-gltc6" WorkloadEndpoint="ip--172--31--24--47-k8s-calico--apiserver--789667c9c4--gltc6-eth0" Nov 1 00:13:03.955966 env[1820]: 2025-11-01 00:13:03.907 [INFO][4263] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="f688505ab2e83e29a5ef4511d107b19bfd38cfe87de4d75441e13bf3dfbdfc6f" Namespace="calico-apiserver" Pod="calico-apiserver-789667c9c4-gltc6" WorkloadEndpoint="ip--172--31--24--47-k8s-calico--apiserver--789667c9c4--gltc6-eth0" Nov 1 00:13:03.955966 env[1820]: 2025-11-01 00:13:03.910 [INFO][4263] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="f688505ab2e83e29a5ef4511d107b19bfd38cfe87de4d75441e13bf3dfbdfc6f" Namespace="calico-apiserver" Pod="calico-apiserver-789667c9c4-gltc6" WorkloadEndpoint="ip--172--31--24--47-k8s-calico--apiserver--789667c9c4--gltc6-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--24--47-k8s-calico--apiserver--789667c9c4--gltc6-eth0", GenerateName:"calico-apiserver-789667c9c4-", Namespace:"calico-apiserver", SelfLink:"", UID:"de7ca9fd-9d9e-4866-9cab-137a354c3eda", ResourceVersion:"1015", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 12, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"789667c9c4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-24-47", ContainerID:"f688505ab2e83e29a5ef4511d107b19bfd38cfe87de4d75441e13bf3dfbdfc6f", Pod:"calico-apiserver-789667c9c4-gltc6", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.49.67/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali8b02372fdd6", MAC:"b2:8f:81:fc:16:31", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:13:03.955966 env[1820]: 2025-11-01 00:13:03.947 [INFO][4263] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="f688505ab2e83e29a5ef4511d107b19bfd38cfe87de4d75441e13bf3dfbdfc6f" Namespace="calico-apiserver" Pod="calico-apiserver-789667c9c4-gltc6" WorkloadEndpoint="ip--172--31--24--47-k8s-calico--apiserver--789667c9c4--gltc6-eth0" Nov 1 00:13:03.959786 kubelet[2832]: I1101 00:13:03.959722 2832 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="f4a69723-82d1-4c78-aa91-140b6f4c3c36" path="/var/lib/kubelet/pods/f4a69723-82d1-4c78-aa91-140b6f4c3c36/volumes" Nov 1 00:13:03.963592 env[1820]: time="2025-11-01T00:13:03.963529973Z" level=info msg="StopPodSandbox for \"381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5\"" Nov 1 00:13:03.974287 env[1820]: time="2025-11-01T00:13:03.974185408Z" level=info msg="StopPodSandbox for \"b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766\"" Nov 1 00:13:04.000821 env[1820]: time="2025-11-01T00:13:03.997790606Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:13:04.001118 env[1820]: time="2025-11-01T00:13:04.001060132Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:13:04.001293 env[1820]: time="2025-11-01T00:13:04.001244957Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:13:04.001699 env[1820]: time="2025-11-01T00:13:04.001642639Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f688505ab2e83e29a5ef4511d107b19bfd38cfe87de4d75441e13bf3dfbdfc6f pid=4356 runtime=io.containerd.runc.v2 Nov 1 00:13:04.038734 systemd[1]: Started cri-containerd-f688505ab2e83e29a5ef4511d107b19bfd38cfe87de4d75441e13bf3dfbdfc6f.scope. Nov 1 00:13:04.088000 audit[4320]: AVC avc: denied { write } for pid=4320 comm="tee" name="fd" dev="proc" ino=23017 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:13:04.088000 audit[4320]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff09f37d5 a2=241 a3=1b6 items=1 ppid=4209 pid=4320 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:04.088000 audit: CWD cwd="/etc/service/enabled/confd/log" Nov 1 00:13:04.088000 audit: PATH item=0 name="/dev/fd/63" inode=22130 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:13:04.088000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:13:04.177248 systemd[1]: run-containerd-runc-k8s.io-f688505ab2e83e29a5ef4511d107b19bfd38cfe87de4d75441e13bf3dfbdfc6f-runc.pdVpj3.mount: Deactivated successfully. Nov 1 00:13:04.314276 env[1820]: 2025-11-01 00:13:04.200 [INFO][4384] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5" Nov 1 00:13:04.314276 env[1820]: 2025-11-01 00:13:04.200 [INFO][4384] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5" iface="eth0" netns="/var/run/netns/cni-61a9dadb-2e9c-d5a5-7229-2aeeececd70c" Nov 1 00:13:04.314276 env[1820]: 2025-11-01 00:13:04.201 [INFO][4384] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5" iface="eth0" netns="/var/run/netns/cni-61a9dadb-2e9c-d5a5-7229-2aeeececd70c" Nov 1 00:13:04.314276 env[1820]: 2025-11-01 00:13:04.205 [INFO][4384] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5" iface="eth0" netns="/var/run/netns/cni-61a9dadb-2e9c-d5a5-7229-2aeeececd70c" Nov 1 00:13:04.314276 env[1820]: 2025-11-01 00:13:04.205 [INFO][4384] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5" Nov 1 00:13:04.314276 env[1820]: 2025-11-01 00:13:04.205 [INFO][4384] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5" Nov 1 00:13:04.314276 env[1820]: 2025-11-01 00:13:04.280 [INFO][4407] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5" HandleID="k8s-pod-network.381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5" Workload="ip--172--31--24--47-k8s-coredns--674b8bbfcf--x4xqs-eth0" Nov 1 00:13:04.314276 env[1820]: 2025-11-01 00:13:04.280 [INFO][4407] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:13:04.314276 env[1820]: 2025-11-01 00:13:04.281 [INFO][4407] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:13:04.314276 env[1820]: 2025-11-01 00:13:04.299 [WARNING][4407] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5" HandleID="k8s-pod-network.381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5" Workload="ip--172--31--24--47-k8s-coredns--674b8bbfcf--x4xqs-eth0" Nov 1 00:13:04.314276 env[1820]: 2025-11-01 00:13:04.300 [INFO][4407] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5" HandleID="k8s-pod-network.381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5" Workload="ip--172--31--24--47-k8s-coredns--674b8bbfcf--x4xqs-eth0" Nov 1 00:13:04.314276 env[1820]: 2025-11-01 00:13:04.305 [INFO][4407] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:13:04.314276 env[1820]: 2025-11-01 00:13:04.311 [INFO][4384] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5" Nov 1 00:13:04.316062 env[1820]: time="2025-11-01T00:13:04.315963932Z" level=info msg="TearDown network for sandbox \"381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5\" successfully" Nov 1 00:13:04.316262 env[1820]: time="2025-11-01T00:13:04.316223709Z" level=info msg="StopPodSandbox for \"381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5\" returns successfully" Nov 1 00:13:04.317455 env[1820]: time="2025-11-01T00:13:04.317396223Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-x4xqs,Uid:5344d4ec-b790-4603-a008-c051a1d6febf,Namespace:kube-system,Attempt:1,}" Nov 1 00:13:04.346212 kubelet[2832]: E1101 00:13:04.346098 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-7qfc7" podUID="2c016bf7-bf29-4156-a534-853af2a9ae4f" Nov 1 00:13:04.434539 env[1820]: 2025-11-01 00:13:04.264 [WARNING][4383] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--24--47-k8s-csi--node--driver--7qfc7-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"2c016bf7-bf29-4156-a534-853af2a9ae4f", ResourceVersion:"1011", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 12, 37, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-24-47", ContainerID:"95508ff2a4846f20f0707106d85a8ecdb69b544eb06c072d8a0ece3c636675a6", Pod:"csi-node-driver-7qfc7", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.49.65/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali7204fe04d62", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:13:04.434539 env[1820]: 2025-11-01 00:13:04.264 [INFO][4383] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766" Nov 1 00:13:04.434539 env[1820]: 2025-11-01 00:13:04.264 [INFO][4383] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766" iface="eth0" netns="" Nov 1 00:13:04.434539 env[1820]: 2025-11-01 00:13:04.264 [INFO][4383] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766" Nov 1 00:13:04.434539 env[1820]: 2025-11-01 00:13:04.264 [INFO][4383] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766" Nov 1 00:13:04.434539 env[1820]: 2025-11-01 00:13:04.370 [INFO][4417] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766" HandleID="k8s-pod-network.b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766" Workload="ip--172--31--24--47-k8s-csi--node--driver--7qfc7-eth0" Nov 1 00:13:04.434539 env[1820]: 2025-11-01 00:13:04.375 [INFO][4417] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:13:04.434539 env[1820]: 2025-11-01 00:13:04.375 [INFO][4417] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:13:04.434539 env[1820]: 2025-11-01 00:13:04.419 [WARNING][4417] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766" HandleID="k8s-pod-network.b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766" Workload="ip--172--31--24--47-k8s-csi--node--driver--7qfc7-eth0" Nov 1 00:13:04.434539 env[1820]: 2025-11-01 00:13:04.419 [INFO][4417] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766" HandleID="k8s-pod-network.b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766" Workload="ip--172--31--24--47-k8s-csi--node--driver--7qfc7-eth0" Nov 1 00:13:04.434539 env[1820]: 2025-11-01 00:13:04.422 [INFO][4417] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:13:04.434539 env[1820]: 2025-11-01 00:13:04.425 [INFO][4383] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766" Nov 1 00:13:04.435738 env[1820]: time="2025-11-01T00:13:04.435682179Z" level=info msg="TearDown network for sandbox \"b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766\" successfully" Nov 1 00:13:04.435898 env[1820]: time="2025-11-01T00:13:04.435862624Z" level=info msg="StopPodSandbox for \"b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766\" returns successfully" Nov 1 00:13:04.437008 env[1820]: time="2025-11-01T00:13:04.436935466Z" level=info msg="RemovePodSandbox for \"b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766\"" Nov 1 00:13:04.437466 env[1820]: time="2025-11-01T00:13:04.437362776Z" level=info msg="Forcibly stopping sandbox \"b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766\"" Nov 1 00:13:04.525000 audit[4343]: AVC avc: denied { write } for pid=4343 comm="tee" name="fd" dev="proc" ino=23061 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:13:04.525000 audit[4343]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd0e2f7c6 a2=241 a3=1b6 items=1 ppid=4215 pid=4343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:04.525000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Nov 1 00:13:04.525000 audit: PATH item=0 name="/dev/fd/63" inode=22998 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:13:04.525000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:13:04.557000 audit[4405]: AVC avc: denied { write } for pid=4405 comm="tee" name="fd" dev="proc" ino=23067 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:13:04.557000 audit[4405]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe44f57c5 a2=241 a3=1b6 items=1 ppid=4225 pid=4405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:04.557000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Nov 1 00:13:04.557000 audit: PATH item=0 name="/dev/fd/63" inode=23024 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:13:04.557000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:13:04.561000 audit[4403]: AVC avc: denied { write } for pid=4403 comm="tee" name="fd" dev="proc" ino=23071 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:13:04.561000 audit[4403]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd32e47d5 a2=241 a3=1b6 items=1 ppid=4211 pid=4403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:04.561000 audit: CWD cwd="/etc/service/enabled/bird6/log" Nov 1 00:13:04.561000 audit: PATH item=0 name="/dev/fd/63" inode=22256 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:13:04.561000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:13:04.657282 systemd-networkd[1539]: cali7204fe04d62: Gained IPv6LL Nov 1 00:13:04.707000 audit[2677]: AVC avc: denied { watch } for pid=2677 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521019 scontext=system_u:system_r:svirt_lxc_net_t:s0:c413,c578 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:13:04.707000 audit[2677]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=400247efa0 a2=fc6 a3=0 items=0 ppid=2422 pid=2677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c413,c578 key=(null) Nov 1 00:13:04.707000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:13:04.708000 audit[2677]: AVC avc: denied { watch } for pid=2677 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521019 scontext=system_u:system_r:svirt_lxc_net_t:s0:c413,c578 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:13:04.708000 audit[2677]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=400050fbc0 a2=fc6 a3=0 items=0 ppid=2422 pid=2677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c413,c578 key=(null) Nov 1 00:13:04.708000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:13:04.708000 audit[2677]: AVC avc: denied { watch } for pid=2677 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521019 scontext=system_u:system_r:svirt_lxc_net_t:s0:c413,c578 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:13:04.708000 audit[2677]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=400247efc0 a2=fc6 a3=0 items=0 ppid=2422 pid=2677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c413,c578 key=(null) Nov 1 00:13:04.708000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:13:04.708000 audit[2677]: AVC avc: denied { watch } for pid=2677 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521019 scontext=system_u:system_r:svirt_lxc_net_t:s0:c413,c578 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:13:04.708000 audit[2677]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400050fc00 a2=fc6 a3=0 items=0 ppid=2422 pid=2677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c413,c578 key=(null) Nov 1 00:13:04.708000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:13:04.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:04.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:04.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:04.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:04.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:04.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:04.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:04.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:04.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:04.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:04.738000 audit: BPF prog-id=150 op=LOAD Nov 1 00:13:04.742000 audit[4372]: AVC avc: denied { bpf } for pid=4372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:04.742000 audit[4372]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4356 pid=4372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:04.742000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636383835303561623265383365323961356566343531316431303762 Nov 1 00:13:04.744000 audit[4372]: AVC avc: denied { perfmon } for pid=4372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:04.744000 audit[4372]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4356 pid=4372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:04.744000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636383835303561623265383365323961356566343531316431303762 Nov 1 00:13:04.745000 audit[4372]: AVC avc: denied { bpf } for pid=4372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:04.745000 audit[4372]: AVC avc: denied { bpf } for pid=4372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:04.745000 audit[4372]: AVC avc: denied { bpf } for pid=4372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:04.745000 audit[4372]: AVC avc: denied { perfmon } for pid=4372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:04.745000 audit[4372]: AVC avc: denied { perfmon } for pid=4372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:04.745000 audit[4372]: AVC avc: denied { perfmon } for pid=4372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:04.745000 audit[4372]: AVC avc: denied { perfmon } for pid=4372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:04.745000 audit[4372]: AVC avc: denied { perfmon } for pid=4372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:04.745000 audit[4372]: AVC avc: denied { bpf } for pid=4372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:04.745000 audit[4372]: AVC avc: denied { bpf } for pid=4372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:04.745000 audit: BPF prog-id=151 op=LOAD Nov 1 00:13:04.745000 audit[4372]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4356 pid=4372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:04.745000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636383835303561623265383365323961356566343531316431303762 Nov 1 00:13:04.747000 audit[4372]: AVC avc: denied { bpf } for pid=4372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:04.747000 audit[4372]: AVC avc: denied { bpf } for pid=4372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:04.747000 audit[4372]: AVC avc: denied { perfmon } for pid=4372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:04.747000 audit[4372]: AVC avc: denied { perfmon } for pid=4372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:04.747000 audit[4372]: AVC avc: denied { perfmon } for pid=4372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:04.747000 audit[4372]: AVC avc: denied { perfmon } for pid=4372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:04.747000 audit[4372]: AVC avc: denied { perfmon } for pid=4372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:04.747000 audit[4372]: AVC avc: denied { bpf } for pid=4372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:04.747000 audit[4372]: AVC avc: denied { bpf } for pid=4372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:04.747000 audit: BPF prog-id=152 op=LOAD Nov 1 00:13:04.747000 audit[4372]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4356 pid=4372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:04.747000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636383835303561623265383365323961356566343531316431303762 Nov 1 00:13:04.749000 audit: BPF prog-id=152 op=UNLOAD Nov 1 00:13:04.749000 audit: BPF prog-id=151 op=UNLOAD Nov 1 00:13:04.750000 audit[4372]: AVC avc: denied { bpf } for pid=4372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:04.750000 audit[4372]: AVC avc: denied { bpf } for pid=4372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:04.750000 audit[4372]: AVC avc: denied { bpf } for pid=4372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:04.750000 audit[4372]: AVC avc: denied { perfmon } for pid=4372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:04.750000 audit[4372]: AVC avc: denied { perfmon } for pid=4372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:04.750000 audit[4372]: AVC avc: denied { perfmon } for pid=4372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:04.750000 audit[4372]: AVC avc: denied { perfmon } for pid=4372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:04.750000 audit[4372]: AVC avc: denied { perfmon } for pid=4372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:04.750000 audit[4372]: AVC avc: denied { bpf } for pid=4372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:04.750000 audit[4372]: AVC avc: denied { bpf } for pid=4372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:04.750000 audit: BPF prog-id=153 op=LOAD Nov 1 00:13:04.750000 audit[4372]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4356 pid=4372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:04.750000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636383835303561623265383365323961356566343531316431303762 Nov 1 00:13:04.757696 env[1820]: time="2025-11-01T00:13:04.757636965Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-58c6498fd4-zrpxf,Uid:b4871652-e36f-45a1-ab7f-b8d5032703a6,Namespace:calico-system,Attempt:0,} returns sandbox id \"7d04ab3e8ba43f2426891667370a4b46afdc1b1cd6794c759b6595e9cdf907d5\"" Nov 1 00:13:04.761930 env[1820]: time="2025-11-01T00:13:04.761863569Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Nov 1 00:13:04.803635 systemd[1]: run-netns-cni\x2d61a9dadb\x2d2e9c\x2dd5a5\x2d7229\x2d2aeeececd70c.mount: Deactivated successfully. Nov 1 00:13:04.820310 systemd-networkd[1539]: cali4b1ddad55d0: Link UP Nov 1 00:13:04.824518 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali4b1ddad55d0: link becomes ready Nov 1 00:13:04.824141 systemd-networkd[1539]: cali4b1ddad55d0: Gained carrier Nov 1 00:13:04.884500 env[1820]: 2025-11-01 00:13:04.451 [INFO][4422] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Nov 1 00:13:04.884500 env[1820]: 2025-11-01 00:13:04.491 [INFO][4422] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--24--47-k8s-coredns--674b8bbfcf--x4xqs-eth0 coredns-674b8bbfcf- kube-system 5344d4ec-b790-4603-a008-c051a1d6febf 1033 0 2025-11-01 00:12:08 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ip-172-31-24-47 coredns-674b8bbfcf-x4xqs eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali4b1ddad55d0 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="c64dbd445b983da519eac043663c61984dcc589254e3211283a96c5f2cd1bb20" Namespace="kube-system" Pod="coredns-674b8bbfcf-x4xqs" WorkloadEndpoint="ip--172--31--24--47-k8s-coredns--674b8bbfcf--x4xqs-" Nov 1 00:13:04.884500 env[1820]: 2025-11-01 00:13:04.491 [INFO][4422] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="c64dbd445b983da519eac043663c61984dcc589254e3211283a96c5f2cd1bb20" Namespace="kube-system" Pod="coredns-674b8bbfcf-x4xqs" WorkloadEndpoint="ip--172--31--24--47-k8s-coredns--674b8bbfcf--x4xqs-eth0" Nov 1 00:13:04.884500 env[1820]: 2025-11-01 00:13:04.602 [INFO][4450] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="c64dbd445b983da519eac043663c61984dcc589254e3211283a96c5f2cd1bb20" HandleID="k8s-pod-network.c64dbd445b983da519eac043663c61984dcc589254e3211283a96c5f2cd1bb20" Workload="ip--172--31--24--47-k8s-coredns--674b8bbfcf--x4xqs-eth0" Nov 1 00:13:04.884500 env[1820]: 2025-11-01 00:13:04.602 [INFO][4450] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="c64dbd445b983da519eac043663c61984dcc589254e3211283a96c5f2cd1bb20" HandleID="k8s-pod-network.c64dbd445b983da519eac043663c61984dcc589254e3211283a96c5f2cd1bb20" Workload="ip--172--31--24--47-k8s-coredns--674b8bbfcf--x4xqs-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400024ba30), Attrs:map[string]string{"namespace":"kube-system", "node":"ip-172-31-24-47", "pod":"coredns-674b8bbfcf-x4xqs", "timestamp":"2025-11-01 00:13:04.602031462 +0000 UTC"}, Hostname:"ip-172-31-24-47", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:13:04.884500 env[1820]: 2025-11-01 00:13:04.602 [INFO][4450] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:13:04.884500 env[1820]: 2025-11-01 00:13:04.602 [INFO][4450] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:13:04.884500 env[1820]: 2025-11-01 00:13:04.603 [INFO][4450] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-24-47' Nov 1 00:13:04.884500 env[1820]: 2025-11-01 00:13:04.660 [INFO][4450] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.c64dbd445b983da519eac043663c61984dcc589254e3211283a96c5f2cd1bb20" host="ip-172-31-24-47" Nov 1 00:13:04.884500 env[1820]: 2025-11-01 00:13:04.681 [INFO][4450] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-24-47" Nov 1 00:13:04.884500 env[1820]: 2025-11-01 00:13:04.721 [INFO][4450] ipam/ipam.go 511: Trying affinity for 192.168.49.64/26 host="ip-172-31-24-47" Nov 1 00:13:04.884500 env[1820]: 2025-11-01 00:13:04.727 [INFO][4450] ipam/ipam.go 158: Attempting to load block cidr=192.168.49.64/26 host="ip-172-31-24-47" Nov 1 00:13:04.884500 env[1820]: 2025-11-01 00:13:04.732 [INFO][4450] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.49.64/26 host="ip-172-31-24-47" Nov 1 00:13:04.884500 env[1820]: 2025-11-01 00:13:04.732 [INFO][4450] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.49.64/26 handle="k8s-pod-network.c64dbd445b983da519eac043663c61984dcc589254e3211283a96c5f2cd1bb20" host="ip-172-31-24-47" Nov 1 00:13:04.884500 env[1820]: 2025-11-01 00:13:04.747 [INFO][4450] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.c64dbd445b983da519eac043663c61984dcc589254e3211283a96c5f2cd1bb20 Nov 1 00:13:04.884500 env[1820]: 2025-11-01 00:13:04.759 [INFO][4450] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.49.64/26 handle="k8s-pod-network.c64dbd445b983da519eac043663c61984dcc589254e3211283a96c5f2cd1bb20" host="ip-172-31-24-47" Nov 1 00:13:04.884500 env[1820]: 2025-11-01 00:13:04.777 [INFO][4450] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.49.68/26] block=192.168.49.64/26 handle="k8s-pod-network.c64dbd445b983da519eac043663c61984dcc589254e3211283a96c5f2cd1bb20" host="ip-172-31-24-47" Nov 1 00:13:04.884500 env[1820]: 2025-11-01 00:13:04.777 [INFO][4450] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.49.68/26] handle="k8s-pod-network.c64dbd445b983da519eac043663c61984dcc589254e3211283a96c5f2cd1bb20" host="ip-172-31-24-47" Nov 1 00:13:04.884500 env[1820]: 2025-11-01 00:13:04.777 [INFO][4450] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:13:04.884500 env[1820]: 2025-11-01 00:13:04.778 [INFO][4450] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.49.68/26] IPv6=[] ContainerID="c64dbd445b983da519eac043663c61984dcc589254e3211283a96c5f2cd1bb20" HandleID="k8s-pod-network.c64dbd445b983da519eac043663c61984dcc589254e3211283a96c5f2cd1bb20" Workload="ip--172--31--24--47-k8s-coredns--674b8bbfcf--x4xqs-eth0" Nov 1 00:13:04.885999 env[1820]: 2025-11-01 00:13:04.785 [INFO][4422] cni-plugin/k8s.go 418: Populated endpoint ContainerID="c64dbd445b983da519eac043663c61984dcc589254e3211283a96c5f2cd1bb20" Namespace="kube-system" Pod="coredns-674b8bbfcf-x4xqs" WorkloadEndpoint="ip--172--31--24--47-k8s-coredns--674b8bbfcf--x4xqs-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--24--47-k8s-coredns--674b8bbfcf--x4xqs-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"5344d4ec-b790-4603-a008-c051a1d6febf", ResourceVersion:"1033", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 12, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-24-47", ContainerID:"", Pod:"coredns-674b8bbfcf-x4xqs", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.49.68/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali4b1ddad55d0", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:13:04.885999 env[1820]: 2025-11-01 00:13:04.785 [INFO][4422] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.49.68/32] ContainerID="c64dbd445b983da519eac043663c61984dcc589254e3211283a96c5f2cd1bb20" Namespace="kube-system" Pod="coredns-674b8bbfcf-x4xqs" WorkloadEndpoint="ip--172--31--24--47-k8s-coredns--674b8bbfcf--x4xqs-eth0" Nov 1 00:13:04.885999 env[1820]: 2025-11-01 00:13:04.785 [INFO][4422] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali4b1ddad55d0 ContainerID="c64dbd445b983da519eac043663c61984dcc589254e3211283a96c5f2cd1bb20" Namespace="kube-system" Pod="coredns-674b8bbfcf-x4xqs" WorkloadEndpoint="ip--172--31--24--47-k8s-coredns--674b8bbfcf--x4xqs-eth0" Nov 1 00:13:04.885999 env[1820]: 2025-11-01 00:13:04.841 [INFO][4422] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="c64dbd445b983da519eac043663c61984dcc589254e3211283a96c5f2cd1bb20" Namespace="kube-system" Pod="coredns-674b8bbfcf-x4xqs" WorkloadEndpoint="ip--172--31--24--47-k8s-coredns--674b8bbfcf--x4xqs-eth0" Nov 1 00:13:04.885999 env[1820]: 2025-11-01 00:13:04.842 [INFO][4422] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="c64dbd445b983da519eac043663c61984dcc589254e3211283a96c5f2cd1bb20" Namespace="kube-system" Pod="coredns-674b8bbfcf-x4xqs" WorkloadEndpoint="ip--172--31--24--47-k8s-coredns--674b8bbfcf--x4xqs-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--24--47-k8s-coredns--674b8bbfcf--x4xqs-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"5344d4ec-b790-4603-a008-c051a1d6febf", ResourceVersion:"1033", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 12, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-24-47", ContainerID:"c64dbd445b983da519eac043663c61984dcc589254e3211283a96c5f2cd1bb20", Pod:"coredns-674b8bbfcf-x4xqs", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.49.68/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali4b1ddad55d0", MAC:"ba:e6:a2:19:d6:b5", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:13:04.885999 env[1820]: 2025-11-01 00:13:04.878 [INFO][4422] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="c64dbd445b983da519eac043663c61984dcc589254e3211283a96c5f2cd1bb20" Namespace="kube-system" Pod="coredns-674b8bbfcf-x4xqs" WorkloadEndpoint="ip--172--31--24--47-k8s-coredns--674b8bbfcf--x4xqs-eth0" Nov 1 00:13:04.935120 env[1820]: time="2025-11-01T00:13:04.934514423Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:13:04.935120 env[1820]: time="2025-11-01T00:13:04.934719277Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:13:04.935120 env[1820]: time="2025-11-01T00:13:04.934757953Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:13:04.935691 env[1820]: time="2025-11-01T00:13:04.935622222Z" level=info msg="StopPodSandbox for \"6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08\"" Nov 1 00:13:04.944651 env[1820]: time="2025-11-01T00:13:04.941919665Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c64dbd445b983da519eac043663c61984dcc589254e3211283a96c5f2cd1bb20 pid=4494 runtime=io.containerd.runc.v2 Nov 1 00:13:04.975945 env[1820]: 2025-11-01 00:13:04.783 [WARNING][4443] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--24--47-k8s-csi--node--driver--7qfc7-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"2c016bf7-bf29-4156-a534-853af2a9ae4f", ResourceVersion:"1035", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 12, 37, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-24-47", ContainerID:"95508ff2a4846f20f0707106d85a8ecdb69b544eb06c072d8a0ece3c636675a6", Pod:"csi-node-driver-7qfc7", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.49.65/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali7204fe04d62", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:13:04.975945 env[1820]: 2025-11-01 00:13:04.783 [INFO][4443] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766" Nov 1 00:13:04.975945 env[1820]: 2025-11-01 00:13:04.783 [INFO][4443] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766" iface="eth0" netns="" Nov 1 00:13:04.975945 env[1820]: 2025-11-01 00:13:04.783 [INFO][4443] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766" Nov 1 00:13:04.975945 env[1820]: 2025-11-01 00:13:04.784 [INFO][4443] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766" Nov 1 00:13:04.975945 env[1820]: 2025-11-01 00:13:04.911 [INFO][4475] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766" HandleID="k8s-pod-network.b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766" Workload="ip--172--31--24--47-k8s-csi--node--driver--7qfc7-eth0" Nov 1 00:13:04.975945 env[1820]: 2025-11-01 00:13:04.915 [INFO][4475] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:13:04.975945 env[1820]: 2025-11-01 00:13:04.915 [INFO][4475] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:13:04.975945 env[1820]: 2025-11-01 00:13:04.930 [WARNING][4475] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766" HandleID="k8s-pod-network.b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766" Workload="ip--172--31--24--47-k8s-csi--node--driver--7qfc7-eth0" Nov 1 00:13:04.975945 env[1820]: 2025-11-01 00:13:04.930 [INFO][4475] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766" HandleID="k8s-pod-network.b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766" Workload="ip--172--31--24--47-k8s-csi--node--driver--7qfc7-eth0" Nov 1 00:13:04.975945 env[1820]: 2025-11-01 00:13:04.943 [INFO][4475] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:13:04.975945 env[1820]: 2025-11-01 00:13:04.958 [INFO][4443] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766" Nov 1 00:13:04.975945 env[1820]: time="2025-11-01T00:13:04.975199018Z" level=info msg="TearDown network for sandbox \"b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766\" successfully" Nov 1 00:13:04.987002 env[1820]: time="2025-11-01T00:13:04.986600582Z" level=info msg="RemovePodSandbox \"b2d8482117ab5f2bbb562d3e07bdbe7d51b0a5b0f48e798cab7b4eaa60a1f766\" returns successfully" Nov 1 00:13:04.989618 env[1820]: time="2025-11-01T00:13:04.989560170Z" level=info msg="StopPodSandbox for \"49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354\"" Nov 1 00:13:05.017941 systemd[1]: run-containerd-runc-k8s.io-c64dbd445b983da519eac043663c61984dcc589254e3211283a96c5f2cd1bb20-runc.BdBp6q.mount: Deactivated successfully. Nov 1 00:13:05.033624 systemd[1]: Started cri-containerd-c64dbd445b983da519eac043663c61984dcc589254e3211283a96c5f2cd1bb20.scope. Nov 1 00:13:05.059469 env[1820]: time="2025-11-01T00:13:05.059377475Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:13:05.064407 env[1820]: time="2025-11-01T00:13:05.064294214Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Nov 1 00:13:05.065853 kubelet[2832]: E1101 00:13:05.064833 2832 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:13:05.065853 kubelet[2832]: E1101 00:13:05.065023 2832 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:13:05.065853 kubelet[2832]: E1101 00:13:05.065727 2832 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.4,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:68ad8fca00514a76b38910a616d960e3,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-2m6c6,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-58c6498fd4-zrpxf_calico-system(b4871652-e36f-45a1-ab7f-b8d5032703a6): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Nov 1 00:13:05.071415 env[1820]: time="2025-11-01T00:13:05.071352054Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Nov 1 00:13:05.105217 systemd-networkd[1539]: cali5dd34f1a838: Gained IPv6LL Nov 1 00:13:05.136000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.136000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.136000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.136000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.136000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.136000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.136000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.136000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.136000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.136000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.136000 audit: BPF prog-id=154 op=LOAD Nov 1 00:13:05.149000 audit[4510]: AVC avc: denied { bpf } for pid=4510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.149000 audit[4510]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011fb38 a2=10 a3=0 items=0 ppid=4494 pid=4510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:05.149000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336346462643434356239383364613531396561633034333636336336 Nov 1 00:13:05.149000 audit[4510]: AVC avc: denied { perfmon } for pid=4510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.149000 audit[4510]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=400011f5a0 a2=3c a3=0 items=0 ppid=4494 pid=4510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:05.149000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336346462643434356239383364613531396561633034333636336336 Nov 1 00:13:05.149000 audit[4510]: AVC avc: denied { bpf } for pid=4510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.149000 audit[4510]: AVC avc: denied { bpf } for pid=4510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.149000 audit[4510]: AVC avc: denied { bpf } for pid=4510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.149000 audit[4510]: AVC avc: denied { perfmon } for pid=4510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.149000 audit[4510]: AVC avc: denied { perfmon } for pid=4510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.149000 audit[4510]: AVC avc: denied { perfmon } for pid=4510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.149000 audit[4510]: AVC avc: denied { perfmon } for pid=4510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.149000 audit[4510]: AVC avc: denied { perfmon } for pid=4510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.149000 audit[4510]: AVC avc: denied { bpf } for pid=4510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.149000 audit[4510]: AVC avc: denied { bpf } for pid=4510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.149000 audit: BPF prog-id=155 op=LOAD Nov 1 00:13:05.149000 audit[4510]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400011f8e0 a2=78 a3=0 items=0 ppid=4494 pid=4510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:05.149000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336346462643434356239383364613531396561633034333636336336 Nov 1 00:13:05.150000 audit[4510]: AVC avc: denied { bpf } for pid=4510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.150000 audit[4510]: AVC avc: denied { bpf } for pid=4510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.150000 audit[4510]: AVC avc: denied { perfmon } for pid=4510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.150000 audit[4510]: AVC avc: denied { perfmon } for pid=4510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.150000 audit[4510]: AVC avc: denied { perfmon } for pid=4510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.150000 audit[4510]: AVC avc: denied { perfmon } for pid=4510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.150000 audit[4510]: AVC avc: denied { perfmon } for pid=4510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.150000 audit[4510]: AVC avc: denied { bpf } for pid=4510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.150000 audit[4510]: AVC avc: denied { bpf } for pid=4510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.150000 audit: BPF prog-id=156 op=LOAD Nov 1 00:13:05.150000 audit[4510]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=400011f670 a2=78 a3=0 items=0 ppid=4494 pid=4510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:05.150000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336346462643434356239383364613531396561633034333636336336 Nov 1 00:13:05.150000 audit: BPF prog-id=156 op=UNLOAD Nov 1 00:13:05.150000 audit: BPF prog-id=155 op=UNLOAD Nov 1 00:13:05.150000 audit[4510]: AVC avc: denied { bpf } for pid=4510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.150000 audit[4510]: AVC avc: denied { bpf } for pid=4510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.150000 audit[4510]: AVC avc: denied { bpf } for pid=4510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.150000 audit[4510]: AVC avc: denied { perfmon } for pid=4510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.150000 audit[4510]: AVC avc: denied { perfmon } for pid=4510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.150000 audit[4510]: AVC avc: denied { perfmon } for pid=4510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.150000 audit[4510]: AVC avc: denied { perfmon } for pid=4510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.150000 audit[4510]: AVC avc: denied { perfmon } for pid=4510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.150000 audit[4510]: AVC avc: denied { bpf } for pid=4510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.150000 audit[4510]: AVC avc: denied { bpf } for pid=4510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.150000 audit: BPF prog-id=157 op=LOAD Nov 1 00:13:05.150000 audit[4510]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=400011fb40 a2=78 a3=0 items=0 ppid=4494 pid=4510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:05.150000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336346462643434356239383364613531396561633034333636336336 Nov 1 00:13:05.320448 env[1820]: time="2025-11-01T00:13:05.320283208Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:13:05.335021 env[1820]: time="2025-11-01T00:13:05.328737376Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Nov 1 00:13:05.336167 kubelet[2832]: E1101 00:13:05.335410 2832 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:13:05.336167 kubelet[2832]: E1101 00:13:05.335485 2832 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:13:05.336167 kubelet[2832]: E1101 00:13:05.335663 2832 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-2m6c6,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-58c6498fd4-zrpxf_calico-system(b4871652-e36f-45a1-ab7f-b8d5032703a6): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Nov 1 00:13:05.343945 kubelet[2832]: E1101 00:13:05.343818 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-58c6498fd4-zrpxf" podUID="b4871652-e36f-45a1-ab7f-b8d5032703a6" Nov 1 00:13:05.362482 kubelet[2832]: E1101 00:13:05.362316 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-58c6498fd4-zrpxf" podUID="b4871652-e36f-45a1-ab7f-b8d5032703a6" Nov 1 00:13:05.369088 env[1820]: time="2025-11-01T00:13:05.369014607Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-789667c9c4-gltc6,Uid:de7ca9fd-9d9e-4866-9cab-137a354c3eda,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"f688505ab2e83e29a5ef4511d107b19bfd38cfe87de4d75441e13bf3dfbdfc6f\"" Nov 1 00:13:05.374606 env[1820]: time="2025-11-01T00:13:05.374534758Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:13:05.394013 env[1820]: time="2025-11-01T00:13:05.387852913Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-x4xqs,Uid:5344d4ec-b790-4603-a008-c051a1d6febf,Namespace:kube-system,Attempt:1,} returns sandbox id \"c64dbd445b983da519eac043663c61984dcc589254e3211283a96c5f2cd1bb20\"" Nov 1 00:13:05.408448 env[1820]: time="2025-11-01T00:13:05.408360284Z" level=info msg="CreateContainer within sandbox \"c64dbd445b983da519eac043663c61984dcc589254e3211283a96c5f2cd1bb20\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Nov 1 00:13:05.460411 env[1820]: time="2025-11-01T00:13:05.460313665Z" level=info msg="CreateContainer within sandbox \"c64dbd445b983da519eac043663c61984dcc589254e3211283a96c5f2cd1bb20\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"0da32888377bb53e7990b2c183b88776ba5bf46f92134f7a3aba5cee46769fe1\"" Nov 1 00:13:05.461845 env[1820]: time="2025-11-01T00:13:05.461776737Z" level=info msg="StartContainer for \"0da32888377bb53e7990b2c183b88776ba5bf46f92134f7a3aba5cee46769fe1\"" Nov 1 00:13:05.526797 systemd[1]: Started cri-containerd-0da32888377bb53e7990b2c183b88776ba5bf46f92134f7a3aba5cee46769fe1.scope. Nov 1 00:13:05.554572 systemd-networkd[1539]: cali8b02372fdd6: Gained IPv6LL Nov 1 00:13:05.639962 env[1820]: time="2025-11-01T00:13:05.639782391Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:13:05.645194 env[1820]: time="2025-11-01T00:13:05.645108465Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:13:05.646366 kubelet[2832]: E1101 00:13:05.645636 2832 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:13:05.646366 kubelet[2832]: E1101 00:13:05.645699 2832 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:13:05.646366 kubelet[2832]: E1101 00:13:05.645919 2832 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-lgxsj,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-789667c9c4-gltc6_calico-apiserver(de7ca9fd-9d9e-4866-9cab-137a354c3eda): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:13:05.647717 kubelet[2832]: E1101 00:13:05.647635 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-789667c9c4-gltc6" podUID="de7ca9fd-9d9e-4866-9cab-137a354c3eda" Nov 1 00:13:05.675000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.675000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.675000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.675000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.675000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.676000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.676000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.676000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.676000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.676000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.676000 audit: BPF prog-id=158 op=LOAD Nov 1 00:13:05.677000 audit[4574]: AVC avc: denied { bpf } for pid=4574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.677000 audit[4574]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4494 pid=4574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:05.677000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3064613332383838333737626235336537393930623263313833623838 Nov 1 00:13:05.677000 audit[4574]: AVC avc: denied { perfmon } for pid=4574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.677000 audit[4574]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4494 pid=4574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:05.677000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3064613332383838333737626235336537393930623263313833623838 Nov 1 00:13:05.677000 audit[4574]: AVC avc: denied { bpf } for pid=4574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.677000 audit[4574]: AVC avc: denied { bpf } for pid=4574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.677000 audit[4574]: AVC avc: denied { bpf } for pid=4574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.677000 audit[4574]: AVC avc: denied { perfmon } for pid=4574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.677000 audit[4574]: AVC avc: denied { perfmon } for pid=4574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.677000 audit[4574]: AVC avc: denied { perfmon } for pid=4574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.677000 audit[4574]: AVC avc: denied { perfmon } for pid=4574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.677000 audit[4574]: AVC avc: denied { perfmon } for pid=4574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.677000 audit[4574]: AVC avc: denied { bpf } for pid=4574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.677000 audit[4574]: AVC avc: denied { bpf } for pid=4574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.677000 audit: BPF prog-id=159 op=LOAD Nov 1 00:13:05.677000 audit[4574]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4494 pid=4574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:05.677000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3064613332383838333737626235336537393930623263313833623838 Nov 1 00:13:05.678000 audit[4574]: AVC avc: denied { bpf } for pid=4574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.678000 audit[4574]: AVC avc: denied { bpf } for pid=4574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.678000 audit[4574]: AVC avc: denied { perfmon } for pid=4574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.678000 audit[4574]: AVC avc: denied { perfmon } for pid=4574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.678000 audit[4574]: AVC avc: denied { perfmon } for pid=4574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.678000 audit[4574]: AVC avc: denied { perfmon } for pid=4574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.678000 audit[4574]: AVC avc: denied { perfmon } for pid=4574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.678000 audit[4574]: AVC avc: denied { bpf } for pid=4574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.678000 audit[4574]: AVC avc: denied { bpf } for pid=4574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.678000 audit: BPF prog-id=160 op=LOAD Nov 1 00:13:05.678000 audit[4574]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4494 pid=4574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:05.678000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3064613332383838333737626235336537393930623263313833623838 Nov 1 00:13:05.678000 audit: BPF prog-id=160 op=UNLOAD Nov 1 00:13:05.678000 audit: BPF prog-id=159 op=UNLOAD Nov 1 00:13:05.678000 audit[4574]: AVC avc: denied { bpf } for pid=4574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.678000 audit[4574]: AVC avc: denied { bpf } for pid=4574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.678000 audit[4574]: AVC avc: denied { bpf } for pid=4574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.678000 audit[4574]: AVC avc: denied { perfmon } for pid=4574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.678000 audit[4574]: AVC avc: denied { perfmon } for pid=4574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.678000 audit[4574]: AVC avc: denied { perfmon } for pid=4574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.678000 audit[4574]: AVC avc: denied { perfmon } for pid=4574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.678000 audit[4574]: AVC avc: denied { perfmon } for pid=4574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.678000 audit[4574]: AVC avc: denied { bpf } for pid=4574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.678000 audit[4574]: AVC avc: denied { bpf } for pid=4574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:05.678000 audit: BPF prog-id=161 op=LOAD Nov 1 00:13:05.678000 audit[4574]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4494 pid=4574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:05.678000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3064613332383838333737626235336537393930623263313833623838 Nov 1 00:13:05.704764 env[1820]: 2025-11-01 00:13:05.479 [INFO][4527] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08" Nov 1 00:13:05.704764 env[1820]: 2025-11-01 00:13:05.487 [INFO][4527] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08" iface="eth0" netns="/var/run/netns/cni-ea8c806c-4130-a9cf-3ad3-75fe8e641267" Nov 1 00:13:05.704764 env[1820]: 2025-11-01 00:13:05.487 [INFO][4527] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08" iface="eth0" netns="/var/run/netns/cni-ea8c806c-4130-a9cf-3ad3-75fe8e641267" Nov 1 00:13:05.704764 env[1820]: 2025-11-01 00:13:05.488 [INFO][4527] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08" iface="eth0" netns="/var/run/netns/cni-ea8c806c-4130-a9cf-3ad3-75fe8e641267" Nov 1 00:13:05.704764 env[1820]: 2025-11-01 00:13:05.488 [INFO][4527] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08" Nov 1 00:13:05.704764 env[1820]: 2025-11-01 00:13:05.488 [INFO][4527] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08" Nov 1 00:13:05.704764 env[1820]: 2025-11-01 00:13:05.622 [INFO][4580] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08" HandleID="k8s-pod-network.6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08" Workload="ip--172--31--24--47-k8s-goldmane--666569f655--h7lrq-eth0" Nov 1 00:13:05.704764 env[1820]: 2025-11-01 00:13:05.623 [INFO][4580] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:13:05.704764 env[1820]: 2025-11-01 00:13:05.623 [INFO][4580] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:13:05.704764 env[1820]: 2025-11-01 00:13:05.673 [WARNING][4580] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08" HandleID="k8s-pod-network.6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08" Workload="ip--172--31--24--47-k8s-goldmane--666569f655--h7lrq-eth0" Nov 1 00:13:05.704764 env[1820]: 2025-11-01 00:13:05.673 [INFO][4580] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08" HandleID="k8s-pod-network.6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08" Workload="ip--172--31--24--47-k8s-goldmane--666569f655--h7lrq-eth0" Nov 1 00:13:05.704764 env[1820]: 2025-11-01 00:13:05.687 [INFO][4580] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:13:05.704764 env[1820]: 2025-11-01 00:13:05.691 [INFO][4527] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08" Nov 1 00:13:05.706462 env[1820]: time="2025-11-01T00:13:05.706215774Z" level=info msg="TearDown network for sandbox \"6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08\" successfully" Nov 1 00:13:05.706462 env[1820]: time="2025-11-01T00:13:05.706295862Z" level=info msg="StopPodSandbox for \"6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08\" returns successfully" Nov 1 00:13:05.708793 env[1820]: time="2025-11-01T00:13:05.707935623Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-h7lrq,Uid:e0c48ca1-c3ce-4df4-a9c4-ebf24818e57a,Namespace:calico-system,Attempt:1,}" Nov 1 00:13:05.745268 env[1820]: 2025-11-01 00:13:05.536 [WARNING][4540] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354" WorkloadEndpoint="ip--172--31--24--47-k8s-whisker--9c6fb494b--75m8v-eth0" Nov 1 00:13:05.745268 env[1820]: 2025-11-01 00:13:05.537 [INFO][4540] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354" Nov 1 00:13:05.745268 env[1820]: 2025-11-01 00:13:05.537 [INFO][4540] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354" iface="eth0" netns="" Nov 1 00:13:05.745268 env[1820]: 2025-11-01 00:13:05.537 [INFO][4540] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354" Nov 1 00:13:05.745268 env[1820]: 2025-11-01 00:13:05.537 [INFO][4540] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354" Nov 1 00:13:05.745268 env[1820]: 2025-11-01 00:13:05.654 [INFO][4592] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354" HandleID="k8s-pod-network.49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354" Workload="ip--172--31--24--47-k8s-whisker--9c6fb494b--75m8v-eth0" Nov 1 00:13:05.745268 env[1820]: 2025-11-01 00:13:05.655 [INFO][4592] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:13:05.745268 env[1820]: 2025-11-01 00:13:05.690 [INFO][4592] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:13:05.745268 env[1820]: 2025-11-01 00:13:05.720 [WARNING][4592] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354" HandleID="k8s-pod-network.49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354" Workload="ip--172--31--24--47-k8s-whisker--9c6fb494b--75m8v-eth0" Nov 1 00:13:05.745268 env[1820]: 2025-11-01 00:13:05.723 [INFO][4592] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354" HandleID="k8s-pod-network.49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354" Workload="ip--172--31--24--47-k8s-whisker--9c6fb494b--75m8v-eth0" Nov 1 00:13:05.745268 env[1820]: 2025-11-01 00:13:05.732 [INFO][4592] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:13:05.745268 env[1820]: 2025-11-01 00:13:05.737 [INFO][4540] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354" Nov 1 00:13:05.746319 env[1820]: time="2025-11-01T00:13:05.746265519Z" level=info msg="TearDown network for sandbox \"49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354\" successfully" Nov 1 00:13:05.746466 env[1820]: time="2025-11-01T00:13:05.746430736Z" level=info msg="StopPodSandbox for \"49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354\" returns successfully" Nov 1 00:13:05.747228 env[1820]: time="2025-11-01T00:13:05.747179360Z" level=info msg="RemovePodSandbox for \"49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354\"" Nov 1 00:13:05.747464 env[1820]: time="2025-11-01T00:13:05.747399838Z" level=info msg="Forcibly stopping sandbox \"49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354\"" Nov 1 00:13:05.775817 env[1820]: time="2025-11-01T00:13:05.775731829Z" level=info msg="StartContainer for \"0da32888377bb53e7990b2c183b88776ba5bf46f92134f7a3aba5cee46769fe1\" returns successfully" Nov 1 00:13:05.805940 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3118223543.mount: Deactivated successfully. Nov 1 00:13:05.806153 systemd[1]: run-netns-cni\x2dea8c806c\x2d4130\x2da9cf\x2d3ad3\x2d75fe8e641267.mount: Deactivated successfully. Nov 1 00:13:05.873206 systemd-networkd[1539]: cali4b1ddad55d0: Gained IPv6LL Nov 1 00:13:05.882000 audit[4598]: AVC avc: denied { getattr } for pid=4598 comm="coredns" path="cgroup:[4026532966]" dev="nsfs" ino=4026532966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c411,c593 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Nov 1 00:13:05.882000 audit[4598]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=4000054ac8 a2=40000da578 a3=0 items=0 ppid=4494 pid=4598 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c411,c593 key=(null) Nov 1 00:13:05.882000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Nov 1 00:13:05.936914 env[1820]: time="2025-11-01T00:13:05.936848060Z" level=info msg="StopPodSandbox for \"f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13\"" Nov 1 00:13:05.943852 env[1820]: time="2025-11-01T00:13:05.939073149Z" level=info msg="StopPodSandbox for \"27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16\"" Nov 1 00:13:05.944510 env[1820]: time="2025-11-01T00:13:05.938188528Z" level=info msg="StopPodSandbox for \"17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc\"" Nov 1 00:13:06.043000 audit[4616]: NETFILTER_CFG table=filter:109 family=2 entries=20 op=nft_register_rule pid=4616 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:13:06.043000 audit[4616]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffd1149c00 a2=0 a3=1 items=0 ppid=2988 pid=4616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:06.043000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:13:06.125531 env[1820]: 2025-11-01 00:13:05.895 [WARNING][4641] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354" WorkloadEndpoint="ip--172--31--24--47-k8s-whisker--9c6fb494b--75m8v-eth0" Nov 1 00:13:06.125531 env[1820]: 2025-11-01 00:13:05.896 [INFO][4641] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354" Nov 1 00:13:06.125531 env[1820]: 2025-11-01 00:13:05.896 [INFO][4641] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354" iface="eth0" netns="" Nov 1 00:13:06.125531 env[1820]: 2025-11-01 00:13:05.896 [INFO][4641] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354" Nov 1 00:13:06.125531 env[1820]: 2025-11-01 00:13:05.896 [INFO][4641] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354" Nov 1 00:13:06.125531 env[1820]: 2025-11-01 00:13:06.033 [INFO][4653] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354" HandleID="k8s-pod-network.49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354" Workload="ip--172--31--24--47-k8s-whisker--9c6fb494b--75m8v-eth0" Nov 1 00:13:06.125531 env[1820]: 2025-11-01 00:13:06.045 [INFO][4653] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:13:06.125531 env[1820]: 2025-11-01 00:13:06.046 [INFO][4653] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:13:06.125531 env[1820]: 2025-11-01 00:13:06.108 [WARNING][4653] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354" HandleID="k8s-pod-network.49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354" Workload="ip--172--31--24--47-k8s-whisker--9c6fb494b--75m8v-eth0" Nov 1 00:13:06.125531 env[1820]: 2025-11-01 00:13:06.109 [INFO][4653] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354" HandleID="k8s-pod-network.49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354" Workload="ip--172--31--24--47-k8s-whisker--9c6fb494b--75m8v-eth0" Nov 1 00:13:06.125531 env[1820]: 2025-11-01 00:13:06.118 [INFO][4653] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:13:06.125531 env[1820]: 2025-11-01 00:13:06.123 [INFO][4641] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354" Nov 1 00:13:06.126575 env[1820]: time="2025-11-01T00:13:06.126519696Z" level=info msg="TearDown network for sandbox \"49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354\" successfully" Nov 1 00:13:06.134294 env[1820]: time="2025-11-01T00:13:06.134206867Z" level=info msg="RemovePodSandbox \"49e816ffd328dc22475e310ee627b08c9d45d666bc4931b6fa18c361edca3354\" returns successfully" Nov 1 00:13:06.241000 audit[4616]: NETFILTER_CFG table=nat:110 family=2 entries=14 op=nft_register_rule pid=4616 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:13:06.241000 audit[4616]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3468 a0=3 a1=ffffd1149c00 a2=0 a3=1 items=0 ppid=2988 pid=4616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:06.241000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:13:06.372492 kubelet[2832]: E1101 00:13:06.371464 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-789667c9c4-gltc6" podUID="de7ca9fd-9d9e-4866-9cab-137a354c3eda" Nov 1 00:13:06.398490 kubelet[2832]: E1101 00:13:06.398403 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-58c6498fd4-zrpxf" podUID="b4871652-e36f-45a1-ab7f-b8d5032703a6" Nov 1 00:13:06.583960 kubelet[2832]: I1101 00:13:06.583014 2832 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-x4xqs" podStartSLOduration=58.582863067 podStartE2EDuration="58.582863067s" podCreationTimestamp="2025-11-01 00:12:08 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:13:06.486415507 +0000 UTC m=+62.896329265" watchObservedRunningTime="2025-11-01 00:13:06.582863067 +0000 UTC m=+62.992776837" Nov 1 00:13:06.590711 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Nov 1 00:13:06.590895 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali32c22eab15c: link becomes ready Nov 1 00:13:06.591247 systemd-networkd[1539]: cali32c22eab15c: Link UP Nov 1 00:13:06.593295 systemd-networkd[1539]: cali32c22eab15c: Gained carrier Nov 1 00:13:06.633886 env[1820]: 2025-11-01 00:13:06.307 [INFO][4691] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc" Nov 1 00:13:06.633886 env[1820]: 2025-11-01 00:13:06.315 [INFO][4691] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc" iface="eth0" netns="/var/run/netns/cni-2f3a7154-4708-f4f4-da06-0e4b2a77d6cc" Nov 1 00:13:06.633886 env[1820]: 2025-11-01 00:13:06.315 [INFO][4691] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc" iface="eth0" netns="/var/run/netns/cni-2f3a7154-4708-f4f4-da06-0e4b2a77d6cc" Nov 1 00:13:06.633886 env[1820]: 2025-11-01 00:13:06.316 [INFO][4691] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc" iface="eth0" netns="/var/run/netns/cni-2f3a7154-4708-f4f4-da06-0e4b2a77d6cc" Nov 1 00:13:06.633886 env[1820]: 2025-11-01 00:13:06.316 [INFO][4691] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc" Nov 1 00:13:06.633886 env[1820]: 2025-11-01 00:13:06.316 [INFO][4691] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc" Nov 1 00:13:06.633886 env[1820]: 2025-11-01 00:13:06.535 [INFO][4716] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc" HandleID="k8s-pod-network.17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc" Workload="ip--172--31--24--47-k8s-coredns--674b8bbfcf--zgm5l-eth0" Nov 1 00:13:06.633886 env[1820]: 2025-11-01 00:13:06.538 [INFO][4716] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:13:06.633886 env[1820]: 2025-11-01 00:13:06.568 [INFO][4716] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:13:06.633886 env[1820]: 2025-11-01 00:13:06.625 [WARNING][4716] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc" HandleID="k8s-pod-network.17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc" Workload="ip--172--31--24--47-k8s-coredns--674b8bbfcf--zgm5l-eth0" Nov 1 00:13:06.633886 env[1820]: 2025-11-01 00:13:06.625 [INFO][4716] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc" HandleID="k8s-pod-network.17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc" Workload="ip--172--31--24--47-k8s-coredns--674b8bbfcf--zgm5l-eth0" Nov 1 00:13:06.633886 env[1820]: 2025-11-01 00:13:06.628 [INFO][4716] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:13:06.633886 env[1820]: 2025-11-01 00:13:06.631 [INFO][4691] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc" Nov 1 00:13:06.643079 env[1820]: time="2025-11-01T00:13:06.639087323Z" level=info msg="TearDown network for sandbox \"17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc\" successfully" Nov 1 00:13:06.643079 env[1820]: time="2025-11-01T00:13:06.639148079Z" level=info msg="StopPodSandbox for \"17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc\" returns successfully" Nov 1 00:13:06.638895 systemd[1]: run-netns-cni\x2d2f3a7154\x2d4708\x2df4f4\x2dda06\x2d0e4b2a77d6cc.mount: Deactivated successfully. Nov 1 00:13:06.645320 env[1820]: time="2025-11-01T00:13:06.645231394Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-zgm5l,Uid:7dfbc4c3-4aed-49cd-a78d-d346944385a4,Namespace:kube-system,Attempt:1,}" Nov 1 00:13:06.677327 env[1820]: 2025-11-01 00:13:05.893 [INFO][4621] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Nov 1 00:13:06.677327 env[1820]: 2025-11-01 00:13:05.968 [INFO][4621] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--24--47-k8s-goldmane--666569f655--h7lrq-eth0 goldmane-666569f655- calico-system e0c48ca1-c3ce-4df4-a9c4-ebf24818e57a 1056 0 2025-11-01 00:12:34 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:666569f655 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s ip-172-31-24-47 goldmane-666569f655-h7lrq eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] cali32c22eab15c [] [] }} ContainerID="f2d9b3fb2f8dedcfd229d89dabf38cdfe068b875257416ffe95bd86dd9fdd9b7" Namespace="calico-system" Pod="goldmane-666569f655-h7lrq" WorkloadEndpoint="ip--172--31--24--47-k8s-goldmane--666569f655--h7lrq-" Nov 1 00:13:06.677327 env[1820]: 2025-11-01 00:13:05.968 [INFO][4621] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="f2d9b3fb2f8dedcfd229d89dabf38cdfe068b875257416ffe95bd86dd9fdd9b7" Namespace="calico-system" Pod="goldmane-666569f655-h7lrq" WorkloadEndpoint="ip--172--31--24--47-k8s-goldmane--666569f655--h7lrq-eth0" Nov 1 00:13:06.677327 env[1820]: 2025-11-01 00:13:06.228 [INFO][4689] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="f2d9b3fb2f8dedcfd229d89dabf38cdfe068b875257416ffe95bd86dd9fdd9b7" HandleID="k8s-pod-network.f2d9b3fb2f8dedcfd229d89dabf38cdfe068b875257416ffe95bd86dd9fdd9b7" Workload="ip--172--31--24--47-k8s-goldmane--666569f655--h7lrq-eth0" Nov 1 00:13:06.677327 env[1820]: 2025-11-01 00:13:06.234 [INFO][4689] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="f2d9b3fb2f8dedcfd229d89dabf38cdfe068b875257416ffe95bd86dd9fdd9b7" HandleID="k8s-pod-network.f2d9b3fb2f8dedcfd229d89dabf38cdfe068b875257416ffe95bd86dd9fdd9b7" Workload="ip--172--31--24--47-k8s-goldmane--666569f655--h7lrq-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004ce10), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-24-47", "pod":"goldmane-666569f655-h7lrq", "timestamp":"2025-11-01 00:13:06.228577852 +0000 UTC"}, Hostname:"ip-172-31-24-47", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:13:06.677327 env[1820]: 2025-11-01 00:13:06.235 [INFO][4689] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:13:06.677327 env[1820]: 2025-11-01 00:13:06.235 [INFO][4689] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:13:06.677327 env[1820]: 2025-11-01 00:13:06.235 [INFO][4689] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-24-47' Nov 1 00:13:06.677327 env[1820]: 2025-11-01 00:13:06.317 [INFO][4689] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.f2d9b3fb2f8dedcfd229d89dabf38cdfe068b875257416ffe95bd86dd9fdd9b7" host="ip-172-31-24-47" Nov 1 00:13:06.677327 env[1820]: 2025-11-01 00:13:06.354 [INFO][4689] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-24-47" Nov 1 00:13:06.677327 env[1820]: 2025-11-01 00:13:06.393 [INFO][4689] ipam/ipam.go 511: Trying affinity for 192.168.49.64/26 host="ip-172-31-24-47" Nov 1 00:13:06.677327 env[1820]: 2025-11-01 00:13:06.422 [INFO][4689] ipam/ipam.go 158: Attempting to load block cidr=192.168.49.64/26 host="ip-172-31-24-47" Nov 1 00:13:06.677327 env[1820]: 2025-11-01 00:13:06.440 [INFO][4689] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.49.64/26 host="ip-172-31-24-47" Nov 1 00:13:06.677327 env[1820]: 2025-11-01 00:13:06.440 [INFO][4689] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.49.64/26 handle="k8s-pod-network.f2d9b3fb2f8dedcfd229d89dabf38cdfe068b875257416ffe95bd86dd9fdd9b7" host="ip-172-31-24-47" Nov 1 00:13:06.677327 env[1820]: 2025-11-01 00:13:06.452 [INFO][4689] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.f2d9b3fb2f8dedcfd229d89dabf38cdfe068b875257416ffe95bd86dd9fdd9b7 Nov 1 00:13:06.677327 env[1820]: 2025-11-01 00:13:06.512 [INFO][4689] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.49.64/26 handle="k8s-pod-network.f2d9b3fb2f8dedcfd229d89dabf38cdfe068b875257416ffe95bd86dd9fdd9b7" host="ip-172-31-24-47" Nov 1 00:13:06.677327 env[1820]: 2025-11-01 00:13:06.568 [INFO][4689] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.49.69/26] block=192.168.49.64/26 handle="k8s-pod-network.f2d9b3fb2f8dedcfd229d89dabf38cdfe068b875257416ffe95bd86dd9fdd9b7" host="ip-172-31-24-47" Nov 1 00:13:06.677327 env[1820]: 2025-11-01 00:13:06.568 [INFO][4689] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.49.69/26] handle="k8s-pod-network.f2d9b3fb2f8dedcfd229d89dabf38cdfe068b875257416ffe95bd86dd9fdd9b7" host="ip-172-31-24-47" Nov 1 00:13:06.677327 env[1820]: 2025-11-01 00:13:06.568 [INFO][4689] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:13:06.677327 env[1820]: 2025-11-01 00:13:06.568 [INFO][4689] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.49.69/26] IPv6=[] ContainerID="f2d9b3fb2f8dedcfd229d89dabf38cdfe068b875257416ffe95bd86dd9fdd9b7" HandleID="k8s-pod-network.f2d9b3fb2f8dedcfd229d89dabf38cdfe068b875257416ffe95bd86dd9fdd9b7" Workload="ip--172--31--24--47-k8s-goldmane--666569f655--h7lrq-eth0" Nov 1 00:13:06.678836 env[1820]: 2025-11-01 00:13:06.575 [INFO][4621] cni-plugin/k8s.go 418: Populated endpoint ContainerID="f2d9b3fb2f8dedcfd229d89dabf38cdfe068b875257416ffe95bd86dd9fdd9b7" Namespace="calico-system" Pod="goldmane-666569f655-h7lrq" WorkloadEndpoint="ip--172--31--24--47-k8s-goldmane--666569f655--h7lrq-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--24--47-k8s-goldmane--666569f655--h7lrq-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"e0c48ca1-c3ce-4df4-a9c4-ebf24818e57a", ResourceVersion:"1056", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 12, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-24-47", ContainerID:"", Pod:"goldmane-666569f655-h7lrq", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.49.69/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali32c22eab15c", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:13:06.678836 env[1820]: 2025-11-01 00:13:06.576 [INFO][4621] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.49.69/32] ContainerID="f2d9b3fb2f8dedcfd229d89dabf38cdfe068b875257416ffe95bd86dd9fdd9b7" Namespace="calico-system" Pod="goldmane-666569f655-h7lrq" WorkloadEndpoint="ip--172--31--24--47-k8s-goldmane--666569f655--h7lrq-eth0" Nov 1 00:13:06.678836 env[1820]: 2025-11-01 00:13:06.576 [INFO][4621] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali32c22eab15c ContainerID="f2d9b3fb2f8dedcfd229d89dabf38cdfe068b875257416ffe95bd86dd9fdd9b7" Namespace="calico-system" Pod="goldmane-666569f655-h7lrq" WorkloadEndpoint="ip--172--31--24--47-k8s-goldmane--666569f655--h7lrq-eth0" Nov 1 00:13:06.678836 env[1820]: 2025-11-01 00:13:06.602 [INFO][4621] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="f2d9b3fb2f8dedcfd229d89dabf38cdfe068b875257416ffe95bd86dd9fdd9b7" Namespace="calico-system" Pod="goldmane-666569f655-h7lrq" WorkloadEndpoint="ip--172--31--24--47-k8s-goldmane--666569f655--h7lrq-eth0" Nov 1 00:13:06.678836 env[1820]: 2025-11-01 00:13:06.611 [INFO][4621] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="f2d9b3fb2f8dedcfd229d89dabf38cdfe068b875257416ffe95bd86dd9fdd9b7" Namespace="calico-system" Pod="goldmane-666569f655-h7lrq" WorkloadEndpoint="ip--172--31--24--47-k8s-goldmane--666569f655--h7lrq-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--24--47-k8s-goldmane--666569f655--h7lrq-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"e0c48ca1-c3ce-4df4-a9c4-ebf24818e57a", ResourceVersion:"1056", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 12, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-24-47", ContainerID:"f2d9b3fb2f8dedcfd229d89dabf38cdfe068b875257416ffe95bd86dd9fdd9b7", Pod:"goldmane-666569f655-h7lrq", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.49.69/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali32c22eab15c", MAC:"3a:10:ea:a8:a7:c4", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:13:06.678836 env[1820]: 2025-11-01 00:13:06.656 [INFO][4621] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="f2d9b3fb2f8dedcfd229d89dabf38cdfe068b875257416ffe95bd86dd9fdd9b7" Namespace="calico-system" Pod="goldmane-666569f655-h7lrq" WorkloadEndpoint="ip--172--31--24--47-k8s-goldmane--666569f655--h7lrq-eth0" Nov 1 00:13:06.732407 env[1820]: 2025-11-01 00:13:06.342 [INFO][4687] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13" Nov 1 00:13:06.732407 env[1820]: 2025-11-01 00:13:06.343 [INFO][4687] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13" iface="eth0" netns="/var/run/netns/cni-bf4bf00d-6e24-876d-bccf-a66570164ba3" Nov 1 00:13:06.732407 env[1820]: 2025-11-01 00:13:06.343 [INFO][4687] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13" iface="eth0" netns="/var/run/netns/cni-bf4bf00d-6e24-876d-bccf-a66570164ba3" Nov 1 00:13:06.732407 env[1820]: 2025-11-01 00:13:06.344 [INFO][4687] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13" iface="eth0" netns="/var/run/netns/cni-bf4bf00d-6e24-876d-bccf-a66570164ba3" Nov 1 00:13:06.732407 env[1820]: 2025-11-01 00:13:06.344 [INFO][4687] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13" Nov 1 00:13:06.732407 env[1820]: 2025-11-01 00:13:06.344 [INFO][4687] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13" Nov 1 00:13:06.732407 env[1820]: 2025-11-01 00:13:06.563 [INFO][4723] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13" HandleID="k8s-pod-network.f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13" Workload="ip--172--31--24--47-k8s-calico--kube--controllers--5d8bd955b8--hbwc2-eth0" Nov 1 00:13:06.732407 env[1820]: 2025-11-01 00:13:06.564 [INFO][4723] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:13:06.732407 env[1820]: 2025-11-01 00:13:06.632 [INFO][4723] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:13:06.732407 env[1820]: 2025-11-01 00:13:06.685 [WARNING][4723] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13" HandleID="k8s-pod-network.f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13" Workload="ip--172--31--24--47-k8s-calico--kube--controllers--5d8bd955b8--hbwc2-eth0" Nov 1 00:13:06.732407 env[1820]: 2025-11-01 00:13:06.685 [INFO][4723] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13" HandleID="k8s-pod-network.f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13" Workload="ip--172--31--24--47-k8s-calico--kube--controllers--5d8bd955b8--hbwc2-eth0" Nov 1 00:13:06.732407 env[1820]: 2025-11-01 00:13:06.708 [INFO][4723] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:13:06.732407 env[1820]: 2025-11-01 00:13:06.718 [INFO][4687] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13" Nov 1 00:13:06.738109 systemd[1]: run-netns-cni\x2dbf4bf00d\x2d6e24\x2d876d\x2dbccf\x2da66570164ba3.mount: Deactivated successfully. Nov 1 00:13:06.757774 env[1820]: time="2025-11-01T00:13:06.757702562Z" level=info msg="TearDown network for sandbox \"f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13\" successfully" Nov 1 00:13:06.757774 env[1820]: time="2025-11-01T00:13:06.757767866Z" level=info msg="StopPodSandbox for \"f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13\" returns successfully" Nov 1 00:13:06.759373 env[1820]: time="2025-11-01T00:13:06.759154702Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-5d8bd955b8-hbwc2,Uid:7f4cf6fd-6544-4217-95df-022c9368163b,Namespace:calico-system,Attempt:1,}" Nov 1 00:13:06.755000 audit[4741]: NETFILTER_CFG table=filter:111 family=2 entries=20 op=nft_register_rule pid=4741 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:13:06.755000 audit[4741]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffcf92fd30 a2=0 a3=1 items=0 ppid=2988 pid=4741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:06.755000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:13:06.766348 env[1820]: 2025-11-01 00:13:06.353 [INFO][4697] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16" Nov 1 00:13:06.766348 env[1820]: 2025-11-01 00:13:06.353 [INFO][4697] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16" iface="eth0" netns="/var/run/netns/cni-1b1a6580-bb3e-8916-f559-24a4b03bbd0a" Nov 1 00:13:06.766348 env[1820]: 2025-11-01 00:13:06.355 [INFO][4697] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16" iface="eth0" netns="/var/run/netns/cni-1b1a6580-bb3e-8916-f559-24a4b03bbd0a" Nov 1 00:13:06.766348 env[1820]: 2025-11-01 00:13:06.356 [INFO][4697] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16" iface="eth0" netns="/var/run/netns/cni-1b1a6580-bb3e-8916-f559-24a4b03bbd0a" Nov 1 00:13:06.766348 env[1820]: 2025-11-01 00:13:06.356 [INFO][4697] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16" Nov 1 00:13:06.766348 env[1820]: 2025-11-01 00:13:06.356 [INFO][4697] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16" Nov 1 00:13:06.766348 env[1820]: 2025-11-01 00:13:06.553 [INFO][4725] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16" HandleID="k8s-pod-network.27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16" Workload="ip--172--31--24--47-k8s-calico--apiserver--789667c9c4--fpxfk-eth0" Nov 1 00:13:06.766348 env[1820]: 2025-11-01 00:13:06.569 [INFO][4725] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:13:06.766348 env[1820]: 2025-11-01 00:13:06.709 [INFO][4725] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:13:06.766348 env[1820]: 2025-11-01 00:13:06.751 [WARNING][4725] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16" HandleID="k8s-pod-network.27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16" Workload="ip--172--31--24--47-k8s-calico--apiserver--789667c9c4--fpxfk-eth0" Nov 1 00:13:06.766348 env[1820]: 2025-11-01 00:13:06.751 [INFO][4725] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16" HandleID="k8s-pod-network.27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16" Workload="ip--172--31--24--47-k8s-calico--apiserver--789667c9c4--fpxfk-eth0" Nov 1 00:13:06.766348 env[1820]: 2025-11-01 00:13:06.757 [INFO][4725] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:13:06.766348 env[1820]: 2025-11-01 00:13:06.762 [INFO][4697] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16" Nov 1 00:13:06.768697 env[1820]: time="2025-11-01T00:13:06.768329186Z" level=info msg="TearDown network for sandbox \"27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16\" successfully" Nov 1 00:13:06.768697 env[1820]: time="2025-11-01T00:13:06.768453123Z" level=info msg="StopPodSandbox for \"27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16\" returns successfully" Nov 1 00:13:06.769000 audit[4741]: NETFILTER_CFG table=nat:112 family=2 entries=14 op=nft_register_rule pid=4741 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:13:06.769000 audit[4741]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3468 a0=3 a1=ffffcf92fd30 a2=0 a3=1 items=0 ppid=2988 pid=4741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:06.769000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:13:06.770808 env[1820]: time="2025-11-01T00:13:06.770738452Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-789667c9c4-fpxfk,Uid:2015b9d0-1146-401a-9af6-fcdda8aedfda,Namespace:calico-apiserver,Attempt:1,}" Nov 1 00:13:06.801944 systemd[1]: run-netns-cni\x2d1b1a6580\x2dbb3e\x2d8916\x2df559\x2d24a4b03bbd0a.mount: Deactivated successfully. Nov 1 00:13:06.834871 env[1820]: time="2025-11-01T00:13:06.834629731Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:13:06.834871 env[1820]: time="2025-11-01T00:13:06.834726368Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:13:06.844086 env[1820]: time="2025-11-01T00:13:06.834755192Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:13:06.844086 env[1820]: time="2025-11-01T00:13:06.835441296Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f2d9b3fb2f8dedcfd229d89dabf38cdfe068b875257416ffe95bd86dd9fdd9b7 pid=4763 runtime=io.containerd.runc.v2 Nov 1 00:13:06.889000 audit[4780]: NETFILTER_CFG table=filter:113 family=2 entries=17 op=nft_register_rule pid=4780 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:13:06.916867 systemd[1]: run-containerd-runc-k8s.io-f2d9b3fb2f8dedcfd229d89dabf38cdfe068b875257416ffe95bd86dd9fdd9b7-runc.F7UQ6p.mount: Deactivated successfully. Nov 1 00:13:06.931711 systemd[1]: Started cri-containerd-f2d9b3fb2f8dedcfd229d89dabf38cdfe068b875257416ffe95bd86dd9fdd9b7.scope. Nov 1 00:13:06.889000 audit[4780]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffc7dbda70 a2=0 a3=1 items=0 ppid=2988 pid=4780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:06.889000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:13:06.996000 audit[4780]: NETFILTER_CFG table=nat:114 family=2 entries=35 op=nft_register_chain pid=4780 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:13:06.996000 audit[4780]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14196 a0=3 a1=ffffc7dbda70 a2=0 a3=1 items=0 ppid=2988 pid=4780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:06.996000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:13:07.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.185000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.185000 audit: BPF prog-id=162 op=LOAD Nov 1 00:13:07.187000 audit[4773]: AVC avc: denied { bpf } for pid=4773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.187000 audit[4773]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4763 pid=4773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:07.187000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632643962336662326638646564636664323239643839646162663338 Nov 1 00:13:07.189000 audit[4773]: AVC avc: denied { perfmon } for pid=4773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.189000 audit[4773]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4763 pid=4773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:07.189000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632643962336662326638646564636664323239643839646162663338 Nov 1 00:13:07.190000 audit[4773]: AVC avc: denied { bpf } for pid=4773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.190000 audit[4773]: AVC avc: denied { bpf } for pid=4773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.190000 audit[4773]: AVC avc: denied { bpf } for pid=4773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.190000 audit[4773]: AVC avc: denied { perfmon } for pid=4773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.190000 audit[4773]: AVC avc: denied { perfmon } for pid=4773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.190000 audit[4773]: AVC avc: denied { perfmon } for pid=4773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.190000 audit[4773]: AVC avc: denied { perfmon } for pid=4773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.190000 audit[4773]: AVC avc: denied { perfmon } for pid=4773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.190000 audit[4773]: AVC avc: denied { bpf } for pid=4773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.190000 audit[4773]: AVC avc: denied { bpf } for pid=4773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.190000 audit: BPF prog-id=163 op=LOAD Nov 1 00:13:07.190000 audit[4773]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4763 pid=4773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:07.190000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632643962336662326638646564636664323239643839646162663338 Nov 1 00:13:07.193000 audit[4773]: AVC avc: denied { bpf } for pid=4773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.193000 audit[4773]: AVC avc: denied { bpf } for pid=4773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.193000 audit[4773]: AVC avc: denied { perfmon } for pid=4773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.193000 audit[4773]: AVC avc: denied { perfmon } for pid=4773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.193000 audit[4773]: AVC avc: denied { perfmon } for pid=4773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.193000 audit[4773]: AVC avc: denied { perfmon } for pid=4773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.193000 audit[4773]: AVC avc: denied { perfmon } for pid=4773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.193000 audit[4773]: AVC avc: denied { bpf } for pid=4773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.193000 audit[4773]: AVC avc: denied { bpf } for pid=4773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.193000 audit: BPF prog-id=164 op=LOAD Nov 1 00:13:07.193000 audit[4773]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4763 pid=4773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:07.193000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632643962336662326638646564636664323239643839646162663338 Nov 1 00:13:07.199000 audit: BPF prog-id=164 op=UNLOAD Nov 1 00:13:07.199000 audit: BPF prog-id=163 op=UNLOAD Nov 1 00:13:07.199000 audit[4773]: AVC avc: denied { bpf } for pid=4773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.199000 audit[4773]: AVC avc: denied { bpf } for pid=4773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.199000 audit[4773]: AVC avc: denied { bpf } for pid=4773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.199000 audit[4773]: AVC avc: denied { perfmon } for pid=4773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.199000 audit[4773]: AVC avc: denied { perfmon } for pid=4773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.199000 audit[4773]: AVC avc: denied { perfmon } for pid=4773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.199000 audit[4773]: AVC avc: denied { perfmon } for pid=4773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.199000 audit[4773]: AVC avc: denied { perfmon } for pid=4773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.199000 audit[4773]: AVC avc: denied { bpf } for pid=4773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.199000 audit[4773]: AVC avc: denied { bpf } for pid=4773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.199000 audit: BPF prog-id=165 op=LOAD Nov 1 00:13:07.199000 audit[4773]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4763 pid=4773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:07.199000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632643962336662326638646564636664323239643839646162663338 Nov 1 00:13:07.328000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.24.47:22-147.75.109.163:47692 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:07.328965 systemd[1]: Started sshd@8-172.31.24.47:22-147.75.109.163:47692.service. Nov 1 00:13:07.394292 kubelet[2832]: E1101 00:13:07.393710 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-789667c9c4-gltc6" podUID="de7ca9fd-9d9e-4866-9cab-137a354c3eda" Nov 1 00:13:07.433331 systemd-networkd[1539]: calid21f6a348b3: Link UP Nov 1 00:13:07.444466 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calid21f6a348b3: link becomes ready Nov 1 00:13:07.444112 systemd-networkd[1539]: calid21f6a348b3: Gained carrier Nov 1 00:13:07.540000 audit[4841]: USER_ACCT pid=4841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:07.541672 sshd[4841]: Accepted publickey for core from 147.75.109.163 port 47692 ssh2: RSA SHA256:l10clL99NTgBLZDdAUsIsAniCj4DES+0hQanxvSOioM Nov 1 00:13:07.542000 audit[4841]: CRED_ACQ pid=4841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:07.542000 audit[4841]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff9c6c620 a2=3 a3=1 items=0 ppid=1 pid=4841 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:07.542000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:13:07.544862 sshd[4841]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:13:07.553395 env[1820]: 2025-11-01 00:13:07.015 [INFO][4746] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Nov 1 00:13:07.553395 env[1820]: 2025-11-01 00:13:07.075 [INFO][4746] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--24--47-k8s-coredns--674b8bbfcf--zgm5l-eth0 coredns-674b8bbfcf- kube-system 7dfbc4c3-4aed-49cd-a78d-d346944385a4 1074 0 2025-11-01 00:12:08 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ip-172-31-24-47 coredns-674b8bbfcf-zgm5l eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calid21f6a348b3 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="8dfb201cc5128b311c155977b680c217ef2c6ee95c94fbcf79e25f33dc6da9c5" Namespace="kube-system" Pod="coredns-674b8bbfcf-zgm5l" WorkloadEndpoint="ip--172--31--24--47-k8s-coredns--674b8bbfcf--zgm5l-" Nov 1 00:13:07.553395 env[1820]: 2025-11-01 00:13:07.075 [INFO][4746] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="8dfb201cc5128b311c155977b680c217ef2c6ee95c94fbcf79e25f33dc6da9c5" Namespace="kube-system" Pod="coredns-674b8bbfcf-zgm5l" WorkloadEndpoint="ip--172--31--24--47-k8s-coredns--674b8bbfcf--zgm5l-eth0" Nov 1 00:13:07.553395 env[1820]: 2025-11-01 00:13:07.234 [INFO][4815] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="8dfb201cc5128b311c155977b680c217ef2c6ee95c94fbcf79e25f33dc6da9c5" HandleID="k8s-pod-network.8dfb201cc5128b311c155977b680c217ef2c6ee95c94fbcf79e25f33dc6da9c5" Workload="ip--172--31--24--47-k8s-coredns--674b8bbfcf--zgm5l-eth0" Nov 1 00:13:07.553395 env[1820]: 2025-11-01 00:13:07.239 [INFO][4815] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="8dfb201cc5128b311c155977b680c217ef2c6ee95c94fbcf79e25f33dc6da9c5" HandleID="k8s-pod-network.8dfb201cc5128b311c155977b680c217ef2c6ee95c94fbcf79e25f33dc6da9c5" Workload="ip--172--31--24--47-k8s-coredns--674b8bbfcf--zgm5l-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400024b700), Attrs:map[string]string{"namespace":"kube-system", "node":"ip-172-31-24-47", "pod":"coredns-674b8bbfcf-zgm5l", "timestamp":"2025-11-01 00:13:07.234176792 +0000 UTC"}, Hostname:"ip-172-31-24-47", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:13:07.553395 env[1820]: 2025-11-01 00:13:07.239 [INFO][4815] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:13:07.553395 env[1820]: 2025-11-01 00:13:07.240 [INFO][4815] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:13:07.553395 env[1820]: 2025-11-01 00:13:07.240 [INFO][4815] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-24-47' Nov 1 00:13:07.553395 env[1820]: 2025-11-01 00:13:07.312 [INFO][4815] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.8dfb201cc5128b311c155977b680c217ef2c6ee95c94fbcf79e25f33dc6da9c5" host="ip-172-31-24-47" Nov 1 00:13:07.553395 env[1820]: 2025-11-01 00:13:07.347 [INFO][4815] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-24-47" Nov 1 00:13:07.553395 env[1820]: 2025-11-01 00:13:07.363 [INFO][4815] ipam/ipam.go 511: Trying affinity for 192.168.49.64/26 host="ip-172-31-24-47" Nov 1 00:13:07.553395 env[1820]: 2025-11-01 00:13:07.368 [INFO][4815] ipam/ipam.go 158: Attempting to load block cidr=192.168.49.64/26 host="ip-172-31-24-47" Nov 1 00:13:07.553395 env[1820]: 2025-11-01 00:13:07.376 [INFO][4815] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.49.64/26 host="ip-172-31-24-47" Nov 1 00:13:07.553395 env[1820]: 2025-11-01 00:13:07.377 [INFO][4815] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.49.64/26 handle="k8s-pod-network.8dfb201cc5128b311c155977b680c217ef2c6ee95c94fbcf79e25f33dc6da9c5" host="ip-172-31-24-47" Nov 1 00:13:07.553395 env[1820]: 2025-11-01 00:13:07.380 [INFO][4815] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.8dfb201cc5128b311c155977b680c217ef2c6ee95c94fbcf79e25f33dc6da9c5 Nov 1 00:13:07.553395 env[1820]: 2025-11-01 00:13:07.400 [INFO][4815] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.49.64/26 handle="k8s-pod-network.8dfb201cc5128b311c155977b680c217ef2c6ee95c94fbcf79e25f33dc6da9c5" host="ip-172-31-24-47" Nov 1 00:13:07.553395 env[1820]: 2025-11-01 00:13:07.417 [INFO][4815] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.49.70/26] block=192.168.49.64/26 handle="k8s-pod-network.8dfb201cc5128b311c155977b680c217ef2c6ee95c94fbcf79e25f33dc6da9c5" host="ip-172-31-24-47" Nov 1 00:13:07.553395 env[1820]: 2025-11-01 00:13:07.417 [INFO][4815] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.49.70/26] handle="k8s-pod-network.8dfb201cc5128b311c155977b680c217ef2c6ee95c94fbcf79e25f33dc6da9c5" host="ip-172-31-24-47" Nov 1 00:13:07.553395 env[1820]: 2025-11-01 00:13:07.419 [INFO][4815] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:13:07.553395 env[1820]: 2025-11-01 00:13:07.419 [INFO][4815] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.49.70/26] IPv6=[] ContainerID="8dfb201cc5128b311c155977b680c217ef2c6ee95c94fbcf79e25f33dc6da9c5" HandleID="k8s-pod-network.8dfb201cc5128b311c155977b680c217ef2c6ee95c94fbcf79e25f33dc6da9c5" Workload="ip--172--31--24--47-k8s-coredns--674b8bbfcf--zgm5l-eth0" Nov 1 00:13:07.554904 env[1820]: 2025-11-01 00:13:07.428 [INFO][4746] cni-plugin/k8s.go 418: Populated endpoint ContainerID="8dfb201cc5128b311c155977b680c217ef2c6ee95c94fbcf79e25f33dc6da9c5" Namespace="kube-system" Pod="coredns-674b8bbfcf-zgm5l" WorkloadEndpoint="ip--172--31--24--47-k8s-coredns--674b8bbfcf--zgm5l-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--24--47-k8s-coredns--674b8bbfcf--zgm5l-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"7dfbc4c3-4aed-49cd-a78d-d346944385a4", ResourceVersion:"1074", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 12, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-24-47", ContainerID:"", Pod:"coredns-674b8bbfcf-zgm5l", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.49.70/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calid21f6a348b3", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:13:07.554904 env[1820]: 2025-11-01 00:13:07.428 [INFO][4746] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.49.70/32] ContainerID="8dfb201cc5128b311c155977b680c217ef2c6ee95c94fbcf79e25f33dc6da9c5" Namespace="kube-system" Pod="coredns-674b8bbfcf-zgm5l" WorkloadEndpoint="ip--172--31--24--47-k8s-coredns--674b8bbfcf--zgm5l-eth0" Nov 1 00:13:07.554904 env[1820]: 2025-11-01 00:13:07.429 [INFO][4746] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calid21f6a348b3 ContainerID="8dfb201cc5128b311c155977b680c217ef2c6ee95c94fbcf79e25f33dc6da9c5" Namespace="kube-system" Pod="coredns-674b8bbfcf-zgm5l" WorkloadEndpoint="ip--172--31--24--47-k8s-coredns--674b8bbfcf--zgm5l-eth0" Nov 1 00:13:07.554904 env[1820]: 2025-11-01 00:13:07.460 [INFO][4746] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="8dfb201cc5128b311c155977b680c217ef2c6ee95c94fbcf79e25f33dc6da9c5" Namespace="kube-system" Pod="coredns-674b8bbfcf-zgm5l" WorkloadEndpoint="ip--172--31--24--47-k8s-coredns--674b8bbfcf--zgm5l-eth0" Nov 1 00:13:07.554904 env[1820]: 2025-11-01 00:13:07.461 [INFO][4746] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="8dfb201cc5128b311c155977b680c217ef2c6ee95c94fbcf79e25f33dc6da9c5" Namespace="kube-system" Pod="coredns-674b8bbfcf-zgm5l" WorkloadEndpoint="ip--172--31--24--47-k8s-coredns--674b8bbfcf--zgm5l-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--24--47-k8s-coredns--674b8bbfcf--zgm5l-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"7dfbc4c3-4aed-49cd-a78d-d346944385a4", ResourceVersion:"1074", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 12, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-24-47", ContainerID:"8dfb201cc5128b311c155977b680c217ef2c6ee95c94fbcf79e25f33dc6da9c5", Pod:"coredns-674b8bbfcf-zgm5l", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.49.70/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calid21f6a348b3", MAC:"7e:fe:02:0d:2d:75", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:13:07.554904 env[1820]: 2025-11-01 00:13:07.523 [INFO][4746] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="8dfb201cc5128b311c155977b680c217ef2c6ee95c94fbcf79e25f33dc6da9c5" Namespace="kube-system" Pod="coredns-674b8bbfcf-zgm5l" WorkloadEndpoint="ip--172--31--24--47-k8s-coredns--674b8bbfcf--zgm5l-eth0" Nov 1 00:13:07.557834 systemd-logind[1813]: New session 9 of user core. Nov 1 00:13:07.558951 systemd[1]: Started session-9.scope. Nov 1 00:13:07.578000 audit[4841]: USER_START pid=4841 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:07.581000 audit[4858]: CRED_ACQ pid=4858 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:07.614531 env[1820]: time="2025-11-01T00:13:07.614471120Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-h7lrq,Uid:e0c48ca1-c3ce-4df4-a9c4-ebf24818e57a,Namespace:calico-system,Attempt:1,} returns sandbox id \"f2d9b3fb2f8dedcfd229d89dabf38cdfe068b875257416ffe95bd86dd9fdd9b7\"" Nov 1 00:13:07.617853 env[1820]: time="2025-11-01T00:13:07.617796291Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Nov 1 00:13:07.642111 env[1820]: time="2025-11-01T00:13:07.640228439Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:13:07.642111 env[1820]: time="2025-11-01T00:13:07.640321860Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:13:07.642111 env[1820]: time="2025-11-01T00:13:07.640349256Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:13:07.642111 env[1820]: time="2025-11-01T00:13:07.640614194Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8dfb201cc5128b311c155977b680c217ef2c6ee95c94fbcf79e25f33dc6da9c5 pid=4866 runtime=io.containerd.runc.v2 Nov 1 00:13:07.717255 systemd[1]: Started cri-containerd-8dfb201cc5128b311c155977b680c217ef2c6ee95c94fbcf79e25f33dc6da9c5.scope. Nov 1 00:13:07.748046 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Nov 1 00:13:07.748174 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calia901c24fd98: link becomes ready Nov 1 00:13:07.748650 systemd-networkd[1539]: calia901c24fd98: Link UP Nov 1 00:13:07.749078 systemd-networkd[1539]: calia901c24fd98: Gained carrier Nov 1 00:13:07.857258 systemd-networkd[1539]: cali32c22eab15c: Gained IPv6LL Nov 1 00:13:07.879515 env[1820]: time="2025-11-01T00:13:07.879453821Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:13:07.882086 env[1820]: time="2025-11-01T00:13:07.881984647Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Nov 1 00:13:07.883194 kubelet[2832]: E1101 00:13:07.882532 2832 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:13:07.883194 kubelet[2832]: E1101 00:13:07.882602 2832 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:13:07.883194 kubelet[2832]: E1101 00:13:07.882796 2832 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-q2n49,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-666569f655-h7lrq_calico-system(e0c48ca1-c3ce-4df4-a9c4-ebf24818e57a): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Nov 1 00:13:07.884403 kubelet[2832]: E1101 00:13:07.884313 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-h7lrq" podUID="e0c48ca1-c3ce-4df4-a9c4-ebf24818e57a" Nov 1 00:13:07.911572 env[1820]: 2025-11-01 00:13:07.048 [INFO][4782] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Nov 1 00:13:07.911572 env[1820]: 2025-11-01 00:13:07.109 [INFO][4782] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--24--47-k8s-calico--apiserver--789667c9c4--fpxfk-eth0 calico-apiserver-789667c9c4- calico-apiserver 2015b9d0-1146-401a-9af6-fcdda8aedfda 1076 0 2025-11-01 00:12:27 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:789667c9c4 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ip-172-31-24-47 calico-apiserver-789667c9c4-fpxfk eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calia901c24fd98 [] [] }} ContainerID="198c5147a2b766364fa6f0e8e9b0c55151848e6a014ea1a834e156f1f5031100" Namespace="calico-apiserver" Pod="calico-apiserver-789667c9c4-fpxfk" WorkloadEndpoint="ip--172--31--24--47-k8s-calico--apiserver--789667c9c4--fpxfk-" Nov 1 00:13:07.911572 env[1820]: 2025-11-01 00:13:07.109 [INFO][4782] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="198c5147a2b766364fa6f0e8e9b0c55151848e6a014ea1a834e156f1f5031100" Namespace="calico-apiserver" Pod="calico-apiserver-789667c9c4-fpxfk" WorkloadEndpoint="ip--172--31--24--47-k8s-calico--apiserver--789667c9c4--fpxfk-eth0" Nov 1 00:13:07.911572 env[1820]: 2025-11-01 00:13:07.279 [INFO][4821] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="198c5147a2b766364fa6f0e8e9b0c55151848e6a014ea1a834e156f1f5031100" HandleID="k8s-pod-network.198c5147a2b766364fa6f0e8e9b0c55151848e6a014ea1a834e156f1f5031100" Workload="ip--172--31--24--47-k8s-calico--apiserver--789667c9c4--fpxfk-eth0" Nov 1 00:13:07.911572 env[1820]: 2025-11-01 00:13:07.281 [INFO][4821] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="198c5147a2b766364fa6f0e8e9b0c55151848e6a014ea1a834e156f1f5031100" HandleID="k8s-pod-network.198c5147a2b766364fa6f0e8e9b0c55151848e6a014ea1a834e156f1f5031100" Workload="ip--172--31--24--47-k8s-calico--apiserver--789667c9c4--fpxfk-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002cb660), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ip-172-31-24-47", "pod":"calico-apiserver-789667c9c4-fpxfk", "timestamp":"2025-11-01 00:13:07.279450808 +0000 UTC"}, Hostname:"ip-172-31-24-47", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:13:07.911572 env[1820]: 2025-11-01 00:13:07.281 [INFO][4821] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:13:07.911572 env[1820]: 2025-11-01 00:13:07.418 [INFO][4821] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:13:07.911572 env[1820]: 2025-11-01 00:13:07.418 [INFO][4821] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-24-47' Nov 1 00:13:07.911572 env[1820]: 2025-11-01 00:13:07.482 [INFO][4821] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.198c5147a2b766364fa6f0e8e9b0c55151848e6a014ea1a834e156f1f5031100" host="ip-172-31-24-47" Nov 1 00:13:07.911572 env[1820]: 2025-11-01 00:13:07.537 [INFO][4821] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-24-47" Nov 1 00:13:07.911572 env[1820]: 2025-11-01 00:13:07.599 [INFO][4821] ipam/ipam.go 511: Trying affinity for 192.168.49.64/26 host="ip-172-31-24-47" Nov 1 00:13:07.911572 env[1820]: 2025-11-01 00:13:07.606 [INFO][4821] ipam/ipam.go 158: Attempting to load block cidr=192.168.49.64/26 host="ip-172-31-24-47" Nov 1 00:13:07.911572 env[1820]: 2025-11-01 00:13:07.625 [INFO][4821] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.49.64/26 host="ip-172-31-24-47" Nov 1 00:13:07.911572 env[1820]: 2025-11-01 00:13:07.625 [INFO][4821] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.49.64/26 handle="k8s-pod-network.198c5147a2b766364fa6f0e8e9b0c55151848e6a014ea1a834e156f1f5031100" host="ip-172-31-24-47" Nov 1 00:13:07.911572 env[1820]: 2025-11-01 00:13:07.631 [INFO][4821] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.198c5147a2b766364fa6f0e8e9b0c55151848e6a014ea1a834e156f1f5031100 Nov 1 00:13:07.911572 env[1820]: 2025-11-01 00:13:07.650 [INFO][4821] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.49.64/26 handle="k8s-pod-network.198c5147a2b766364fa6f0e8e9b0c55151848e6a014ea1a834e156f1f5031100" host="ip-172-31-24-47" Nov 1 00:13:07.911572 env[1820]: 2025-11-01 00:13:07.707 [INFO][4821] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.49.71/26] block=192.168.49.64/26 handle="k8s-pod-network.198c5147a2b766364fa6f0e8e9b0c55151848e6a014ea1a834e156f1f5031100" host="ip-172-31-24-47" Nov 1 00:13:07.911572 env[1820]: 2025-11-01 00:13:07.707 [INFO][4821] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.49.71/26] handle="k8s-pod-network.198c5147a2b766364fa6f0e8e9b0c55151848e6a014ea1a834e156f1f5031100" host="ip-172-31-24-47" Nov 1 00:13:07.911572 env[1820]: 2025-11-01 00:13:07.707 [INFO][4821] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:13:07.911572 env[1820]: 2025-11-01 00:13:07.707 [INFO][4821] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.49.71/26] IPv6=[] ContainerID="198c5147a2b766364fa6f0e8e9b0c55151848e6a014ea1a834e156f1f5031100" HandleID="k8s-pod-network.198c5147a2b766364fa6f0e8e9b0c55151848e6a014ea1a834e156f1f5031100" Workload="ip--172--31--24--47-k8s-calico--apiserver--789667c9c4--fpxfk-eth0" Nov 1 00:13:07.912930 env[1820]: 2025-11-01 00:13:07.734 [INFO][4782] cni-plugin/k8s.go 418: Populated endpoint ContainerID="198c5147a2b766364fa6f0e8e9b0c55151848e6a014ea1a834e156f1f5031100" Namespace="calico-apiserver" Pod="calico-apiserver-789667c9c4-fpxfk" WorkloadEndpoint="ip--172--31--24--47-k8s-calico--apiserver--789667c9c4--fpxfk-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--24--47-k8s-calico--apiserver--789667c9c4--fpxfk-eth0", GenerateName:"calico-apiserver-789667c9c4-", Namespace:"calico-apiserver", SelfLink:"", UID:"2015b9d0-1146-401a-9af6-fcdda8aedfda", ResourceVersion:"1076", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 12, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"789667c9c4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-24-47", ContainerID:"", Pod:"calico-apiserver-789667c9c4-fpxfk", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.49.71/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calia901c24fd98", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:13:07.912930 env[1820]: 2025-11-01 00:13:07.734 [INFO][4782] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.49.71/32] ContainerID="198c5147a2b766364fa6f0e8e9b0c55151848e6a014ea1a834e156f1f5031100" Namespace="calico-apiserver" Pod="calico-apiserver-789667c9c4-fpxfk" WorkloadEndpoint="ip--172--31--24--47-k8s-calico--apiserver--789667c9c4--fpxfk-eth0" Nov 1 00:13:07.912930 env[1820]: 2025-11-01 00:13:07.734 [INFO][4782] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calia901c24fd98 ContainerID="198c5147a2b766364fa6f0e8e9b0c55151848e6a014ea1a834e156f1f5031100" Namespace="calico-apiserver" Pod="calico-apiserver-789667c9c4-fpxfk" WorkloadEndpoint="ip--172--31--24--47-k8s-calico--apiserver--789667c9c4--fpxfk-eth0" Nov 1 00:13:07.912930 env[1820]: 2025-11-01 00:13:07.756 [INFO][4782] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="198c5147a2b766364fa6f0e8e9b0c55151848e6a014ea1a834e156f1f5031100" Namespace="calico-apiserver" Pod="calico-apiserver-789667c9c4-fpxfk" WorkloadEndpoint="ip--172--31--24--47-k8s-calico--apiserver--789667c9c4--fpxfk-eth0" Nov 1 00:13:07.912930 env[1820]: 2025-11-01 00:13:07.764 [INFO][4782] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="198c5147a2b766364fa6f0e8e9b0c55151848e6a014ea1a834e156f1f5031100" Namespace="calico-apiserver" Pod="calico-apiserver-789667c9c4-fpxfk" WorkloadEndpoint="ip--172--31--24--47-k8s-calico--apiserver--789667c9c4--fpxfk-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--24--47-k8s-calico--apiserver--789667c9c4--fpxfk-eth0", GenerateName:"calico-apiserver-789667c9c4-", Namespace:"calico-apiserver", SelfLink:"", UID:"2015b9d0-1146-401a-9af6-fcdda8aedfda", ResourceVersion:"1076", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 12, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"789667c9c4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-24-47", ContainerID:"198c5147a2b766364fa6f0e8e9b0c55151848e6a014ea1a834e156f1f5031100", Pod:"calico-apiserver-789667c9c4-fpxfk", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.49.71/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calia901c24fd98", MAC:"ae:bb:fd:f5:9a:77", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:13:07.912930 env[1820]: 2025-11-01 00:13:07.877 [INFO][4782] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="198c5147a2b766364fa6f0e8e9b0c55151848e6a014ea1a834e156f1f5031100" Namespace="calico-apiserver" Pod="calico-apiserver-789667c9c4-fpxfk" WorkloadEndpoint="ip--172--31--24--47-k8s-calico--apiserver--789667c9c4--fpxfk-eth0" Nov 1 00:13:07.953512 env[1820]: time="2025-11-01T00:13:07.953363985Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:13:07.953785 env[1820]: time="2025-11-01T00:13:07.953729483Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:13:07.953994 env[1820]: time="2025-11-01T00:13:07.953923140Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:13:07.954550 env[1820]: time="2025-11-01T00:13:07.954479332Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/198c5147a2b766364fa6f0e8e9b0c55151848e6a014ea1a834e156f1f5031100 pid=4914 runtime=io.containerd.runc.v2 Nov 1 00:13:07.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.995000 audit: BPF prog-id=166 op=LOAD Nov 1 00:13:07.996000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.996000 audit[4876]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4866 pid=4876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:07.996000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864666232303163633531323862333131633135353937376236383063 Nov 1 00:13:07.996000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.996000 audit[4876]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4866 pid=4876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:07.996000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864666232303163633531323862333131633135353937376236383063 Nov 1 00:13:07.996000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.996000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.996000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.996000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.996000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.996000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.996000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.996000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.996000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.996000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.996000 audit: BPF prog-id=167 op=LOAD Nov 1 00:13:07.996000 audit[4876]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4866 pid=4876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:07.996000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864666232303163633531323862333131633135353937376236383063 Nov 1 00:13:07.997000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.997000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.997000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.997000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.997000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.997000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.997000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.997000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.997000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:07.997000 audit: BPF prog-id=168 op=LOAD Nov 1 00:13:07.997000 audit[4876]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4866 pid=4876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:07.997000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864666232303163633531323862333131633135353937376236383063 Nov 1 00:13:07.997000 audit: BPF prog-id=168 op=UNLOAD Nov 1 00:13:07.997000 audit: BPF prog-id=167 op=UNLOAD Nov 1 00:13:08.002000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.002000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.002000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.002000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.002000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.002000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.002000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.002000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.002000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.002000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.002000 audit: BPF prog-id=169 op=LOAD Nov 1 00:13:08.002000 audit[4876]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4866 pid=4876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:08.002000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864666232303163633531323862333131633135353937376236383063 Nov 1 00:13:08.055679 systemd[1]: run-containerd-runc-k8s.io-198c5147a2b766364fa6f0e8e9b0c55151848e6a014ea1a834e156f1f5031100-runc.b5JXii.mount: Deactivated successfully. Nov 1 00:13:08.068267 systemd[1]: Started cri-containerd-198c5147a2b766364fa6f0e8e9b0c55151848e6a014ea1a834e156f1f5031100.scope. Nov 1 00:13:08.110763 sshd[4841]: pam_unix(sshd:session): session closed for user core Nov 1 00:13:08.111000 audit[4841]: USER_END pid=4841 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:08.112000 audit[4841]: CRED_DISP pid=4841 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:08.117586 systemd[1]: sshd@8-172.31.24.47:22-147.75.109.163:47692.service: Deactivated successfully. Nov 1 00:13:08.119119 systemd[1]: session-9.scope: Deactivated successfully. Nov 1 00:13:08.117000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.24.47:22-147.75.109.163:47692 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:08.120891 systemd-logind[1813]: Session 9 logged out. Waiting for processes to exit. Nov 1 00:13:08.125064 systemd-logind[1813]: Removed session 9. Nov 1 00:13:08.127711 systemd-networkd[1539]: cali46a14ec6bdd: Link UP Nov 1 00:13:08.132203 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali46a14ec6bdd: link becomes ready Nov 1 00:13:08.131844 systemd-networkd[1539]: cali46a14ec6bdd: Gained carrier Nov 1 00:13:08.185259 env[1820]: 2025-11-01 00:13:07.174 [INFO][4793] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--24--47-k8s-calico--kube--controllers--5d8bd955b8--hbwc2-eth0 calico-kube-controllers-5d8bd955b8- calico-system 7f4cf6fd-6544-4217-95df-022c9368163b 1075 0 2025-11-01 00:12:38 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:5d8bd955b8 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s ip-172-31-24-47 calico-kube-controllers-5d8bd955b8-hbwc2 eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali46a14ec6bdd [] [] }} ContainerID="7a25da3305b0c4fe9010a2614994f697cbfd23c9707ee5555984fce046287b50" Namespace="calico-system" Pod="calico-kube-controllers-5d8bd955b8-hbwc2" WorkloadEndpoint="ip--172--31--24--47-k8s-calico--kube--controllers--5d8bd955b8--hbwc2-" Nov 1 00:13:08.185259 env[1820]: 2025-11-01 00:13:07.174 [INFO][4793] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="7a25da3305b0c4fe9010a2614994f697cbfd23c9707ee5555984fce046287b50" Namespace="calico-system" Pod="calico-kube-controllers-5d8bd955b8-hbwc2" WorkloadEndpoint="ip--172--31--24--47-k8s-calico--kube--controllers--5d8bd955b8--hbwc2-eth0" Nov 1 00:13:08.185259 env[1820]: 2025-11-01 00:13:07.337 [INFO][4832] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="7a25da3305b0c4fe9010a2614994f697cbfd23c9707ee5555984fce046287b50" HandleID="k8s-pod-network.7a25da3305b0c4fe9010a2614994f697cbfd23c9707ee5555984fce046287b50" Workload="ip--172--31--24--47-k8s-calico--kube--controllers--5d8bd955b8--hbwc2-eth0" Nov 1 00:13:08.185259 env[1820]: 2025-11-01 00:13:07.338 [INFO][4832] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="7a25da3305b0c4fe9010a2614994f697cbfd23c9707ee5555984fce046287b50" HandleID="k8s-pod-network.7a25da3305b0c4fe9010a2614994f697cbfd23c9707ee5555984fce046287b50" Workload="ip--172--31--24--47-k8s-calico--kube--controllers--5d8bd955b8--hbwc2-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002ab3e0), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-24-47", "pod":"calico-kube-controllers-5d8bd955b8-hbwc2", "timestamp":"2025-11-01 00:13:07.33755225 +0000 UTC"}, Hostname:"ip-172-31-24-47", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:13:08.185259 env[1820]: 2025-11-01 00:13:07.338 [INFO][4832] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:13:08.185259 env[1820]: 2025-11-01 00:13:07.710 [INFO][4832] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:13:08.185259 env[1820]: 2025-11-01 00:13:07.710 [INFO][4832] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-24-47' Nov 1 00:13:08.185259 env[1820]: 2025-11-01 00:13:07.815 [INFO][4832] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.7a25da3305b0c4fe9010a2614994f697cbfd23c9707ee5555984fce046287b50" host="ip-172-31-24-47" Nov 1 00:13:08.185259 env[1820]: 2025-11-01 00:13:07.885 [INFO][4832] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-24-47" Nov 1 00:13:08.185259 env[1820]: 2025-11-01 00:13:07.943 [INFO][4832] ipam/ipam.go 511: Trying affinity for 192.168.49.64/26 host="ip-172-31-24-47" Nov 1 00:13:08.185259 env[1820]: 2025-11-01 00:13:07.955 [INFO][4832] ipam/ipam.go 158: Attempting to load block cidr=192.168.49.64/26 host="ip-172-31-24-47" Nov 1 00:13:08.185259 env[1820]: 2025-11-01 00:13:07.974 [INFO][4832] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.49.64/26 host="ip-172-31-24-47" Nov 1 00:13:08.185259 env[1820]: 2025-11-01 00:13:07.974 [INFO][4832] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.49.64/26 handle="k8s-pod-network.7a25da3305b0c4fe9010a2614994f697cbfd23c9707ee5555984fce046287b50" host="ip-172-31-24-47" Nov 1 00:13:08.185259 env[1820]: 2025-11-01 00:13:07.981 [INFO][4832] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.7a25da3305b0c4fe9010a2614994f697cbfd23c9707ee5555984fce046287b50 Nov 1 00:13:08.185259 env[1820]: 2025-11-01 00:13:08.048 [INFO][4832] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.49.64/26 handle="k8s-pod-network.7a25da3305b0c4fe9010a2614994f697cbfd23c9707ee5555984fce046287b50" host="ip-172-31-24-47" Nov 1 00:13:08.185259 env[1820]: 2025-11-01 00:13:08.094 [INFO][4832] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.49.72/26] block=192.168.49.64/26 handle="k8s-pod-network.7a25da3305b0c4fe9010a2614994f697cbfd23c9707ee5555984fce046287b50" host="ip-172-31-24-47" Nov 1 00:13:08.185259 env[1820]: 2025-11-01 00:13:08.094 [INFO][4832] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.49.72/26] handle="k8s-pod-network.7a25da3305b0c4fe9010a2614994f697cbfd23c9707ee5555984fce046287b50" host="ip-172-31-24-47" Nov 1 00:13:08.185259 env[1820]: 2025-11-01 00:13:08.094 [INFO][4832] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:13:08.185259 env[1820]: 2025-11-01 00:13:08.094 [INFO][4832] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.49.72/26] IPv6=[] ContainerID="7a25da3305b0c4fe9010a2614994f697cbfd23c9707ee5555984fce046287b50" HandleID="k8s-pod-network.7a25da3305b0c4fe9010a2614994f697cbfd23c9707ee5555984fce046287b50" Workload="ip--172--31--24--47-k8s-calico--kube--controllers--5d8bd955b8--hbwc2-eth0" Nov 1 00:13:08.186677 env[1820]: 2025-11-01 00:13:08.100 [INFO][4793] cni-plugin/k8s.go 418: Populated endpoint ContainerID="7a25da3305b0c4fe9010a2614994f697cbfd23c9707ee5555984fce046287b50" Namespace="calico-system" Pod="calico-kube-controllers-5d8bd955b8-hbwc2" WorkloadEndpoint="ip--172--31--24--47-k8s-calico--kube--controllers--5d8bd955b8--hbwc2-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--24--47-k8s-calico--kube--controllers--5d8bd955b8--hbwc2-eth0", GenerateName:"calico-kube-controllers-5d8bd955b8-", Namespace:"calico-system", SelfLink:"", UID:"7f4cf6fd-6544-4217-95df-022c9368163b", ResourceVersion:"1075", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 12, 38, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"5d8bd955b8", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-24-47", ContainerID:"", Pod:"calico-kube-controllers-5d8bd955b8-hbwc2", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.49.72/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali46a14ec6bdd", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:13:08.186677 env[1820]: 2025-11-01 00:13:08.100 [INFO][4793] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.49.72/32] ContainerID="7a25da3305b0c4fe9010a2614994f697cbfd23c9707ee5555984fce046287b50" Namespace="calico-system" Pod="calico-kube-controllers-5d8bd955b8-hbwc2" WorkloadEndpoint="ip--172--31--24--47-k8s-calico--kube--controllers--5d8bd955b8--hbwc2-eth0" Nov 1 00:13:08.186677 env[1820]: 2025-11-01 00:13:08.100 [INFO][4793] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali46a14ec6bdd ContainerID="7a25da3305b0c4fe9010a2614994f697cbfd23c9707ee5555984fce046287b50" Namespace="calico-system" Pod="calico-kube-controllers-5d8bd955b8-hbwc2" WorkloadEndpoint="ip--172--31--24--47-k8s-calico--kube--controllers--5d8bd955b8--hbwc2-eth0" Nov 1 00:13:08.186677 env[1820]: 2025-11-01 00:13:08.133 [INFO][4793] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="7a25da3305b0c4fe9010a2614994f697cbfd23c9707ee5555984fce046287b50" Namespace="calico-system" Pod="calico-kube-controllers-5d8bd955b8-hbwc2" WorkloadEndpoint="ip--172--31--24--47-k8s-calico--kube--controllers--5d8bd955b8--hbwc2-eth0" Nov 1 00:13:08.186677 env[1820]: 2025-11-01 00:13:08.135 [INFO][4793] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="7a25da3305b0c4fe9010a2614994f697cbfd23c9707ee5555984fce046287b50" Namespace="calico-system" Pod="calico-kube-controllers-5d8bd955b8-hbwc2" WorkloadEndpoint="ip--172--31--24--47-k8s-calico--kube--controllers--5d8bd955b8--hbwc2-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--24--47-k8s-calico--kube--controllers--5d8bd955b8--hbwc2-eth0", GenerateName:"calico-kube-controllers-5d8bd955b8-", Namespace:"calico-system", SelfLink:"", UID:"7f4cf6fd-6544-4217-95df-022c9368163b", ResourceVersion:"1075", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 12, 38, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"5d8bd955b8", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-24-47", ContainerID:"7a25da3305b0c4fe9010a2614994f697cbfd23c9707ee5555984fce046287b50", Pod:"calico-kube-controllers-5d8bd955b8-hbwc2", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.49.72/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali46a14ec6bdd", MAC:"da:0c:6e:19:9b:02", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:13:08.186677 env[1820]: 2025-11-01 00:13:08.178 [INFO][4793] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="7a25da3305b0c4fe9010a2614994f697cbfd23c9707ee5555984fce046287b50" Namespace="calico-system" Pod="calico-kube-controllers-5d8bd955b8-hbwc2" WorkloadEndpoint="ip--172--31--24--47-k8s-calico--kube--controllers--5d8bd955b8--hbwc2-eth0" Nov 1 00:13:08.238107 env[1820]: time="2025-11-01T00:13:08.237898591Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:13:08.238107 env[1820]: time="2025-11-01T00:13:08.238019828Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:13:08.238475 env[1820]: time="2025-11-01T00:13:08.238064096Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:13:08.246107 env[1820]: time="2025-11-01T00:13:08.241119074Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/7a25da3305b0c4fe9010a2614994f697cbfd23c9707ee5555984fce046287b50 pid=4950 runtime=io.containerd.runc.v2 Nov 1 00:13:08.263070 env[1820]: time="2025-11-01T00:13:08.262896944Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-zgm5l,Uid:7dfbc4c3-4aed-49cd-a78d-d346944385a4,Namespace:kube-system,Attempt:1,} returns sandbox id \"8dfb201cc5128b311c155977b680c217ef2c6ee95c94fbcf79e25f33dc6da9c5\"" Nov 1 00:13:08.288820 env[1820]: time="2025-11-01T00:13:08.288757190Z" level=info msg="CreateContainer within sandbox \"8dfb201cc5128b311c155977b680c217ef2c6ee95c94fbcf79e25f33dc6da9c5\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Nov 1 00:13:08.319767 systemd[1]: Started cri-containerd-7a25da3305b0c4fe9010a2614994f697cbfd23c9707ee5555984fce046287b50.scope. Nov 1 00:13:08.371645 env[1820]: time="2025-11-01T00:13:08.371539874Z" level=info msg="CreateContainer within sandbox \"8dfb201cc5128b311c155977b680c217ef2c6ee95c94fbcf79e25f33dc6da9c5\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"55229431ec29cde2ddaef8fa0fcadb267ac448ca1f805c1857709c5c411a4fc6\"" Nov 1 00:13:08.374776 env[1820]: time="2025-11-01T00:13:08.374714756Z" level=info msg="StartContainer for \"55229431ec29cde2ddaef8fa0fcadb267ac448ca1f805c1857709c5c411a4fc6\"" Nov 1 00:13:08.404405 kubelet[2832]: E1101 00:13:08.403824 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-h7lrq" podUID="e0c48ca1-c3ce-4df4-a9c4-ebf24818e57a" Nov 1 00:13:08.463154 systemd[1]: Started cri-containerd-55229431ec29cde2ddaef8fa0fcadb267ac448ca1f805c1857709c5c411a4fc6.scope. Nov 1 00:13:08.515000 audit[5009]: AVC avc: denied { bpf } for pid=5009 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.515000 audit[5009]: AVC avc: denied { bpf } for pid=5009 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.515000 audit[5009]: AVC avc: denied { perfmon } for pid=5009 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.515000 audit[5009]: AVC avc: denied { perfmon } for pid=5009 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.515000 audit[5009]: AVC avc: denied { perfmon } for pid=5009 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.515000 audit[5009]: AVC avc: denied { perfmon } for pid=5009 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.515000 audit[5009]: AVC avc: denied { perfmon } for pid=5009 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.515000 audit[5009]: AVC avc: denied { bpf } for pid=5009 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.515000 audit[5009]: AVC avc: denied { bpf } for pid=5009 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.515000 audit: BPF prog-id=170 op=LOAD Nov 1 00:13:08.515000 audit[5009]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffc2a63148 a2=98 a3=ffffc2a63138 items=0 ppid=4221 pid=5009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:08.515000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Nov 1 00:13:08.576587 kernel: kauditd_printk_skb: 423 callbacks suppressed Nov 1 00:13:08.576868 kernel: audit: type=1400 audit(1761955988.565:1199): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.588499 kernel: audit: type=1400 audit(1761955988.576:1200): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.596474 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Nov 1 00:13:08.596610 kernel: audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 Nov 1 00:13:08.596688 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Nov 1 00:13:08.608108 kernel: audit: type=1400 audit(1761955988.576:1201): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.608225 kernel: audit: backlog limit exceeded Nov 1 00:13:08.611689 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Nov 1 00:13:08.614651 kernel: audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 Nov 1 00:13:08.614743 kernel: audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 Nov 1 00:13:08.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.576000 audit: BPF prog-id=171 op=LOAD Nov 1 00:13:08.577000 audit[4996]: AVC avc: denied { bpf } for pid=4996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.577000 audit[4996]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4866 pid=4996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:08.577000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3535323239343331656332396364653264646165663866613066636164 Nov 1 00:13:08.577000 audit[4996]: AVC avc: denied { perfmon } for pid=4996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.577000 audit[4996]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4866 pid=4996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:08.577000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3535323239343331656332396364653264646165663866613066636164 Nov 1 00:13:08.577000 audit[4996]: AVC avc: denied { bpf } for pid=4996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.577000 audit[4996]: AVC avc: denied { bpf } for pid=4996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.577000 audit[4996]: AVC avc: denied { bpf } for pid=4996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.577000 audit[4996]: AVC avc: denied { perfmon } for pid=4996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.577000 audit[4996]: AVC avc: denied { perfmon } for pid=4996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.577000 audit[4996]: AVC avc: denied { perfmon } for pid=4996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.577000 audit[4996]: AVC avc: denied { perfmon } for pid=4996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.577000 audit[4996]: AVC avc: denied { perfmon } for pid=4996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.577000 audit[4996]: AVC avc: denied { bpf } for pid=4996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.577000 audit[4996]: AVC avc: denied { bpf } for pid=4996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.577000 audit: BPF prog-id=172 op=LOAD Nov 1 00:13:08.577000 audit[4996]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4866 pid=4996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:08.577000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3535323239343331656332396364653264646165663866613066636164 Nov 1 00:13:08.578000 audit[4996]: AVC avc: denied { bpf } for pid=4996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.578000 audit[4996]: AVC avc: denied { bpf } for pid=4996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.578000 audit[4996]: AVC avc: denied { perfmon } for pid=4996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.578000 audit[4996]: AVC avc: denied { perfmon } for pid=4996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.578000 audit[4996]: AVC avc: denied { perfmon } for pid=4996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.578000 audit[4996]: AVC avc: denied { perfmon } for pid=4996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.578000 audit[4996]: AVC avc: denied { perfmon } for pid=4996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.578000 audit[4996]: AVC avc: denied { bpf } for pid=4996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.578000 audit[4996]: AVC avc: denied { bpf } for pid=4996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.578000 audit: BPF prog-id=173 op=LOAD Nov 1 00:13:08.578000 audit[4996]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4866 pid=4996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:08.578000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3535323239343331656332396364653264646165663866613066636164 Nov 1 00:13:08.578000 audit: BPF prog-id=173 op=UNLOAD Nov 1 00:13:08.578000 audit: BPF prog-id=172 op=UNLOAD Nov 1 00:13:08.578000 audit[4996]: AVC avc: denied { bpf } for pid=4996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.578000 audit[4996]: AVC avc: denied { bpf } for pid=4996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.578000 audit[4996]: AVC avc: denied { bpf } for pid=4996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.578000 audit[4996]: AVC avc: denied { perfmon } for pid=4996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.578000 audit[4996]: AVC avc: denied { perfmon } for pid=4996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.578000 audit[4996]: AVC avc: denied { perfmon } for pid=4996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.578000 audit[4996]: AVC avc: denied { perfmon } for pid=4996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.578000 audit[4996]: AVC avc: denied { perfmon } for pid=4996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.578000 audit[4996]: AVC avc: denied { bpf } for pid=4996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.578000 audit[4996]: AVC avc: denied { bpf } for pid=4996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.578000 audit: BPF prog-id=174 op=LOAD Nov 1 00:13:08.578000 audit[4996]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4866 pid=4996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:08.578000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3535323239343331656332396364653264646165663866613066636164 Nov 1 00:13:08.585000 audit[5013]: NETFILTER_CFG table=filter:115 family=2 entries=14 op=nft_register_rule pid=5013 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:13:08.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.617000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.617000 audit: BPF prog-id=175 op=LOAD Nov 1 00:13:08.618000 audit[4925]: AVC avc: denied { bpf } for pid=4925 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.618000 audit[4925]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4914 pid=4925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:08.618000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139386335313437613262373636333634666136663065386539623063 Nov 1 00:13:08.618000 audit[4925]: AVC avc: denied { perfmon } for pid=4925 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.618000 audit[4925]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4914 pid=4925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:08.618000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139386335313437613262373636333634666136663065386539623063 Nov 1 00:13:08.618000 audit[4925]: AVC avc: denied { bpf } for pid=4925 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.618000 audit[4925]: AVC avc: denied { bpf } for pid=4925 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.618000 audit[4925]: AVC avc: denied { bpf } for pid=4925 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.618000 audit[4925]: AVC avc: denied { perfmon } for pid=4925 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.618000 audit[4925]: AVC avc: denied { perfmon } for pid=4925 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.618000 audit[4925]: AVC avc: denied { perfmon } for pid=4925 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.618000 audit[4925]: AVC avc: denied { perfmon } for pid=4925 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.585000 audit[5013]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffcd2881e0 a2=0 a3=1 items=0 ppid=2988 pid=5013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:08.585000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:13:08.618000 audit[4925]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4914 pid=4925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:08.618000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139386335313437613262373636333634666136663065386539623063 Nov 1 00:13:08.626000 audit[4925]: AVC avc: denied { bpf } for pid=4925 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.626000 audit[4925]: AVC avc: denied { bpf } for pid=4925 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.626000 audit[4925]: AVC avc: denied { perfmon } for pid=4925 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.626000 audit[4925]: AVC avc: denied { perfmon } for pid=4925 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.626000 audit[4925]: AVC avc: denied { perfmon } for pid=4925 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.626000 audit[4925]: AVC avc: denied { perfmon } for pid=4925 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.626000 audit[4925]: AVC avc: denied { perfmon } for pid=4925 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.626000 audit[4925]: AVC avc: denied { bpf } for pid=4925 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.626000 audit[4925]: AVC avc: denied { bpf } for pid=4925 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.626000 audit: BPF prog-id=177 op=LOAD Nov 1 00:13:08.626000 audit[4925]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4914 pid=4925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:08.626000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139386335313437613262373636333634666136663065386539623063 Nov 1 00:13:08.628000 audit: BPF prog-id=177 op=UNLOAD Nov 1 00:13:08.628000 audit: BPF prog-id=176 op=UNLOAD Nov 1 00:13:08.628000 audit[5013]: NETFILTER_CFG table=nat:116 family=2 entries=20 op=nft_register_rule pid=5013 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:13:08.628000 audit[5013]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=ffffcd2881e0 a2=0 a3=1 items=0 ppid=2988 pid=5013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:08.628000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:13:08.628000 audit[4925]: AVC avc: denied { bpf } for pid=4925 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.628000 audit[4925]: AVC avc: denied { bpf } for pid=4925 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.628000 audit[4925]: AVC avc: denied { bpf } for pid=4925 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.628000 audit[4925]: AVC avc: denied { perfmon } for pid=4925 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.628000 audit[4925]: AVC avc: denied { perfmon } for pid=4925 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.628000 audit[4925]: AVC avc: denied { perfmon } for pid=4925 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.628000 audit[4925]: AVC avc: denied { perfmon } for pid=4925 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.628000 audit[4925]: AVC avc: denied { perfmon } for pid=4925 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.628000 audit[4925]: AVC avc: denied { bpf } for pid=4925 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.628000 audit[4925]: AVC avc: denied { bpf } for pid=4925 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.628000 audit: BPF prog-id=178 op=LOAD Nov 1 00:13:08.628000 audit[4925]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4914 pid=4925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:08.628000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139386335313437613262373636333634666136663065386539623063 Nov 1 00:13:08.656286 env[1820]: time="2025-11-01T00:13:08.656210995Z" level=info msg="StartContainer for \"55229431ec29cde2ddaef8fa0fcadb267ac448ca1f805c1857709c5c411a4fc6\" returns successfully" Nov 1 00:13:08.673000 audit[5009]: AVC avc: denied { bpf } for pid=5009 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.673000 audit[5009]: AVC avc: denied { bpf } for pid=5009 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.673000 audit[5009]: AVC avc: denied { perfmon } for pid=5009 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.673000 audit[5009]: AVC avc: denied { perfmon } for pid=5009 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.673000 audit[5009]: AVC avc: denied { perfmon } for pid=5009 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.673000 audit[5009]: AVC avc: denied { perfmon } for pid=5009 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.673000 audit[5009]: AVC avc: denied { perfmon } for pid=5009 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.673000 audit[5009]: AVC avc: denied { bpf } for pid=5009 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.673000 audit[5009]: AVC avc: denied { bpf } for pid=5009 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.673000 audit: BPF prog-id=179 op=LOAD Nov 1 00:13:08.673000 audit[5009]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffc2a62ff8 a2=74 a3=95 items=0 ppid=4221 pid=5009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:08.673000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Nov 1 00:13:08.674000 audit: BPF prog-id=179 op=UNLOAD Nov 1 00:13:08.675000 audit[5009]: AVC avc: denied { bpf } for pid=5009 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.675000 audit[5009]: AVC avc: denied { bpf } for pid=5009 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.675000 audit[5009]: AVC avc: denied { perfmon } for pid=5009 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.675000 audit[5009]: AVC avc: denied { perfmon } for pid=5009 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.675000 audit[5009]: AVC avc: denied { perfmon } for pid=5009 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.675000 audit[5009]: AVC avc: denied { perfmon } for pid=5009 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.675000 audit[5009]: AVC avc: denied { perfmon } for pid=5009 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.675000 audit[5009]: AVC avc: denied { bpf } for pid=5009 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.675000 audit[5009]: AVC avc: denied { bpf } for pid=5009 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.675000 audit: BPF prog-id=180 op=LOAD Nov 1 00:13:08.675000 audit[5009]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffc2a63028 a2=40 a3=ffffc2a63058 items=0 ppid=4221 pid=5009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:08.675000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Nov 1 00:13:08.678000 audit: BPF prog-id=180 op=UNLOAD Nov 1 00:13:08.678000 audit[5009]: AVC avc: denied { perfmon } for pid=5009 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.678000 audit[5009]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=0 a1=ffffc2a63140 a2=50 a3=0 items=0 ppid=4221 pid=5009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:08.678000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Nov 1 00:13:08.681000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.681000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.681000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.681000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.681000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.681000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.681000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.681000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.681000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.681000 audit: BPF prog-id=181 op=LOAD Nov 1 00:13:08.681000 audit[5049]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffc77e5858 a2=98 a3=ffffc77e5848 items=0 ppid=4221 pid=5049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:08.681000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:13:08.682000 audit: BPF prog-id=181 op=UNLOAD Nov 1 00:13:08.683000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.683000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.683000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.683000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.683000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.683000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.683000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.683000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.683000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.683000 audit: BPF prog-id=182 op=LOAD Nov 1 00:13:08.683000 audit[5049]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffc77e54e8 a2=74 a3=95 items=0 ppid=4221 pid=5049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:08.683000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:13:08.684000 audit: BPF prog-id=182 op=UNLOAD Nov 1 00:13:08.684000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.684000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.684000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.684000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.684000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.684000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.684000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.684000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.684000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.684000 audit: BPF prog-id=183 op=LOAD Nov 1 00:13:08.684000 audit[5049]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffc77e5548 a2=94 a3=2 items=0 ppid=4221 pid=5049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:08.684000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:13:08.686000 audit: BPF prog-id=183 op=UNLOAD Nov 1 00:13:08.693000 audit[5014]: AVC avc: denied { getattr } for pid=5014 comm="coredns" path="cgroup:[4026532993]" dev="nsfs" ino=4026532993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c104,c438 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Nov 1 00:13:08.693000 audit[5014]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=4000054810 a2=400014c578 a3=0 items=0 ppid=4866 pid=5014 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c104,c438 key=(null) Nov 1 00:13:08.693000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Nov 1 00:13:08.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.820000 audit: BPF prog-id=184 op=LOAD Nov 1 00:13:08.822000 audit[4966]: AVC avc: denied { bpf } for pid=4966 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.822000 audit[4966]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4950 pid=4966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:08.822000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761323564613333303562306334666539303130613236313439393466 Nov 1 00:13:08.823000 audit[4966]: AVC avc: denied { perfmon } for pid=4966 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.823000 audit[4966]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4950 pid=4966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:08.823000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761323564613333303562306334666539303130613236313439393466 Nov 1 00:13:08.824000 audit[4966]: AVC avc: denied { bpf } for pid=4966 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.824000 audit[4966]: AVC avc: denied { bpf } for pid=4966 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.824000 audit[4966]: AVC avc: denied { bpf } for pid=4966 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.824000 audit[4966]: AVC avc: denied { perfmon } for pid=4966 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.824000 audit[4966]: AVC avc: denied { perfmon } for pid=4966 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.824000 audit[4966]: AVC avc: denied { perfmon } for pid=4966 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.824000 audit[4966]: AVC avc: denied { perfmon } for pid=4966 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.824000 audit[4966]: AVC avc: denied { perfmon } for pid=4966 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.824000 audit[4966]: AVC avc: denied { bpf } for pid=4966 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.824000 audit[4966]: AVC avc: denied { bpf } for pid=4966 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.824000 audit: BPF prog-id=185 op=LOAD Nov 1 00:13:08.824000 audit[4966]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4950 pid=4966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:08.824000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761323564613333303562306334666539303130613236313439393466 Nov 1 00:13:08.825000 audit[4966]: AVC avc: denied { bpf } for pid=4966 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.825000 audit[4966]: AVC avc: denied { bpf } for pid=4966 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.825000 audit[4966]: AVC avc: denied { perfmon } for pid=4966 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.825000 audit[4966]: AVC avc: denied { perfmon } for pid=4966 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.825000 audit[4966]: AVC avc: denied { perfmon } for pid=4966 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.825000 audit[4966]: AVC avc: denied { perfmon } for pid=4966 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.825000 audit[4966]: AVC avc: denied { perfmon } for pid=4966 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.825000 audit[4966]: AVC avc: denied { bpf } for pid=4966 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.825000 audit[4966]: AVC avc: denied { bpf } for pid=4966 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.825000 audit: BPF prog-id=186 op=LOAD Nov 1 00:13:08.825000 audit[4966]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4950 pid=4966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:08.825000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761323564613333303562306334666539303130613236313439393466 Nov 1 00:13:08.826000 audit: BPF prog-id=186 op=UNLOAD Nov 1 00:13:08.826000 audit: BPF prog-id=185 op=UNLOAD Nov 1 00:13:08.826000 audit[4966]: AVC avc: denied { bpf } for pid=4966 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.826000 audit[4966]: AVC avc: denied { bpf } for pid=4966 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.826000 audit[4966]: AVC avc: denied { bpf } for pid=4966 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.826000 audit[4966]: AVC avc: denied { perfmon } for pid=4966 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.826000 audit[4966]: AVC avc: denied { perfmon } for pid=4966 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.826000 audit[4966]: AVC avc: denied { perfmon } for pid=4966 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.826000 audit[4966]: AVC avc: denied { perfmon } for pid=4966 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.826000 audit[4966]: AVC avc: denied { perfmon } for pid=4966 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.826000 audit[4966]: AVC avc: denied { bpf } for pid=4966 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.826000 audit[4966]: AVC avc: denied { bpf } for pid=4966 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:08.826000 audit: BPF prog-id=187 op=LOAD Nov 1 00:13:08.826000 audit[4966]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4950 pid=4966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:08.826000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761323564613333303562306334666539303130613236313439393466 Nov 1 00:13:08.881220 systemd-networkd[1539]: calid21f6a348b3: Gained IPv6LL Nov 1 00:13:08.910723 env[1820]: time="2025-11-01T00:13:08.910567697Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-789667c9c4-fpxfk,Uid:2015b9d0-1146-401a-9af6-fcdda8aedfda,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"198c5147a2b766364fa6f0e8e9b0c55151848e6a014ea1a834e156f1f5031100\"" Nov 1 00:13:08.917278 env[1820]: time="2025-11-01T00:13:08.917214691Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:13:08.947463 env[1820]: time="2025-11-01T00:13:08.947406026Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-5d8bd955b8-hbwc2,Uid:7f4cf6fd-6544-4217-95df-022c9368163b,Namespace:calico-system,Attempt:1,} returns sandbox id \"7a25da3305b0c4fe9010a2614994f697cbfd23c9707ee5555984fce046287b50\"" Nov 1 00:13:09.031000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.031000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.031000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.031000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.031000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.031000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.031000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.031000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.031000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.031000 audit: BPF prog-id=188 op=LOAD Nov 1 00:13:09.031000 audit[5049]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffc77e5508 a2=40 a3=ffffc77e5538 items=0 ppid=4221 pid=5049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.031000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:13:09.031000 audit: BPF prog-id=188 op=UNLOAD Nov 1 00:13:09.031000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.031000 audit[5049]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffc77e5620 a2=50 a3=0 items=0 ppid=4221 pid=5049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.031000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:13:09.047000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.047000 audit[5049]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc77e5578 a2=28 a3=ffffc77e56a8 items=0 ppid=4221 pid=5049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.047000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:13:09.047000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.047000 audit[5049]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc77e55a8 a2=28 a3=ffffc77e56d8 items=0 ppid=4221 pid=5049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.047000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:13:09.047000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.047000 audit[5049]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc77e5458 a2=28 a3=ffffc77e5588 items=0 ppid=4221 pid=5049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.047000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:13:09.047000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.047000 audit[5049]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc77e55c8 a2=28 a3=ffffc77e56f8 items=0 ppid=4221 pid=5049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.047000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:13:09.047000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.047000 audit[5049]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc77e55a8 a2=28 a3=ffffc77e56d8 items=0 ppid=4221 pid=5049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.047000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:13:09.047000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.047000 audit[5049]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc77e5598 a2=28 a3=ffffc77e56c8 items=0 ppid=4221 pid=5049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.047000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:13:09.047000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.047000 audit[5049]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc77e55c8 a2=28 a3=ffffc77e56f8 items=0 ppid=4221 pid=5049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.047000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:13:09.047000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.047000 audit[5049]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc77e55a8 a2=28 a3=ffffc77e56d8 items=0 ppid=4221 pid=5049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.047000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:13:09.047000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.047000 audit[5049]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc77e55c8 a2=28 a3=ffffc77e56f8 items=0 ppid=4221 pid=5049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.047000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:13:09.047000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.047000 audit[5049]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc77e5598 a2=28 a3=ffffc77e56c8 items=0 ppid=4221 pid=5049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.047000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:13:09.047000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.047000 audit[5049]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc77e5618 a2=28 a3=ffffc77e5758 items=0 ppid=4221 pid=5049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.047000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:13:09.047000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.047000 audit[5049]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffc77e5350 a2=50 a3=0 items=0 ppid=4221 pid=5049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.047000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:13:09.047000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.047000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.047000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.047000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.047000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.047000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.047000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.047000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.047000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.047000 audit: BPF prog-id=189 op=LOAD Nov 1 00:13:09.047000 audit[5049]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffc77e5358 a2=94 a3=5 items=0 ppid=4221 pid=5049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.047000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:13:09.047000 audit: BPF prog-id=189 op=UNLOAD Nov 1 00:13:09.047000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.047000 audit[5049]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffc77e5460 a2=50 a3=0 items=0 ppid=4221 pid=5049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.047000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:13:09.047000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.047000 audit[5049]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffc77e55a8 a2=4 a3=3 items=0 ppid=4221 pid=5049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.047000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:13:09.047000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.047000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.047000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.047000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.047000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.047000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.047000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.047000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.047000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.047000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.047000 audit[5049]: AVC avc: denied { confidentiality } for pid=5049 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:13:09.047000 audit[5049]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffc77e5588 a2=94 a3=6 items=0 ppid=4221 pid=5049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.047000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:13:09.048000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.048000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.048000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.048000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.048000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.048000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.048000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.048000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.048000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.048000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.048000 audit[5049]: AVC avc: denied { confidentiality } for pid=5049 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:13:09.048000 audit[5049]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffc77e4d58 a2=94 a3=83 items=0 ppid=4221 pid=5049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.048000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:13:09.048000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.048000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.048000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.048000 audit[5049]: AVC avc: denied { bpf } for pid=5049 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.048000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.048000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.048000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.048000 audit[5049]: AVC avc: denied { perfmon } for pid=5049 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.048000 audit[5049]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffc77e4d58 a2=94 a3=83 items=0 ppid=4221 pid=5049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.048000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:13:09.072000 audit[5071]: AVC avc: denied { bpf } for pid=5071 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.072000 audit[5071]: AVC avc: denied { bpf } for pid=5071 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.072000 audit[5071]: AVC avc: denied { perfmon } for pid=5071 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.072000 audit[5071]: AVC avc: denied { perfmon } for pid=5071 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.072000 audit[5071]: AVC avc: denied { perfmon } for pid=5071 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.072000 audit[5071]: AVC avc: denied { perfmon } for pid=5071 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.072000 audit[5071]: AVC avc: denied { perfmon } for pid=5071 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.072000 audit[5071]: AVC avc: denied { bpf } for pid=5071 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.072000 audit[5071]: AVC avc: denied { bpf } for pid=5071 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.072000 audit: BPF prog-id=190 op=LOAD Nov 1 00:13:09.072000 audit[5071]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff3ac3138 a2=98 a3=fffff3ac3128 items=0 ppid=4221 pid=5071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.072000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Nov 1 00:13:09.074000 audit: BPF prog-id=190 op=UNLOAD Nov 1 00:13:09.074000 audit[5071]: AVC avc: denied { bpf } for pid=5071 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.074000 audit[5071]: AVC avc: denied { bpf } for pid=5071 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.074000 audit[5071]: AVC avc: denied { perfmon } for pid=5071 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.074000 audit[5071]: AVC avc: denied { perfmon } for pid=5071 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.074000 audit[5071]: AVC avc: denied { perfmon } for pid=5071 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.074000 audit[5071]: AVC avc: denied { perfmon } for pid=5071 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.074000 audit[5071]: AVC avc: denied { perfmon } for pid=5071 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.074000 audit[5071]: AVC avc: denied { bpf } for pid=5071 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.074000 audit[5071]: AVC avc: denied { bpf } for pid=5071 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.074000 audit: BPF prog-id=191 op=LOAD Nov 1 00:13:09.074000 audit[5071]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff3ac2fe8 a2=74 a3=95 items=0 ppid=4221 pid=5071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.074000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Nov 1 00:13:09.075000 audit: BPF prog-id=191 op=UNLOAD Nov 1 00:13:09.075000 audit[5071]: AVC avc: denied { bpf } for pid=5071 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.075000 audit[5071]: AVC avc: denied { bpf } for pid=5071 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.075000 audit[5071]: AVC avc: denied { perfmon } for pid=5071 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.075000 audit[5071]: AVC avc: denied { perfmon } for pid=5071 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.075000 audit[5071]: AVC avc: denied { perfmon } for pid=5071 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.075000 audit[5071]: AVC avc: denied { perfmon } for pid=5071 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.075000 audit[5071]: AVC avc: denied { perfmon } for pid=5071 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.075000 audit[5071]: AVC avc: denied { bpf } for pid=5071 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.075000 audit[5071]: AVC avc: denied { bpf } for pid=5071 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.075000 audit: BPF prog-id=192 op=LOAD Nov 1 00:13:09.075000 audit[5071]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff3ac3018 a2=40 a3=fffff3ac3048 items=0 ppid=4221 pid=5071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.075000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Nov 1 00:13:09.077000 audit: BPF prog-id=192 op=UNLOAD Nov 1 00:13:09.181507 env[1820]: time="2025-11-01T00:13:09.181418239Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:13:09.184110 env[1820]: time="2025-11-01T00:13:09.184012822Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:13:09.185816 kubelet[2832]: E1101 00:13:09.184626 2832 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:13:09.185816 kubelet[2832]: E1101 00:13:09.184713 2832 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:13:09.185816 kubelet[2832]: E1101 00:13:09.185189 2832 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-cdsgs,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-789667c9c4-fpxfk_calico-apiserver(2015b9d0-1146-401a-9af6-fcdda8aedfda): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:13:09.186341 env[1820]: time="2025-11-01T00:13:09.185755796Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Nov 1 00:13:09.186722 kubelet[2832]: E1101 00:13:09.186613 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-789667c9c4-fpxfk" podUID="2015b9d0-1146-401a-9af6-fcdda8aedfda" Nov 1 00:13:09.258422 systemd-networkd[1539]: vxlan.calico: Link UP Nov 1 00:13:09.258437 systemd-networkd[1539]: vxlan.calico: Gained carrier Nov 1 00:13:09.308178 (udev-worker)[3981]: Network interface NamePolicy= disabled on kernel command line. Nov 1 00:13:09.319000 audit[5099]: AVC avc: denied { bpf } for pid=5099 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.319000 audit[5099]: AVC avc: denied { bpf } for pid=5099 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.319000 audit[5099]: AVC avc: denied { perfmon } for pid=5099 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.319000 audit[5099]: AVC avc: denied { perfmon } for pid=5099 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.319000 audit[5099]: AVC avc: denied { perfmon } for pid=5099 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.319000 audit[5099]: AVC avc: denied { perfmon } for pid=5099 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.319000 audit[5099]: AVC avc: denied { perfmon } for pid=5099 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.319000 audit[5099]: AVC avc: denied { bpf } for pid=5099 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.319000 audit[5099]: AVC avc: denied { bpf } for pid=5099 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.319000 audit: BPF prog-id=193 op=LOAD Nov 1 00:13:09.319000 audit[5099]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffffcfe1a58 a2=98 a3=fffffcfe1a48 items=0 ppid=4221 pid=5099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.319000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:13:09.320000 audit: BPF prog-id=193 op=UNLOAD Nov 1 00:13:09.320000 audit[5099]: AVC avc: denied { bpf } for pid=5099 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.320000 audit[5099]: AVC avc: denied { bpf } for pid=5099 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.320000 audit[5099]: AVC avc: denied { perfmon } for pid=5099 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.320000 audit[5099]: AVC avc: denied { perfmon } for pid=5099 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.320000 audit[5099]: AVC avc: denied { perfmon } for pid=5099 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.320000 audit[5099]: AVC avc: denied { perfmon } for pid=5099 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.320000 audit[5099]: AVC avc: denied { perfmon } for pid=5099 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.320000 audit[5099]: AVC avc: denied { bpf } for pid=5099 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.320000 audit[5099]: AVC avc: denied { bpf } for pid=5099 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.320000 audit: BPF prog-id=194 op=LOAD Nov 1 00:13:09.320000 audit[5099]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffffcfe1738 a2=74 a3=95 items=0 ppid=4221 pid=5099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.320000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:13:09.320000 audit: BPF prog-id=194 op=UNLOAD Nov 1 00:13:09.320000 audit[5099]: AVC avc: denied { bpf } for pid=5099 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.320000 audit[5099]: AVC avc: denied { bpf } for pid=5099 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.320000 audit[5099]: AVC avc: denied { perfmon } for pid=5099 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.320000 audit[5099]: AVC avc: denied { perfmon } for pid=5099 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.320000 audit[5099]: AVC avc: denied { perfmon } for pid=5099 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.320000 audit[5099]: AVC avc: denied { perfmon } for pid=5099 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.320000 audit[5099]: AVC avc: denied { perfmon } for pid=5099 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.320000 audit[5099]: AVC avc: denied { bpf } for pid=5099 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.320000 audit[5099]: AVC avc: denied { bpf } for pid=5099 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.320000 audit: BPF prog-id=195 op=LOAD Nov 1 00:13:09.320000 audit[5099]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffffcfe1798 a2=94 a3=2 items=0 ppid=4221 pid=5099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.320000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:13:09.320000 audit: BPF prog-id=195 op=UNLOAD Nov 1 00:13:09.320000 audit[5099]: AVC avc: denied { bpf } for pid=5099 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.320000 audit[5099]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=fffffcfe17c8 a2=28 a3=fffffcfe18f8 items=0 ppid=4221 pid=5099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.320000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:13:09.320000 audit[5099]: AVC avc: denied { bpf } for pid=5099 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.320000 audit[5099]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffffcfe17f8 a2=28 a3=fffffcfe1928 items=0 ppid=4221 pid=5099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.320000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:13:09.320000 audit[5099]: AVC avc: denied { bpf } for pid=5099 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.320000 audit[5099]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffffcfe16a8 a2=28 a3=fffffcfe17d8 items=0 ppid=4221 pid=5099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.320000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:13:09.320000 audit[5099]: AVC avc: denied { bpf } for pid=5099 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.320000 audit[5099]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=fffffcfe1818 a2=28 a3=fffffcfe1948 items=0 ppid=4221 pid=5099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.320000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:13:09.320000 audit[5099]: AVC avc: denied { bpf } for pid=5099 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.320000 audit[5099]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=fffffcfe17f8 a2=28 a3=fffffcfe1928 items=0 ppid=4221 pid=5099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.320000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:13:09.320000 audit[5099]: AVC avc: denied { bpf } for pid=5099 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.320000 audit[5099]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=fffffcfe17e8 a2=28 a3=fffffcfe1918 items=0 ppid=4221 pid=5099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.320000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:13:09.320000 audit[5099]: AVC avc: denied { bpf } for pid=5099 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.320000 audit[5099]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=fffffcfe1818 a2=28 a3=fffffcfe1948 items=0 ppid=4221 pid=5099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.320000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:13:09.320000 audit[5099]: AVC avc: denied { bpf } for pid=5099 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.320000 audit[5099]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffffcfe17f8 a2=28 a3=fffffcfe1928 items=0 ppid=4221 pid=5099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.320000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:13:09.320000 audit[5099]: AVC avc: denied { bpf } for pid=5099 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.320000 audit[5099]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffffcfe1818 a2=28 a3=fffffcfe1948 items=0 ppid=4221 pid=5099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.320000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:13:09.320000 audit[5099]: AVC avc: denied { bpf } for pid=5099 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.320000 audit[5099]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffffcfe17e8 a2=28 a3=fffffcfe1918 items=0 ppid=4221 pid=5099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.320000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:13:09.320000 audit[5099]: AVC avc: denied { bpf } for pid=5099 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.320000 audit[5099]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=fffffcfe1868 a2=28 a3=fffffcfe19a8 items=0 ppid=4221 pid=5099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.320000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:13:09.320000 audit[5099]: AVC avc: denied { bpf } for pid=5099 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.320000 audit[5099]: AVC avc: denied { bpf } for pid=5099 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.320000 audit[5099]: AVC avc: denied { perfmon } for pid=5099 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.320000 audit[5099]: AVC avc: denied { perfmon } for pid=5099 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.320000 audit[5099]: AVC avc: denied { perfmon } for pid=5099 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.320000 audit[5099]: AVC avc: denied { perfmon } for pid=5099 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.320000 audit[5099]: AVC avc: denied { perfmon } for pid=5099 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.320000 audit[5099]: AVC avc: denied { bpf } for pid=5099 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.320000 audit[5099]: AVC avc: denied { bpf } for pid=5099 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.320000 audit: BPF prog-id=196 op=LOAD Nov 1 00:13:09.320000 audit[5099]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=fffffcfe1688 a2=40 a3=fffffcfe16b8 items=0 ppid=4221 pid=5099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.320000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:13:09.321000 audit: BPF prog-id=196 op=UNLOAD Nov 1 00:13:09.322000 audit[5099]: AVC avc: denied { bpf } for pid=5099 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.322000 audit[5099]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=0 a1=fffffcfe16b0 a2=50 a3=0 items=0 ppid=4221 pid=5099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.322000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:13:09.322000 audit[5099]: AVC avc: denied { bpf } for pid=5099 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.322000 audit[5099]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=0 a1=fffffcfe16b0 a2=50 a3=0 items=0 ppid=4221 pid=5099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.322000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:13:09.322000 audit[5099]: AVC avc: denied { bpf } for pid=5099 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.322000 audit[5099]: AVC avc: denied { bpf } for pid=5099 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.322000 audit[5099]: AVC avc: denied { bpf } for pid=5099 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.322000 audit[5099]: AVC avc: denied { perfmon } for pid=5099 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.322000 audit[5099]: AVC avc: denied { perfmon } for pid=5099 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.322000 audit[5099]: AVC avc: denied { perfmon } for pid=5099 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.322000 audit[5099]: AVC avc: denied { perfmon } for pid=5099 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.322000 audit[5099]: AVC avc: denied { perfmon } for pid=5099 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.322000 audit[5099]: AVC avc: denied { bpf } for pid=5099 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.322000 audit[5099]: AVC avc: denied { bpf } for pid=5099 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.322000 audit: BPF prog-id=197 op=LOAD Nov 1 00:13:09.322000 audit[5099]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=fffffcfe0e18 a2=94 a3=2 items=0 ppid=4221 pid=5099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.322000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:13:09.322000 audit: BPF prog-id=197 op=UNLOAD Nov 1 00:13:09.322000 audit[5099]: AVC avc: denied { bpf } for pid=5099 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.322000 audit[5099]: AVC avc: denied { bpf } for pid=5099 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.322000 audit[5099]: AVC avc: denied { bpf } for pid=5099 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.322000 audit[5099]: AVC avc: denied { perfmon } for pid=5099 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.322000 audit[5099]: AVC avc: denied { perfmon } for pid=5099 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.322000 audit[5099]: AVC avc: denied { perfmon } for pid=5099 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.322000 audit[5099]: AVC avc: denied { perfmon } for pid=5099 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.322000 audit[5099]: AVC avc: denied { perfmon } for pid=5099 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.322000 audit[5099]: AVC avc: denied { bpf } for pid=5099 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.322000 audit[5099]: AVC avc: denied { bpf } for pid=5099 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.322000 audit: BPF prog-id=198 op=LOAD Nov 1 00:13:09.322000 audit[5099]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=fffffcfe0fa8 a2=94 a3=30 items=0 ppid=4221 pid=5099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.322000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:13:09.332000 audit[5101]: AVC avc: denied { bpf } for pid=5101 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.332000 audit[5101]: AVC avc: denied { bpf } for pid=5101 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.332000 audit[5101]: AVC avc: denied { perfmon } for pid=5101 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.332000 audit[5101]: AVC avc: denied { perfmon } for pid=5101 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.332000 audit[5101]: AVC avc: denied { perfmon } for pid=5101 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.332000 audit[5101]: AVC avc: denied { perfmon } for pid=5101 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.332000 audit[5101]: AVC avc: denied { perfmon } for pid=5101 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.332000 audit[5101]: AVC avc: denied { bpf } for pid=5101 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.332000 audit[5101]: AVC avc: denied { bpf } for pid=5101 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.332000 audit: BPF prog-id=199 op=LOAD Nov 1 00:13:09.332000 audit[5101]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffc8e9b608 a2=98 a3=ffffc8e9b5f8 items=0 ppid=4221 pid=5101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.332000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:13:09.333000 audit: BPF prog-id=199 op=UNLOAD Nov 1 00:13:09.336000 audit[5101]: AVC avc: denied { bpf } for pid=5101 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.336000 audit[5101]: AVC avc: denied { bpf } for pid=5101 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.336000 audit[5101]: AVC avc: denied { perfmon } for pid=5101 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.336000 audit[5101]: AVC avc: denied { perfmon } for pid=5101 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.336000 audit[5101]: AVC avc: denied { perfmon } for pid=5101 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.336000 audit[5101]: AVC avc: denied { perfmon } for pid=5101 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.336000 audit[5101]: AVC avc: denied { perfmon } for pid=5101 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.336000 audit[5101]: AVC avc: denied { bpf } for pid=5101 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.336000 audit[5101]: AVC avc: denied { bpf } for pid=5101 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.336000 audit: BPF prog-id=200 op=LOAD Nov 1 00:13:09.336000 audit[5101]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffc8e9b298 a2=74 a3=95 items=0 ppid=4221 pid=5101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.336000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:13:09.336000 audit: BPF prog-id=200 op=UNLOAD Nov 1 00:13:09.336000 audit[5101]: AVC avc: denied { bpf } for pid=5101 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.336000 audit[5101]: AVC avc: denied { bpf } for pid=5101 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.336000 audit[5101]: AVC avc: denied { perfmon } for pid=5101 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.336000 audit[5101]: AVC avc: denied { perfmon } for pid=5101 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.336000 audit[5101]: AVC avc: denied { perfmon } for pid=5101 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.336000 audit[5101]: AVC avc: denied { perfmon } for pid=5101 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.336000 audit[5101]: AVC avc: denied { perfmon } for pid=5101 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.336000 audit[5101]: AVC avc: denied { bpf } for pid=5101 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.336000 audit[5101]: AVC avc: denied { bpf } for pid=5101 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.336000 audit: BPF prog-id=201 op=LOAD Nov 1 00:13:09.336000 audit[5101]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffc8e9b2f8 a2=94 a3=2 items=0 ppid=4221 pid=5101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.336000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:13:09.336000 audit: BPF prog-id=201 op=UNLOAD Nov 1 00:13:09.430647 env[1820]: time="2025-11-01T00:13:09.430550051Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:13:09.438935 kubelet[2832]: E1101 00:13:09.438856 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-789667c9c4-fpxfk" podUID="2015b9d0-1146-401a-9af6-fcdda8aedfda" Nov 1 00:13:09.439625 env[1820]: time="2025-11-01T00:13:09.439167458Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Nov 1 00:13:09.439838 kubelet[2832]: E1101 00:13:09.439750 2832 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:13:09.439944 kubelet[2832]: E1101 00:13:09.439848 2832 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:13:09.440245 kubelet[2832]: E1101 00:13:09.440060 2832 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,loadbalancer,ValueFrom:nil,},EnvVar{Name:DISABLE_KUBE_CONTROLLERS_CONFIG_API,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:CA_CRT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/cert.pem,SubPath:ca-bundle.crt,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-7jnvr,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*999,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-kube-controllers-5d8bd955b8-hbwc2_calico-system(7f4cf6fd-6544-4217-95df-022c9368163b): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Nov 1 00:13:09.442647 kubelet[2832]: E1101 00:13:09.442579 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-5d8bd955b8-hbwc2" podUID="7f4cf6fd-6544-4217-95df-022c9368163b" Nov 1 00:13:09.464926 kubelet[2832]: E1101 00:13:09.464837 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-h7lrq" podUID="e0c48ca1-c3ce-4df4-a9c4-ebf24818e57a" Nov 1 00:13:09.521263 systemd-networkd[1539]: calia901c24fd98: Gained IPv6LL Nov 1 00:13:09.525635 kubelet[2832]: I1101 00:13:09.525537 2832 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-zgm5l" podStartSLOduration=61.525513302 podStartE2EDuration="1m1.525513302s" podCreationTimestamp="2025-11-01 00:12:08 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:13:09.49679105 +0000 UTC m=+65.906704856" watchObservedRunningTime="2025-11-01 00:13:09.525513302 +0000 UTC m=+65.935427072" Nov 1 00:13:09.536000 audit[5108]: NETFILTER_CFG table=filter:117 family=2 entries=14 op=nft_register_rule pid=5108 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:13:09.536000 audit[5108]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffe5809e90 a2=0 a3=1 items=0 ppid=2988 pid=5108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.536000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:13:09.544000 audit[5108]: NETFILTER_CFG table=nat:118 family=2 entries=20 op=nft_register_rule pid=5108 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:13:09.544000 audit[5108]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=ffffe5809e90 a2=0 a3=1 items=0 ppid=2988 pid=5108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.544000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:13:09.647000 audit[5101]: AVC avc: denied { bpf } for pid=5101 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.647000 audit[5101]: AVC avc: denied { bpf } for pid=5101 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.647000 audit[5101]: AVC avc: denied { perfmon } for pid=5101 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.647000 audit[5101]: AVC avc: denied { perfmon } for pid=5101 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.647000 audit[5101]: AVC avc: denied { perfmon } for pid=5101 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.647000 audit[5101]: AVC avc: denied { perfmon } for pid=5101 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.647000 audit[5101]: AVC avc: denied { perfmon } for pid=5101 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.647000 audit[5101]: AVC avc: denied { bpf } for pid=5101 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.647000 audit[5101]: AVC avc: denied { bpf } for pid=5101 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.647000 audit: BPF prog-id=202 op=LOAD Nov 1 00:13:09.647000 audit[5101]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffc8e9b2b8 a2=40 a3=ffffc8e9b2e8 items=0 ppid=4221 pid=5101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.647000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:13:09.647000 audit: BPF prog-id=202 op=UNLOAD Nov 1 00:13:09.647000 audit[5101]: AVC avc: denied { perfmon } for pid=5101 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.647000 audit[5101]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffc8e9b3d0 a2=50 a3=0 items=0 ppid=4221 pid=5101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.647000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:13:09.671000 audit[5101]: AVC avc: denied { bpf } for pid=5101 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.671000 audit[5101]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc8e9b328 a2=28 a3=ffffc8e9b458 items=0 ppid=4221 pid=5101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.671000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:13:09.671000 audit[5101]: AVC avc: denied { bpf } for pid=5101 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.671000 audit[5101]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc8e9b358 a2=28 a3=ffffc8e9b488 items=0 ppid=4221 pid=5101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.671000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:13:09.672000 audit[5101]: AVC avc: denied { bpf } for pid=5101 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.672000 audit[5101]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc8e9b208 a2=28 a3=ffffc8e9b338 items=0 ppid=4221 pid=5101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.672000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:13:09.672000 audit[5101]: AVC avc: denied { bpf } for pid=5101 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.672000 audit[5101]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc8e9b378 a2=28 a3=ffffc8e9b4a8 items=0 ppid=4221 pid=5101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.672000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:13:09.673000 audit[5101]: AVC avc: denied { bpf } for pid=5101 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.673000 audit[5101]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc8e9b358 a2=28 a3=ffffc8e9b488 items=0 ppid=4221 pid=5101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.673000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:13:09.673000 audit[5101]: AVC avc: denied { bpf } for pid=5101 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.673000 audit[5101]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc8e9b348 a2=28 a3=ffffc8e9b478 items=0 ppid=4221 pid=5101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.673000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:13:09.674000 audit[5101]: AVC avc: denied { bpf } for pid=5101 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.674000 audit[5101]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc8e9b378 a2=28 a3=ffffc8e9b4a8 items=0 ppid=4221 pid=5101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.674000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:13:09.675000 audit[5101]: AVC avc: denied { bpf } for pid=5101 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.675000 audit[5101]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc8e9b358 a2=28 a3=ffffc8e9b488 items=0 ppid=4221 pid=5101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.675000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:13:09.676000 audit[5101]: AVC avc: denied { bpf } for pid=5101 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.676000 audit[5101]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc8e9b378 a2=28 a3=ffffc8e9b4a8 items=0 ppid=4221 pid=5101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.676000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:13:09.676000 audit[5101]: AVC avc: denied { bpf } for pid=5101 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.676000 audit[5101]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc8e9b348 a2=28 a3=ffffc8e9b478 items=0 ppid=4221 pid=5101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.676000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:13:09.677000 audit[5101]: AVC avc: denied { bpf } for pid=5101 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.677000 audit[5101]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc8e9b3c8 a2=28 a3=ffffc8e9b508 items=0 ppid=4221 pid=5101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.677000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:13:09.677000 audit[5101]: AVC avc: denied { perfmon } for pid=5101 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.677000 audit[5101]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffc8e9b100 a2=50 a3=0 items=0 ppid=4221 pid=5101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.677000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:13:09.678000 audit[5101]: AVC avc: denied { bpf } for pid=5101 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.678000 audit[5101]: AVC avc: denied { bpf } for pid=5101 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.678000 audit[5101]: AVC avc: denied { perfmon } for pid=5101 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.678000 audit[5101]: AVC avc: denied { perfmon } for pid=5101 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.678000 audit[5101]: AVC avc: denied { perfmon } for pid=5101 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.678000 audit[5101]: AVC avc: denied { perfmon } for pid=5101 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.678000 audit[5101]: AVC avc: denied { perfmon } for pid=5101 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.678000 audit[5101]: AVC avc: denied { bpf } for pid=5101 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.678000 audit[5101]: AVC avc: denied { bpf } for pid=5101 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.678000 audit: BPF prog-id=203 op=LOAD Nov 1 00:13:09.678000 audit[5101]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffc8e9b108 a2=94 a3=5 items=0 ppid=4221 pid=5101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.678000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:13:09.680000 audit: BPF prog-id=203 op=UNLOAD Nov 1 00:13:09.680000 audit[5101]: AVC avc: denied { perfmon } for pid=5101 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.680000 audit[5101]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffc8e9b210 a2=50 a3=0 items=0 ppid=4221 pid=5101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.680000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:13:09.680000 audit[5101]: AVC avc: denied { bpf } for pid=5101 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.680000 audit[5101]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffc8e9b358 a2=4 a3=3 items=0 ppid=4221 pid=5101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.680000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:13:09.681000 audit[5101]: AVC avc: denied { bpf } for pid=5101 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.681000 audit[5101]: AVC avc: denied { bpf } for pid=5101 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.681000 audit[5101]: AVC avc: denied { perfmon } for pid=5101 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.681000 audit[5101]: AVC avc: denied { bpf } for pid=5101 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.681000 audit[5101]: AVC avc: denied { perfmon } for pid=5101 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.681000 audit[5101]: AVC avc: denied { perfmon } for pid=5101 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.681000 audit[5101]: AVC avc: denied { perfmon } for pid=5101 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.681000 audit[5101]: AVC avc: denied { perfmon } for pid=5101 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.681000 audit[5101]: AVC avc: denied { perfmon } for pid=5101 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.681000 audit[5101]: AVC avc: denied { bpf } for pid=5101 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.681000 audit[5101]: AVC avc: denied { confidentiality } for pid=5101 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:13:09.681000 audit[5101]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffc8e9b338 a2=94 a3=6 items=0 ppid=4221 pid=5101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.681000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:13:09.683000 audit[5101]: AVC avc: denied { bpf } for pid=5101 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.683000 audit[5101]: AVC avc: denied { bpf } for pid=5101 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.683000 audit[5101]: AVC avc: denied { perfmon } for pid=5101 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.683000 audit[5101]: AVC avc: denied { bpf } for pid=5101 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.683000 audit[5101]: AVC avc: denied { perfmon } for pid=5101 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.683000 audit[5101]: AVC avc: denied { perfmon } for pid=5101 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.683000 audit[5101]: AVC avc: denied { perfmon } for pid=5101 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.683000 audit[5101]: AVC avc: denied { perfmon } for pid=5101 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.683000 audit[5101]: AVC avc: denied { perfmon } for pid=5101 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.683000 audit[5101]: AVC avc: denied { bpf } for pid=5101 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.683000 audit[5101]: AVC avc: denied { confidentiality } for pid=5101 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:13:09.683000 audit[5101]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffc8e9ab08 a2=94 a3=83 items=0 ppid=4221 pid=5101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.683000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:13:09.685000 audit[5101]: AVC avc: denied { bpf } for pid=5101 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.685000 audit[5101]: AVC avc: denied { bpf } for pid=5101 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.685000 audit[5101]: AVC avc: denied { perfmon } for pid=5101 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.685000 audit[5101]: AVC avc: denied { bpf } for pid=5101 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.685000 audit[5101]: AVC avc: denied { perfmon } for pid=5101 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.685000 audit[5101]: AVC avc: denied { perfmon } for pid=5101 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.685000 audit[5101]: AVC avc: denied { perfmon } for pid=5101 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.685000 audit[5101]: AVC avc: denied { perfmon } for pid=5101 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.685000 audit[5101]: AVC avc: denied { perfmon } for pid=5101 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.685000 audit[5101]: AVC avc: denied { bpf } for pid=5101 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.685000 audit[5101]: AVC avc: denied { confidentiality } for pid=5101 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:13:09.685000 audit[5101]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffc8e9ab08 a2=94 a3=83 items=0 ppid=4221 pid=5101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.685000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:13:09.687000 audit[5101]: AVC avc: denied { bpf } for pid=5101 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.687000 audit[5101]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffc8e9c548 a2=10 a3=ffffc8e9c638 items=0 ppid=4221 pid=5101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.687000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:13:09.688000 audit[5101]: AVC avc: denied { bpf } for pid=5101 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.688000 audit[5101]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffc8e9c408 a2=10 a3=ffffc8e9c4f8 items=0 ppid=4221 pid=5101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.688000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:13:09.689000 audit[5101]: AVC avc: denied { bpf } for pid=5101 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.689000 audit[5101]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffc8e9c378 a2=10 a3=ffffc8e9c4f8 items=0 ppid=4221 pid=5101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.689000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:13:09.689000 audit[5101]: AVC avc: denied { bpf } for pid=5101 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:13:09.689000 audit[5101]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffc8e9c378 a2=10 a3=ffffc8e9c4f8 items=0 ppid=4221 pid=5101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.689000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:13:09.696000 audit: BPF prog-id=198 op=UNLOAD Nov 1 00:13:09.876000 audit[5137]: NETFILTER_CFG table=raw:119 family=2 entries=21 op=nft_register_chain pid=5137 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:13:09.876000 audit[5137]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8452 a0=3 a1=ffffecd0fc10 a2=0 a3=ffff832dbfa8 items=0 ppid=4221 pid=5137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.876000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:13:09.877000 audit[5138]: NETFILTER_CFG table=mangle:120 family=2 entries=16 op=nft_register_chain pid=5138 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:13:09.877000 audit[5138]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6868 a0=3 a1=fffffe97c110 a2=0 a3=ffffae83cfa8 items=0 ppid=4221 pid=5138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.877000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:13:09.894000 audit[5140]: NETFILTER_CFG table=nat:121 family=2 entries=15 op=nft_register_chain pid=5140 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:13:09.894000 audit[5140]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5084 a0=3 a1=ffffd78b5e70 a2=0 a3=ffff8f3b0fa8 items=0 ppid=4221 pid=5140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.894000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:13:09.955000 audit[5142]: NETFILTER_CFG table=filter:122 family=2 entries=321 op=nft_register_chain pid=5142 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:13:09.955000 audit[5142]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=190616 a0=3 a1=ffffc77b22a0 a2=0 a3=ffffab38bfa8 items=0 ppid=4221 pid=5142 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:09.955000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:13:10.097241 systemd-networkd[1539]: cali46a14ec6bdd: Gained IPv6LL Nov 1 00:13:10.450119 kubelet[2832]: E1101 00:13:10.450038 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-5d8bd955b8-hbwc2" podUID="7f4cf6fd-6544-4217-95df-022c9368163b" Nov 1 00:13:10.451283 kubelet[2832]: E1101 00:13:10.451211 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-789667c9c4-fpxfk" podUID="2015b9d0-1146-401a-9af6-fcdda8aedfda" Nov 1 00:13:10.581000 audit[5155]: NETFILTER_CFG table=filter:123 family=2 entries=14 op=nft_register_rule pid=5155 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:13:10.581000 audit[5155]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffcddb0f20 a2=0 a3=1 items=0 ppid=2988 pid=5155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:10.581000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:13:10.606000 audit[5155]: NETFILTER_CFG table=nat:124 family=2 entries=56 op=nft_register_chain pid=5155 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:13:10.606000 audit[5155]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=19860 a0=3 a1=ffffcddb0f20 a2=0 a3=1 items=0 ppid=2988 pid=5155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:10.606000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:13:11.121231 systemd-networkd[1539]: vxlan.calico: Gained IPv6LL Nov 1 00:13:13.139880 systemd[1]: Started sshd@9-172.31.24.47:22-147.75.109.163:52044.service. Nov 1 00:13:13.139000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.24.47:22-147.75.109.163:52044 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:13.317000 audit[5158]: USER_ACCT pid=5158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:13.318730 sshd[5158]: Accepted publickey for core from 147.75.109.163 port 52044 ssh2: RSA SHA256:l10clL99NTgBLZDdAUsIsAniCj4DES+0hQanxvSOioM Nov 1 00:13:13.320000 audit[5158]: CRED_ACQ pid=5158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:13.320000 audit[5158]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe75d3680 a2=3 a3=1 items=0 ppid=1 pid=5158 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:13.320000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:13:13.322446 sshd[5158]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:13:13.332122 systemd-logind[1813]: New session 10 of user core. Nov 1 00:13:13.333070 systemd[1]: Started session-10.scope. Nov 1 00:13:13.342000 audit[5158]: USER_START pid=5158 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:13.344000 audit[5160]: CRED_ACQ pid=5160 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:13.610429 sshd[5158]: pam_unix(sshd:session): session closed for user core Nov 1 00:13:13.611000 audit[5158]: USER_END pid=5158 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:13.615324 kernel: kauditd_printk_skb: 724 callbacks suppressed Nov 1 00:13:13.615446 kernel: audit: type=1106 audit(1761955993.611:1362): pid=5158 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:13.618009 systemd[1]: session-10.scope: Deactivated successfully. Nov 1 00:13:13.619506 systemd[1]: sshd@9-172.31.24.47:22-147.75.109.163:52044.service: Deactivated successfully. Nov 1 00:13:13.612000 audit[5158]: CRED_DISP pid=5158 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:13.638382 kernel: audit: type=1104 audit(1761955993.612:1363): pid=5158 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:13.638629 systemd-logind[1813]: Session 10 logged out. Waiting for processes to exit. Nov 1 00:13:13.614000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.24.47:22-147.75.109.163:52044 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:13.649064 kernel: audit: type=1131 audit(1761955993.614:1364): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.24.47:22-147.75.109.163:52044 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:13.649851 systemd-logind[1813]: Removed session 10. Nov 1 00:13:18.640373 systemd[1]: Started sshd@10-172.31.24.47:22-147.75.109.163:52052.service. Nov 1 00:13:18.640000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.24.47:22-147.75.109.163:52052 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:18.651033 kernel: audit: type=1130 audit(1761955998.640:1365): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.24.47:22-147.75.109.163:52052 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:18.811000 audit[5180]: USER_ACCT pid=5180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:18.812756 sshd[5180]: Accepted publickey for core from 147.75.109.163 port 52052 ssh2: RSA SHA256:l10clL99NTgBLZDdAUsIsAniCj4DES+0hQanxvSOioM Nov 1 00:13:18.825035 kernel: audit: type=1101 audit(1761955998.811:1366): pid=5180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:18.823000 audit[5180]: CRED_ACQ pid=5180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:18.826754 sshd[5180]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:13:18.842174 kernel: audit: type=1103 audit(1761955998.823:1367): pid=5180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:18.842321 kernel: audit: type=1006 audit(1761955998.824:1368): pid=5180 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Nov 1 00:13:18.824000 audit[5180]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd96ad580 a2=3 a3=1 items=0 ppid=1 pid=5180 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:18.853505 kernel: audit: type=1300 audit(1761955998.824:1368): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd96ad580 a2=3 a3=1 items=0 ppid=1 pid=5180 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:18.824000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:13:18.857604 kernel: audit: type=1327 audit(1761955998.824:1368): proctitle=737368643A20636F7265205B707269765D Nov 1 00:13:18.864546 systemd-logind[1813]: New session 11 of user core. Nov 1 00:13:18.865956 systemd[1]: Started session-11.scope. Nov 1 00:13:18.875000 audit[5180]: USER_START pid=5180 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:18.876000 audit[5182]: CRED_ACQ pid=5182 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:18.898309 kernel: audit: type=1105 audit(1761955998.875:1369): pid=5180 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:18.898450 kernel: audit: type=1103 audit(1761955998.876:1370): pid=5182 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:18.936546 env[1820]: time="2025-11-01T00:13:18.934330767Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Nov 1 00:13:19.126274 sshd[5180]: pam_unix(sshd:session): session closed for user core Nov 1 00:13:19.127000 audit[5180]: USER_END pid=5180 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:19.127000 audit[5180]: CRED_DISP pid=5180 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:19.150304 kernel: audit: type=1106 audit(1761955999.127:1371): pid=5180 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:19.150449 kernel: audit: type=1104 audit(1761955999.127:1372): pid=5180 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:19.141013 systemd[1]: sshd@10-172.31.24.47:22-147.75.109.163:52052.service: Deactivated successfully. Nov 1 00:13:19.142369 systemd[1]: session-11.scope: Deactivated successfully. Nov 1 00:13:19.140000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.24.47:22-147.75.109.163:52052 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:19.152176 systemd-logind[1813]: Session 11 logged out. Waiting for processes to exit. Nov 1 00:13:19.163214 systemd[1]: Started sshd@11-172.31.24.47:22-147.75.109.163:52058.service. Nov 1 00:13:19.162000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.24.47:22-147.75.109.163:52058 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:19.166183 systemd-logind[1813]: Removed session 11. Nov 1 00:13:19.178473 env[1820]: time="2025-11-01T00:13:19.178209170Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:13:19.180630 env[1820]: time="2025-11-01T00:13:19.180419992Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Nov 1 00:13:19.181138 kubelet[2832]: E1101 00:13:19.181083 2832 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:13:19.181710 kubelet[2832]: E1101 00:13:19.181673 2832 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:13:19.182092 kubelet[2832]: E1101 00:13:19.181996 2832 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.30.4,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-rj9qj,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-7qfc7_calico-system(2c016bf7-bf29-4156-a534-853af2a9ae4f): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Nov 1 00:13:19.193523 env[1820]: time="2025-11-01T00:13:19.191564966Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Nov 1 00:13:19.344000 audit[5193]: USER_ACCT pid=5193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:19.345786 sshd[5193]: Accepted publickey for core from 147.75.109.163 port 52058 ssh2: RSA SHA256:l10clL99NTgBLZDdAUsIsAniCj4DES+0hQanxvSOioM Nov 1 00:13:19.346000 audit[5193]: CRED_ACQ pid=5193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:19.347000 audit[5193]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd8c21410 a2=3 a3=1 items=0 ppid=1 pid=5193 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:19.347000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:13:19.349171 sshd[5193]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:13:19.358062 systemd-logind[1813]: New session 12 of user core. Nov 1 00:13:19.359150 systemd[1]: Started session-12.scope. Nov 1 00:13:19.368000 audit[5193]: USER_START pid=5193 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:19.371000 audit[5195]: CRED_ACQ pid=5195 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:19.447850 env[1820]: time="2025-11-01T00:13:19.447644940Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:13:19.450591 env[1820]: time="2025-11-01T00:13:19.450476466Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Nov 1 00:13:19.451044 kubelet[2832]: E1101 00:13:19.450940 2832 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:13:19.451267 kubelet[2832]: E1101 00:13:19.451231 2832 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:13:19.451734 kubelet[2832]: E1101 00:13:19.451637 2832 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-rj9qj,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-7qfc7_calico-system(2c016bf7-bf29-4156-a534-853af2a9ae4f): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Nov 1 00:13:19.453317 kubelet[2832]: E1101 00:13:19.453234 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-7qfc7" podUID="2c016bf7-bf29-4156-a534-853af2a9ae4f" Nov 1 00:13:19.726603 sshd[5193]: pam_unix(sshd:session): session closed for user core Nov 1 00:13:19.728000 audit[5193]: USER_END pid=5193 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:19.728000 audit[5193]: CRED_DISP pid=5193 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:19.732876 systemd[1]: sshd@11-172.31.24.47:22-147.75.109.163:52058.service: Deactivated successfully. Nov 1 00:13:19.734433 systemd[1]: session-12.scope: Deactivated successfully. Nov 1 00:13:19.732000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.24.47:22-147.75.109.163:52058 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:19.735920 systemd-logind[1813]: Session 12 logged out. Waiting for processes to exit. Nov 1 00:13:19.737719 systemd-logind[1813]: Removed session 12. Nov 1 00:13:19.754000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.24.47:22-147.75.109.163:52074 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:19.755129 systemd[1]: Started sshd@12-172.31.24.47:22-147.75.109.163:52074.service. Nov 1 00:13:19.938092 sshd[5202]: Accepted publickey for core from 147.75.109.163 port 52074 ssh2: RSA SHA256:l10clL99NTgBLZDdAUsIsAniCj4DES+0hQanxvSOioM Nov 1 00:13:19.936000 audit[5202]: USER_ACCT pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:19.938000 audit[5202]: CRED_ACQ pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:19.939000 audit[5202]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffc7730a0 a2=3 a3=1 items=0 ppid=1 pid=5202 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:19.939000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:13:19.941358 sshd[5202]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:13:19.951209 systemd-logind[1813]: New session 13 of user core. Nov 1 00:13:19.952380 systemd[1]: Started session-13.scope. Nov 1 00:13:19.963000 audit[5202]: USER_START pid=5202 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:19.966000 audit[5209]: CRED_ACQ pid=5209 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:20.221217 sshd[5202]: pam_unix(sshd:session): session closed for user core Nov 1 00:13:20.222000 audit[5202]: USER_END pid=5202 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:20.222000 audit[5202]: CRED_DISP pid=5202 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:20.225930 systemd[1]: session-13.scope: Deactivated successfully. Nov 1 00:13:20.227193 systemd[1]: sshd@12-172.31.24.47:22-147.75.109.163:52074.service: Deactivated successfully. Nov 1 00:13:20.226000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.24.47:22-147.75.109.163:52074 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:20.229070 systemd-logind[1813]: Session 13 logged out. Waiting for processes to exit. Nov 1 00:13:20.230811 systemd-logind[1813]: Removed session 13. Nov 1 00:13:20.933771 env[1820]: time="2025-11-01T00:13:20.933636181Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Nov 1 00:13:21.173121 env[1820]: time="2025-11-01T00:13:21.173026189Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:13:21.175280 env[1820]: time="2025-11-01T00:13:21.175188183Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Nov 1 00:13:21.175819 kubelet[2832]: E1101 00:13:21.175745 2832 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:13:21.176513 kubelet[2832]: E1101 00:13:21.176451 2832 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:13:21.177348 env[1820]: time="2025-11-01T00:13:21.177285652Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:13:21.178289 kubelet[2832]: E1101 00:13:21.178171 2832 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.4,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:68ad8fca00514a76b38910a616d960e3,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-2m6c6,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-58c6498fd4-zrpxf_calico-system(b4871652-e36f-45a1-ab7f-b8d5032703a6): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Nov 1 00:13:21.419669 env[1820]: time="2025-11-01T00:13:21.419573597Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:13:21.421787 env[1820]: time="2025-11-01T00:13:21.421698775Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:13:21.422231 kubelet[2832]: E1101 00:13:21.422134 2832 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:13:21.422339 kubelet[2832]: E1101 00:13:21.422234 2832 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:13:21.422766 kubelet[2832]: E1101 00:13:21.422644 2832 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-lgxsj,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-789667c9c4-gltc6_calico-apiserver(de7ca9fd-9d9e-4866-9cab-137a354c3eda): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:13:21.424068 env[1820]: time="2025-11-01T00:13:21.423963753Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Nov 1 00:13:21.424807 kubelet[2832]: E1101 00:13:21.424739 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-789667c9c4-gltc6" podUID="de7ca9fd-9d9e-4866-9cab-137a354c3eda" Nov 1 00:13:21.665450 env[1820]: time="2025-11-01T00:13:21.665370088Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:13:21.667890 env[1820]: time="2025-11-01T00:13:21.667791332Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Nov 1 00:13:21.668437 kubelet[2832]: E1101 00:13:21.668361 2832 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:13:21.668611 kubelet[2832]: E1101 00:13:21.668454 2832 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:13:21.668858 kubelet[2832]: E1101 00:13:21.668740 2832 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-2m6c6,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-58c6498fd4-zrpxf_calico-system(b4871652-e36f-45a1-ab7f-b8d5032703a6): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Nov 1 00:13:21.671397 kubelet[2832]: E1101 00:13:21.671098 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-58c6498fd4-zrpxf" podUID="b4871652-e36f-45a1-ab7f-b8d5032703a6" Nov 1 00:13:21.933014 env[1820]: time="2025-11-01T00:13:21.932827497Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Nov 1 00:13:22.169237 env[1820]: time="2025-11-01T00:13:22.169171785Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:13:22.172076 env[1820]: time="2025-11-01T00:13:22.171887066Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Nov 1 00:13:22.172324 kubelet[2832]: E1101 00:13:22.172277 2832 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:13:22.172480 kubelet[2832]: E1101 00:13:22.172448 2832 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:13:22.172850 kubelet[2832]: E1101 00:13:22.172763 2832 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-q2n49,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-666569f655-h7lrq_calico-system(e0c48ca1-c3ce-4df4-a9c4-ebf24818e57a): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Nov 1 00:13:22.174424 kubelet[2832]: E1101 00:13:22.174351 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-h7lrq" podUID="e0c48ca1-c3ce-4df4-a9c4-ebf24818e57a" Nov 1 00:13:24.934822 env[1820]: time="2025-11-01T00:13:24.934757103Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Nov 1 00:13:25.188605 env[1820]: time="2025-11-01T00:13:25.188392998Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:13:25.190923 env[1820]: time="2025-11-01T00:13:25.190832542Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Nov 1 00:13:25.191305 kubelet[2832]: E1101 00:13:25.191250 2832 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:13:25.191917 kubelet[2832]: E1101 00:13:25.191881 2832 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:13:25.192362 kubelet[2832]: E1101 00:13:25.192265 2832 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,loadbalancer,ValueFrom:nil,},EnvVar{Name:DISABLE_KUBE_CONTROLLERS_CONFIG_API,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:CA_CRT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/cert.pem,SubPath:ca-bundle.crt,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-7jnvr,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*999,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-kube-controllers-5d8bd955b8-hbwc2_calico-system(7f4cf6fd-6544-4217-95df-022c9368163b): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Nov 1 00:13:25.193921 kubelet[2832]: E1101 00:13:25.193834 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-5d8bd955b8-hbwc2" podUID="7f4cf6fd-6544-4217-95df-022c9368163b" Nov 1 00:13:25.252809 systemd[1]: Started sshd@13-172.31.24.47:22-147.75.109.163:37806.service. Nov 1 00:13:25.252000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.24.47:22-147.75.109.163:37806 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:25.259004 kernel: kauditd_printk_skb: 23 callbacks suppressed Nov 1 00:13:25.259114 kernel: audit: type=1130 audit(1761956005.252:1392): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.24.47:22-147.75.109.163:37806 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:25.429000 audit[5226]: USER_ACCT pid=5226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:25.431575 sshd[5226]: Accepted publickey for core from 147.75.109.163 port 37806 ssh2: RSA SHA256:l10clL99NTgBLZDdAUsIsAniCj4DES+0hQanxvSOioM Nov 1 00:13:25.442000 audit[5226]: CRED_ACQ pid=5226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:25.444692 sshd[5226]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:13:25.453428 kernel: audit: type=1101 audit(1761956005.429:1393): pid=5226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:25.453535 kernel: audit: type=1103 audit(1761956005.442:1394): pid=5226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:25.460432 kernel: audit: type=1006 audit(1761956005.443:1395): pid=5226 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Nov 1 00:13:25.460569 kernel: audit: type=1300 audit(1761956005.443:1395): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdfd47890 a2=3 a3=1 items=0 ppid=1 pid=5226 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:25.443000 audit[5226]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdfd47890 a2=3 a3=1 items=0 ppid=1 pid=5226 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:25.443000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:13:25.479037 kernel: audit: type=1327 audit(1761956005.443:1395): proctitle=737368643A20636F7265205B707269765D Nov 1 00:13:25.485465 systemd[1]: Started session-14.scope. Nov 1 00:13:25.488066 systemd-logind[1813]: New session 14 of user core. Nov 1 00:13:25.500000 audit[5226]: USER_START pid=5226 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:25.503000 audit[5228]: CRED_ACQ pid=5228 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:25.531494 kernel: audit: type=1105 audit(1761956005.500:1396): pid=5226 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:25.531621 kernel: audit: type=1103 audit(1761956005.503:1397): pid=5228 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:25.813360 sshd[5226]: pam_unix(sshd:session): session closed for user core Nov 1 00:13:25.815000 audit[5226]: USER_END pid=5226 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:25.819569 systemd-logind[1813]: Session 14 logged out. Waiting for processes to exit. Nov 1 00:13:25.821798 systemd[1]: session-14.scope: Deactivated successfully. Nov 1 00:13:25.823735 systemd[1]: sshd@13-172.31.24.47:22-147.75.109.163:37806.service: Deactivated successfully. Nov 1 00:13:25.826521 systemd-logind[1813]: Removed session 14. Nov 1 00:13:25.815000 audit[5226]: CRED_DISP pid=5226 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:25.837958 kernel: audit: type=1106 audit(1761956005.815:1398): pid=5226 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:25.838140 kernel: audit: type=1104 audit(1761956005.815:1399): pid=5226 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:25.823000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.24.47:22-147.75.109.163:37806 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:25.937576 env[1820]: time="2025-11-01T00:13:25.937407125Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:13:26.194193 env[1820]: time="2025-11-01T00:13:26.194067443Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:13:26.196828 env[1820]: time="2025-11-01T00:13:26.196729337Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:13:26.197446 kubelet[2832]: E1101 00:13:26.197389 2832 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:13:26.197962 kubelet[2832]: E1101 00:13:26.197484 2832 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:13:26.198683 kubelet[2832]: E1101 00:13:26.198536 2832 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-cdsgs,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-789667c9c4-fpxfk_calico-apiserver(2015b9d0-1146-401a-9af6-fcdda8aedfda): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:13:26.199920 kubelet[2832]: E1101 00:13:26.199835 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-789667c9c4-fpxfk" podUID="2015b9d0-1146-401a-9af6-fcdda8aedfda" Nov 1 00:13:29.935553 kubelet[2832]: E1101 00:13:29.934926 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-7qfc7" podUID="2c016bf7-bf29-4156-a534-853af2a9ae4f" Nov 1 00:13:30.846302 systemd[1]: Started sshd@14-172.31.24.47:22-147.75.109.163:37658.service. Nov 1 00:13:30.846000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.24.47:22-147.75.109.163:37658 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:30.851019 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:13:30.851127 kernel: audit: type=1130 audit(1761956010.846:1401): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.24.47:22-147.75.109.163:37658 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:31.024000 audit[5247]: USER_ACCT pid=5247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:31.025911 sshd[5247]: Accepted publickey for core from 147.75.109.163 port 37658 ssh2: RSA SHA256:l10clL99NTgBLZDdAUsIsAniCj4DES+0hQanxvSOioM Nov 1 00:13:31.037043 kernel: audit: type=1101 audit(1761956011.024:1402): pid=5247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:31.039003 sshd[5247]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:13:31.037000 audit[5247]: CRED_ACQ pid=5247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:31.055091 kernel: audit: type=1103 audit(1761956011.037:1403): pid=5247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:31.055197 kernel: audit: type=1006 audit(1761956011.037:1404): pid=5247 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Nov 1 00:13:31.037000 audit[5247]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdca26920 a2=3 a3=1 items=0 ppid=1 pid=5247 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:31.061665 systemd[1]: Started session-15.scope. Nov 1 00:13:31.064695 systemd-logind[1813]: New session 15 of user core. Nov 1 00:13:31.066060 kernel: audit: type=1300 audit(1761956011.037:1404): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdca26920 a2=3 a3=1 items=0 ppid=1 pid=5247 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:31.037000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:13:31.070138 kernel: audit: type=1327 audit(1761956011.037:1404): proctitle=737368643A20636F7265205B707269765D Nov 1 00:13:31.075000 audit[5247]: USER_START pid=5247 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:31.078000 audit[5249]: CRED_ACQ pid=5249 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:31.097739 kernel: audit: type=1105 audit(1761956011.075:1405): pid=5247 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:31.097839 kernel: audit: type=1103 audit(1761956011.078:1406): pid=5249 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:31.346625 sshd[5247]: pam_unix(sshd:session): session closed for user core Nov 1 00:13:31.348000 audit[5247]: USER_END pid=5247 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:31.352248 systemd[1]: session-15.scope: Deactivated successfully. Nov 1 00:13:31.353572 systemd[1]: sshd@14-172.31.24.47:22-147.75.109.163:37658.service: Deactivated successfully. Nov 1 00:13:31.348000 audit[5247]: CRED_DISP pid=5247 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:31.367894 systemd-logind[1813]: Session 15 logged out. Waiting for processes to exit. Nov 1 00:13:31.369710 systemd-logind[1813]: Removed session 15. Nov 1 00:13:31.373217 kernel: audit: type=1106 audit(1761956011.348:1407): pid=5247 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:31.373376 kernel: audit: type=1104 audit(1761956011.348:1408): pid=5247 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:31.348000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.24.47:22-147.75.109.163:37658 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:33.933742 kubelet[2832]: E1101 00:13:33.933686 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-h7lrq" podUID="e0c48ca1-c3ce-4df4-a9c4-ebf24818e57a" Nov 1 00:13:33.936097 kubelet[2832]: E1101 00:13:33.936036 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-58c6498fd4-zrpxf" podUID="b4871652-e36f-45a1-ab7f-b8d5032703a6" Nov 1 00:13:36.366000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.24.47:22-147.75.109.163:37672 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:36.369188 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:13:36.369239 kernel: audit: type=1130 audit(1761956016.366:1410): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.24.47:22-147.75.109.163:37672 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:36.366564 systemd[1]: Started sshd@15-172.31.24.47:22-147.75.109.163:37672.service. Nov 1 00:13:36.551000 audit[5281]: USER_ACCT pid=5281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:36.553931 sshd[5281]: Accepted publickey for core from 147.75.109.163 port 37672 ssh2: RSA SHA256:l10clL99NTgBLZDdAUsIsAniCj4DES+0hQanxvSOioM Nov 1 00:13:36.557251 sshd[5281]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:13:36.551000 audit[5281]: CRED_ACQ pid=5281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:36.567359 systemd[1]: Started session-16.scope. Nov 1 00:13:36.568693 systemd-logind[1813]: New session 16 of user core. Nov 1 00:13:36.573258 kernel: audit: type=1101 audit(1761956016.551:1411): pid=5281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:36.573396 kernel: audit: type=1103 audit(1761956016.551:1412): pid=5281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:36.581266 kernel: audit: type=1006 audit(1761956016.551:1413): pid=5281 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Nov 1 00:13:36.551000 audit[5281]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff0a950c0 a2=3 a3=1 items=0 ppid=1 pid=5281 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:36.592504 kernel: audit: type=1300 audit(1761956016.551:1413): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff0a950c0 a2=3 a3=1 items=0 ppid=1 pid=5281 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:36.594244 kernel: audit: type=1327 audit(1761956016.551:1413): proctitle=737368643A20636F7265205B707269765D Nov 1 00:13:36.551000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:13:36.580000 audit[5281]: USER_START pid=5281 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:36.610515 kernel: audit: type=1105 audit(1761956016.580:1414): pid=5281 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:36.597000 audit[5283]: CRED_ACQ pid=5283 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:36.620243 kernel: audit: type=1103 audit(1761956016.597:1415): pid=5283 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:36.858767 sshd[5281]: pam_unix(sshd:session): session closed for user core Nov 1 00:13:36.859000 audit[5281]: USER_END pid=5281 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:36.864617 systemd[1]: session-16.scope: Deactivated successfully. Nov 1 00:13:36.865696 systemd[1]: sshd@15-172.31.24.47:22-147.75.109.163:37672.service: Deactivated successfully. Nov 1 00:13:36.867573 systemd-logind[1813]: Session 16 logged out. Waiting for processes to exit. Nov 1 00:13:36.870720 systemd-logind[1813]: Removed session 16. Nov 1 00:13:36.860000 audit[5281]: CRED_DISP pid=5281 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:36.882411 kernel: audit: type=1106 audit(1761956016.859:1416): pid=5281 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:36.882608 kernel: audit: type=1104 audit(1761956016.860:1417): pid=5281 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:36.865000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.24.47:22-147.75.109.163:37672 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:36.934235 kubelet[2832]: E1101 00:13:36.934184 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-789667c9c4-gltc6" podUID="de7ca9fd-9d9e-4866-9cab-137a354c3eda" Nov 1 00:13:38.934069 kubelet[2832]: E1101 00:13:38.933993 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-5d8bd955b8-hbwc2" podUID="7f4cf6fd-6544-4217-95df-022c9368163b" Nov 1 00:13:40.933049 kubelet[2832]: E1101 00:13:40.932991 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-789667c9c4-fpxfk" podUID="2015b9d0-1146-401a-9af6-fcdda8aedfda" Nov 1 00:13:40.934466 env[1820]: time="2025-11-01T00:13:40.934374511Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Nov 1 00:13:41.183650 env[1820]: time="2025-11-01T00:13:41.183462291Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:13:41.185770 env[1820]: time="2025-11-01T00:13:41.185637846Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Nov 1 00:13:41.186302 kubelet[2832]: E1101 00:13:41.186251 2832 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:13:41.186532 kubelet[2832]: E1101 00:13:41.186498 2832 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:13:41.187671 kubelet[2832]: E1101 00:13:41.187572 2832 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.30.4,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-rj9qj,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-7qfc7_calico-system(2c016bf7-bf29-4156-a534-853af2a9ae4f): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Nov 1 00:13:41.191475 env[1820]: time="2025-11-01T00:13:41.191135684Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Nov 1 00:13:41.564903 env[1820]: time="2025-11-01T00:13:41.564670582Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:13:41.567072 env[1820]: time="2025-11-01T00:13:41.566946493Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Nov 1 00:13:41.567510 kubelet[2832]: E1101 00:13:41.567438 2832 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:13:41.567626 kubelet[2832]: E1101 00:13:41.567528 2832 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:13:41.568635 kubelet[2832]: E1101 00:13:41.568330 2832 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-rj9qj,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-7qfc7_calico-system(2c016bf7-bf29-4156-a534-853af2a9ae4f): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Nov 1 00:13:41.569942 kubelet[2832]: E1101 00:13:41.569839 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-7qfc7" podUID="2c016bf7-bf29-4156-a534-853af2a9ae4f" Nov 1 00:13:41.890674 systemd[1]: Started sshd@16-172.31.24.47:22-147.75.109.163:46004.service. Nov 1 00:13:41.890000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.24.47:22-147.75.109.163:46004 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:41.893334 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:13:41.893426 kernel: audit: type=1130 audit(1761956021.890:1419): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.24.47:22-147.75.109.163:46004 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:42.078000 audit[5297]: USER_ACCT pid=5297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:42.080059 sshd[5297]: Accepted publickey for core from 147.75.109.163 port 46004 ssh2: RSA SHA256:l10clL99NTgBLZDdAUsIsAniCj4DES+0hQanxvSOioM Nov 1 00:13:42.092090 kernel: audit: type=1101 audit(1761956022.078:1420): pid=5297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:42.092000 audit[5297]: CRED_ACQ pid=5297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:42.095612 sshd[5297]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:13:42.106475 systemd[1]: Started session-17.scope. Nov 1 00:13:42.109349 systemd-logind[1813]: New session 17 of user core. Nov 1 00:13:42.110711 kernel: audit: type=1103 audit(1761956022.092:1421): pid=5297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:42.110783 kernel: audit: type=1006 audit(1761956022.093:1422): pid=5297 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Nov 1 00:13:42.110837 kernel: audit: type=1300 audit(1761956022.093:1422): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd6491a80 a2=3 a3=1 items=0 ppid=1 pid=5297 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:42.093000 audit[5297]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd6491a80 a2=3 a3=1 items=0 ppid=1 pid=5297 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:42.093000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:13:42.125938 kernel: audit: type=1327 audit(1761956022.093:1422): proctitle=737368643A20636F7265205B707269765D Nov 1 00:13:42.122000 audit[5297]: USER_START pid=5297 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:42.139042 kernel: audit: type=1105 audit(1761956022.122:1423): pid=5297 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:42.138000 audit[5299]: CRED_ACQ pid=5299 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:42.150041 kernel: audit: type=1103 audit(1761956022.138:1424): pid=5299 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:42.420934 sshd[5297]: pam_unix(sshd:session): session closed for user core Nov 1 00:13:42.422000 audit[5297]: USER_END pid=5297 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:42.427841 systemd-logind[1813]: Session 17 logged out. Waiting for processes to exit. Nov 1 00:13:42.422000 audit[5297]: CRED_DISP pid=5297 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:42.446153 kernel: audit: type=1106 audit(1761956022.422:1425): pid=5297 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:42.446315 kernel: audit: type=1104 audit(1761956022.422:1426): pid=5297 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:42.436653 systemd[1]: session-17.scope: Deactivated successfully. Nov 1 00:13:42.438623 systemd-logind[1813]: Removed session 17. Nov 1 00:13:42.439807 systemd[1]: sshd@16-172.31.24.47:22-147.75.109.163:46004.service: Deactivated successfully. Nov 1 00:13:42.435000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.24.47:22-147.75.109.163:46004 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:46.934035 env[1820]: time="2025-11-01T00:13:46.933763892Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Nov 1 00:13:47.168357 env[1820]: time="2025-11-01T00:13:47.168252672Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:13:47.170689 env[1820]: time="2025-11-01T00:13:47.170598772Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Nov 1 00:13:47.171116 kubelet[2832]: E1101 00:13:47.171045 2832 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:13:47.171752 kubelet[2832]: E1101 00:13:47.171704 2832 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:13:47.172559 env[1820]: time="2025-11-01T00:13:47.172474901Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Nov 1 00:13:47.173151 kubelet[2832]: E1101 00:13:47.173023 2832 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.4,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:68ad8fca00514a76b38910a616d960e3,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-2m6c6,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-58c6498fd4-zrpxf_calico-system(b4871652-e36f-45a1-ab7f-b8d5032703a6): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Nov 1 00:13:47.424707 env[1820]: time="2025-11-01T00:13:47.424482867Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:13:47.426834 env[1820]: time="2025-11-01T00:13:47.426663330Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Nov 1 00:13:47.427152 kubelet[2832]: E1101 00:13:47.427086 2832 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:13:47.427315 kubelet[2832]: E1101 00:13:47.427163 2832 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:13:47.427782 env[1820]: time="2025-11-01T00:13:47.427701518Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Nov 1 00:13:47.428251 kubelet[2832]: E1101 00:13:47.428125 2832 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-q2n49,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-666569f655-h7lrq_calico-system(e0c48ca1-c3ce-4df4-a9c4-ebf24818e57a): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Nov 1 00:13:47.430056 kubelet[2832]: E1101 00:13:47.429932 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-h7lrq" podUID="e0c48ca1-c3ce-4df4-a9c4-ebf24818e57a" Nov 1 00:13:47.468641 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:13:47.468830 kernel: audit: type=1130 audit(1761956027.454:1428): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.24.47:22-147.75.109.163:46006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:47.454000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.24.47:22-147.75.109.163:46006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:47.455548 systemd[1]: Started sshd@17-172.31.24.47:22-147.75.109.163:46006.service. Nov 1 00:13:47.628000 audit[5309]: USER_ACCT pid=5309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:47.629700 sshd[5309]: Accepted publickey for core from 147.75.109.163 port 46006 ssh2: RSA SHA256:l10clL99NTgBLZDdAUsIsAniCj4DES+0hQanxvSOioM Nov 1 00:13:47.642015 kernel: audit: type=1101 audit(1761956027.628:1429): pid=5309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:47.641000 audit[5309]: CRED_ACQ pid=5309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:47.643695 sshd[5309]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:13:47.658950 kernel: audit: type=1103 audit(1761956027.641:1430): pid=5309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:47.659155 kernel: audit: type=1006 audit(1761956027.641:1431): pid=5309 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 Nov 1 00:13:47.641000 audit[5309]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffede8c230 a2=3 a3=1 items=0 ppid=1 pid=5309 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:47.670117 kernel: audit: type=1300 audit(1761956027.641:1431): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffede8c230 a2=3 a3=1 items=0 ppid=1 pid=5309 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:47.641000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:13:47.674160 kernel: audit: type=1327 audit(1761956027.641:1431): proctitle=737368643A20636F7265205B707269765D Nov 1 00:13:47.675862 env[1820]: time="2025-11-01T00:13:47.674569872Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:13:47.677116 systemd-logind[1813]: New session 18 of user core. Nov 1 00:13:47.680498 kubelet[2832]: E1101 00:13:47.678445 2832 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:13:47.680498 kubelet[2832]: E1101 00:13:47.678507 2832 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:13:47.680498 kubelet[2832]: E1101 00:13:47.678668 2832 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-2m6c6,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-58c6498fd4-zrpxf_calico-system(b4871652-e36f-45a1-ab7f-b8d5032703a6): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Nov 1 00:13:47.680903 env[1820]: time="2025-11-01T00:13:47.677749619Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Nov 1 00:13:47.679202 systemd[1]: Started session-18.scope. Nov 1 00:13:47.681235 kubelet[2832]: E1101 00:13:47.680916 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-58c6498fd4-zrpxf" podUID="b4871652-e36f-45a1-ab7f-b8d5032703a6" Nov 1 00:13:47.698000 audit[5309]: USER_START pid=5309 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:47.712022 kernel: audit: type=1105 audit(1761956027.698:1432): pid=5309 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:47.711000 audit[5311]: CRED_ACQ pid=5311 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:47.722007 kernel: audit: type=1103 audit(1761956027.711:1433): pid=5311 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:47.937674 env[1820]: time="2025-11-01T00:13:47.937275301Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:13:47.980882 sshd[5309]: pam_unix(sshd:session): session closed for user core Nov 1 00:13:47.982000 audit[5309]: USER_END pid=5309 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:47.999470 systemd-logind[1813]: Session 18 logged out. Waiting for processes to exit. Nov 1 00:13:47.995000 audit[5309]: CRED_DISP pid=5309 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:48.007015 kernel: audit: type=1106 audit(1761956027.982:1434): pid=5309 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:48.009736 systemd[1]: sshd@17-172.31.24.47:22-147.75.109.163:46006.service: Deactivated successfully. Nov 1 00:13:48.025038 kernel: audit: type=1104 audit(1761956027.995:1435): pid=5309 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:48.023761 systemd[1]: session-18.scope: Deactivated successfully. Nov 1 00:13:48.026028 systemd-logind[1813]: Removed session 18. Nov 1 00:13:48.009000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.24.47:22-147.75.109.163:46006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:48.031282 systemd[1]: Started sshd@18-172.31.24.47:22-147.75.109.163:46010.service. Nov 1 00:13:48.031000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.24.47:22-147.75.109.163:46010 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:48.193410 env[1820]: time="2025-11-01T00:13:48.193004304Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:13:48.195524 env[1820]: time="2025-11-01T00:13:48.195281476Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:13:48.195851 kubelet[2832]: E1101 00:13:48.195761 2832 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:13:48.196585 kubelet[2832]: E1101 00:13:48.195884 2832 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:13:48.200286 kubelet[2832]: E1101 00:13:48.200136 2832 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-lgxsj,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-789667c9c4-gltc6_calico-apiserver(de7ca9fd-9d9e-4866-9cab-137a354c3eda): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:13:48.201803 kubelet[2832]: E1101 00:13:48.201674 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-789667c9c4-gltc6" podUID="de7ca9fd-9d9e-4866-9cab-137a354c3eda" Nov 1 00:13:48.233000 audit[5321]: USER_ACCT pid=5321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:48.235238 sshd[5321]: Accepted publickey for core from 147.75.109.163 port 46010 ssh2: RSA SHA256:l10clL99NTgBLZDdAUsIsAniCj4DES+0hQanxvSOioM Nov 1 00:13:48.236000 audit[5321]: CRED_ACQ pid=5321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:48.236000 audit[5321]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff037a2e0 a2=3 a3=1 items=0 ppid=1 pid=5321 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:48.236000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:13:48.238493 sshd[5321]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:13:48.252745 systemd[1]: Started session-19.scope. Nov 1 00:13:48.254875 systemd-logind[1813]: New session 19 of user core. Nov 1 00:13:48.264000 audit[5321]: USER_START pid=5321 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:48.267000 audit[5323]: CRED_ACQ pid=5323 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:48.767501 sshd[5321]: pam_unix(sshd:session): session closed for user core Nov 1 00:13:48.768000 audit[5321]: USER_END pid=5321 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:48.769000 audit[5321]: CRED_DISP pid=5321 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:48.772956 systemd-logind[1813]: Session 19 logged out. Waiting for processes to exit. Nov 1 00:13:48.774000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.24.47:22-147.75.109.163:46010 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:48.774605 systemd[1]: sshd@18-172.31.24.47:22-147.75.109.163:46010.service: Deactivated successfully. Nov 1 00:13:48.776198 systemd[1]: session-19.scope: Deactivated successfully. Nov 1 00:13:48.778187 systemd-logind[1813]: Removed session 19. Nov 1 00:13:48.793000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.24.47:22-147.75.109.163:46016 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:48.793710 systemd[1]: Started sshd@19-172.31.24.47:22-147.75.109.163:46016.service. Nov 1 00:13:48.965000 audit[5330]: USER_ACCT pid=5330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:48.966647 sshd[5330]: Accepted publickey for core from 147.75.109.163 port 46016 ssh2: RSA SHA256:l10clL99NTgBLZDdAUsIsAniCj4DES+0hQanxvSOioM Nov 1 00:13:48.967000 audit[5330]: CRED_ACQ pid=5330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:48.967000 audit[5330]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe3b88350 a2=3 a3=1 items=0 ppid=1 pid=5330 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:48.967000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:13:48.970049 sshd[5330]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:13:48.978917 systemd-logind[1813]: New session 20 of user core. Nov 1 00:13:48.979935 systemd[1]: Started session-20.scope. Nov 1 00:13:48.989000 audit[5330]: USER_START pid=5330 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:48.991000 audit[5332]: CRED_ACQ pid=5332 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:50.177000 audit[5353]: NETFILTER_CFG table=filter:125 family=2 entries=26 op=nft_register_rule pid=5353 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:13:50.177000 audit[5353]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14176 a0=3 a1=ffffedb017e0 a2=0 a3=1 items=0 ppid=2988 pid=5353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:50.177000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:13:50.186000 audit[5353]: NETFILTER_CFG table=nat:126 family=2 entries=20 op=nft_register_rule pid=5353 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:13:50.186000 audit[5353]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=ffffedb017e0 a2=0 a3=1 items=0 ppid=2988 pid=5353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:50.186000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:13:50.217137 sshd[5330]: pam_unix(sshd:session): session closed for user core Nov 1 00:13:50.218000 audit[5330]: USER_END pid=5330 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:50.218000 audit[5330]: CRED_DISP pid=5330 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:50.223536 systemd[1]: sshd@19-172.31.24.47:22-147.75.109.163:46016.service: Deactivated successfully. Nov 1 00:13:50.222000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.24.47:22-147.75.109.163:46016 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:50.224960 systemd[1]: session-20.scope: Deactivated successfully. Nov 1 00:13:50.227315 systemd-logind[1813]: Session 20 logged out. Waiting for processes to exit. Nov 1 00:13:50.229932 systemd-logind[1813]: Removed session 20. Nov 1 00:13:50.250034 systemd[1]: Started sshd@20-172.31.24.47:22-147.75.109.163:41598.service. Nov 1 00:13:50.249000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.24.47:22-147.75.109.163:41598 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:50.255000 audit[5355]: NETFILTER_CFG table=filter:127 family=2 entries=38 op=nft_register_rule pid=5355 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:13:50.255000 audit[5355]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14176 a0=3 a1=ffffc4351880 a2=0 a3=1 items=0 ppid=2988 pid=5355 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:50.255000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:13:50.266000 audit[5355]: NETFILTER_CFG table=nat:128 family=2 entries=20 op=nft_register_rule pid=5355 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:13:50.266000 audit[5355]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=ffffc4351880 a2=0 a3=1 items=0 ppid=2988 pid=5355 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:50.266000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:13:50.441000 audit[5358]: USER_ACCT pid=5358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:50.445909 sshd[5358]: Accepted publickey for core from 147.75.109.163 port 41598 ssh2: RSA SHA256:l10clL99NTgBLZDdAUsIsAniCj4DES+0hQanxvSOioM Nov 1 00:13:50.445000 audit[5358]: CRED_ACQ pid=5358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:50.446000 audit[5358]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff49c56d0 a2=3 a3=1 items=0 ppid=1 pid=5358 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:50.446000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:13:50.447962 sshd[5358]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:13:50.457083 systemd-logind[1813]: New session 21 of user core. Nov 1 00:13:50.458312 systemd[1]: Started session-21.scope. Nov 1 00:13:50.467000 audit[5358]: USER_START pid=5358 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:50.470000 audit[5360]: CRED_ACQ pid=5360 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:51.023107 sshd[5358]: pam_unix(sshd:session): session closed for user core Nov 1 00:13:51.025000 audit[5358]: USER_END pid=5358 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:51.026000 audit[5358]: CRED_DISP pid=5358 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:51.029507 systemd[1]: session-21.scope: Deactivated successfully. Nov 1 00:13:51.031041 systemd-logind[1813]: Session 21 logged out. Waiting for processes to exit. Nov 1 00:13:51.031585 systemd[1]: sshd@20-172.31.24.47:22-147.75.109.163:41598.service: Deactivated successfully. Nov 1 00:13:51.031000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.24.47:22-147.75.109.163:41598 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:51.036022 systemd-logind[1813]: Removed session 21. Nov 1 00:13:51.052095 systemd[1]: Started sshd@21-172.31.24.47:22-147.75.109.163:41600.service. Nov 1 00:13:51.051000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.24.47:22-147.75.109.163:41600 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:51.226000 audit[5367]: USER_ACCT pid=5367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:51.227772 sshd[5367]: Accepted publickey for core from 147.75.109.163 port 41600 ssh2: RSA SHA256:l10clL99NTgBLZDdAUsIsAniCj4DES+0hQanxvSOioM Nov 1 00:13:51.228000 audit[5367]: CRED_ACQ pid=5367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:51.228000 audit[5367]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcbef8570 a2=3 a3=1 items=0 ppid=1 pid=5367 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:51.228000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:13:51.231250 sshd[5367]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:13:51.240081 systemd-logind[1813]: New session 22 of user core. Nov 1 00:13:51.240632 systemd[1]: Started session-22.scope. Nov 1 00:13:51.249000 audit[5367]: USER_START pid=5367 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:51.252000 audit[5369]: CRED_ACQ pid=5369 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:51.508924 sshd[5367]: pam_unix(sshd:session): session closed for user core Nov 1 00:13:51.510000 audit[5367]: USER_END pid=5367 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:51.510000 audit[5367]: CRED_DISP pid=5367 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:51.514667 systemd-logind[1813]: Session 22 logged out. Waiting for processes to exit. Nov 1 00:13:51.515274 systemd[1]: session-22.scope: Deactivated successfully. Nov 1 00:13:51.516621 systemd[1]: sshd@21-172.31.24.47:22-147.75.109.163:41600.service: Deactivated successfully. Nov 1 00:13:51.516000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.24.47:22-147.75.109.163:41600 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:51.518932 systemd-logind[1813]: Removed session 22. Nov 1 00:13:51.950428 kubelet[2832]: E1101 00:13:51.950324 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-7qfc7" podUID="2c016bf7-bf29-4156-a534-853af2a9ae4f" Nov 1 00:13:52.934143 env[1820]: time="2025-11-01T00:13:52.933647817Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Nov 1 00:13:53.184051 env[1820]: time="2025-11-01T00:13:53.183766486Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:13:53.186733 env[1820]: time="2025-11-01T00:13:53.186200319Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Nov 1 00:13:53.188718 kubelet[2832]: E1101 00:13:53.188626 2832 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:13:53.189268 kubelet[2832]: E1101 00:13:53.188722 2832 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:13:53.192932 kubelet[2832]: E1101 00:13:53.192793 2832 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,loadbalancer,ValueFrom:nil,},EnvVar{Name:DISABLE_KUBE_CONTROLLERS_CONFIG_API,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:CA_CRT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/cert.pem,SubPath:ca-bundle.crt,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-7jnvr,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*999,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-kube-controllers-5d8bd955b8-hbwc2_calico-system(7f4cf6fd-6544-4217-95df-022c9368163b): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Nov 1 00:13:53.194546 kubelet[2832]: E1101 00:13:53.194474 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-5d8bd955b8-hbwc2" podUID="7f4cf6fd-6544-4217-95df-022c9368163b" Nov 1 00:13:54.934099 env[1820]: time="2025-11-01T00:13:54.934045278Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:13:55.165708 env[1820]: time="2025-11-01T00:13:55.165619442Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:13:55.168263 env[1820]: time="2025-11-01T00:13:55.168183848Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:13:55.168752 kubelet[2832]: E1101 00:13:55.168705 2832 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:13:55.169667 kubelet[2832]: E1101 00:13:55.169344 2832 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:13:55.169667 kubelet[2832]: E1101 00:13:55.169565 2832 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-cdsgs,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-789667c9c4-fpxfk_calico-apiserver(2015b9d0-1146-401a-9af6-fcdda8aedfda): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:13:55.171063 kubelet[2832]: E1101 00:13:55.170949 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-789667c9c4-fpxfk" podUID="2015b9d0-1146-401a-9af6-fcdda8aedfda" Nov 1 00:13:56.540479 systemd[1]: Started sshd@22-172.31.24.47:22-147.75.109.163:41614.service. Nov 1 00:13:56.552650 kernel: kauditd_printk_skb: 57 callbacks suppressed Nov 1 00:13:56.552794 kernel: audit: type=1130 audit(1761956036.540:1477): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.24.47:22-147.75.109.163:41614 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:56.540000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.24.47:22-147.75.109.163:41614 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:56.713000 audit[5379]: USER_ACCT pid=5379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:56.721877 sshd[5379]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:13:56.723037 sshd[5379]: Accepted publickey for core from 147.75.109.163 port 41614 ssh2: RSA SHA256:l10clL99NTgBLZDdAUsIsAniCj4DES+0hQanxvSOioM Nov 1 00:13:56.717000 audit[5379]: CRED_ACQ pid=5379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:56.735284 kernel: audit: type=1101 audit(1761956036.713:1478): pid=5379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:56.735484 kernel: audit: type=1103 audit(1761956036.717:1479): pid=5379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:56.742738 kernel: audit: type=1006 audit(1761956036.717:1480): pid=5379 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Nov 1 00:13:56.717000 audit[5379]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff5b85bc0 a2=3 a3=1 items=0 ppid=1 pid=5379 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:56.755501 kernel: audit: type=1300 audit(1761956036.717:1480): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff5b85bc0 a2=3 a3=1 items=0 ppid=1 pid=5379 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:56.717000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:13:56.760546 kernel: audit: type=1327 audit(1761956036.717:1480): proctitle=737368643A20636F7265205B707269765D Nov 1 00:13:56.762281 systemd-logind[1813]: New session 23 of user core. Nov 1 00:13:56.764392 systemd[1]: Started session-23.scope. Nov 1 00:13:56.773000 audit[5379]: USER_START pid=5379 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:56.786000 audit[5381]: CRED_ACQ pid=5381 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:56.797376 kernel: audit: type=1105 audit(1761956036.773:1481): pid=5379 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:56.797478 kernel: audit: type=1103 audit(1761956036.786:1482): pid=5381 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:57.024309 sshd[5379]: pam_unix(sshd:session): session closed for user core Nov 1 00:13:57.025000 audit[5379]: USER_END pid=5379 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:57.031507 systemd[1]: session-23.scope: Deactivated successfully. Nov 1 00:13:57.032825 systemd[1]: sshd@22-172.31.24.47:22-147.75.109.163:41614.service: Deactivated successfully. Nov 1 00:13:57.026000 audit[5379]: CRED_DISP pid=5379 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:57.049743 kernel: audit: type=1106 audit(1761956037.025:1483): pid=5379 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:57.049829 kernel: audit: type=1104 audit(1761956037.026:1484): pid=5379 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:13:57.032000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.24.47:22-147.75.109.163:41614 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:13:57.051425 systemd-logind[1813]: Session 23 logged out. Waiting for processes to exit. Nov 1 00:13:57.053510 systemd-logind[1813]: Removed session 23. Nov 1 00:13:57.934670 kubelet[2832]: E1101 00:13:57.934593 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-58c6498fd4-zrpxf" podUID="b4871652-e36f-45a1-ab7f-b8d5032703a6" Nov 1 00:13:58.480000 audit[2700]: AVC avc: denied { watch } for pid=2700 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521025 scontext=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:13:58.480000 audit[2700]: AVC avc: denied { watch } for pid=2700 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521019 scontext=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:13:58.480000 audit[2700]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7b a1=40138df120 a2=fc6 a3=0 items=0 ppid=2459 pid=2700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 key=(null) Nov 1 00:13:58.480000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32342E3437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:13:58.480000 audit[2700]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7a a1=400e813770 a2=fc6 a3=0 items=0 ppid=2459 pid=2700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 key=(null) Nov 1 00:13:58.480000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32342E3437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:13:58.484000 audit[2700]: AVC avc: denied { watch } for pid=2700 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521021 scontext=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:13:58.484000 audit[2700]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7a a1=400e813830 a2=fc6 a3=0 items=0 ppid=2459 pid=2700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 key=(null) Nov 1 00:13:58.484000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32342E3437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:13:58.493000 audit[2700]: AVC avc: denied { watch } for pid=2700 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521027 scontext=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:13:58.493000 audit[2700]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7a a1=400e813860 a2=fc6 a3=0 items=0 ppid=2459 pid=2700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 key=(null) Nov 1 00:13:58.493000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32342E3437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:13:58.499000 audit[2700]: AVC avc: denied { watch } for pid=2700 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521019 scontext=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:13:58.499000 audit[2700]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7a a1=40138df2e0 a2=fc6 a3=0 items=0 ppid=2459 pid=2700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 key=(null) Nov 1 00:13:58.499000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32342E3437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:13:58.500000 audit[2700]: AVC avc: denied { watch } for pid=2700 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521025 scontext=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:13:58.500000 audit[2700]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7a a1=400f2004b0 a2=fc6 a3=0 items=0 ppid=2459 pid=2700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 key=(null) Nov 1 00:13:58.500000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32342E3437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:13:58.715000 audit[5391]: NETFILTER_CFG table=filter:129 family=2 entries=26 op=nft_register_rule pid=5391 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:13:58.715000 audit[5391]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffedd5f1c0 a2=0 a3=1 items=0 ppid=2988 pid=5391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:58.715000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:13:58.724000 audit[5391]: NETFILTER_CFG table=nat:130 family=2 entries=104 op=nft_register_chain pid=5391 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:13:58.724000 audit[5391]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=48684 a0=3 a1=ffffedd5f1c0 a2=0 a3=1 items=0 ppid=2988 pid=5391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:13:58.724000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:13:58.783000 audit[2677]: AVC avc: denied { watch } for pid=2677 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521025 scontext=system_u:system_r:svirt_lxc_net_t:s0:c413,c578 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:13:58.784000 audit[2677]: AVC avc: denied { watch } for pid=2677 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521019 scontext=system_u:system_r:svirt_lxc_net_t:s0:c413,c578 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:13:58.784000 audit[2677]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40021cac60 a2=fc6 a3=0 items=0 ppid=2422 pid=2677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c413,c578 key=(null) Nov 1 00:13:58.784000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:13:58.783000 audit[2677]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002aaaea0 a2=fc6 a3=0 items=0 ppid=2422 pid=2677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c413,c578 key=(null) Nov 1 00:13:58.783000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:13:58.933506 kubelet[2832]: E1101 00:13:58.933444 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-h7lrq" podUID="e0c48ca1-c3ce-4df4-a9c4-ebf24818e57a" Nov 1 00:14:01.373883 systemd[1]: run-containerd-runc-k8s.io-79fd55566f956de9971ecfefc31477fdb4d8c3aea32e2854068956f298d16487-runc.q0zDMr.mount: Deactivated successfully. Nov 1 00:14:01.935881 kubelet[2832]: E1101 00:14:01.935813 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-789667c9c4-gltc6" podUID="de7ca9fd-9d9e-4866-9cab-137a354c3eda" Nov 1 00:14:02.055297 systemd[1]: Started sshd@23-172.31.24.47:22-147.75.109.163:53420.service. Nov 1 00:14:02.075195 kernel: kauditd_printk_skb: 31 callbacks suppressed Nov 1 00:14:02.075333 kernel: audit: type=1130 audit(1761956042.062:1496): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.24.47:22-147.75.109.163:53420 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:02.062000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.24.47:22-147.75.109.163:53420 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:02.232842 sshd[5415]: Accepted publickey for core from 147.75.109.163 port 53420 ssh2: RSA SHA256:l10clL99NTgBLZDdAUsIsAniCj4DES+0hQanxvSOioM Nov 1 00:14:02.231000 audit[5415]: USER_ACCT pid=5415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:02.246646 sshd[5415]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:14:02.244000 audit[5415]: CRED_ACQ pid=5415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:02.259119 kernel: audit: type=1101 audit(1761956042.231:1497): pid=5415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:02.259295 kernel: audit: type=1103 audit(1761956042.244:1498): pid=5415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:02.266675 kernel: audit: type=1006 audit(1761956042.244:1499): pid=5415 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Nov 1 00:14:02.271418 systemd-logind[1813]: New session 24 of user core. Nov 1 00:14:02.273394 systemd[1]: Started session-24.scope. Nov 1 00:14:02.244000 audit[5415]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc31d23b0 a2=3 a3=1 items=0 ppid=1 pid=5415 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:02.285588 kernel: audit: type=1300 audit(1761956042.244:1499): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc31d23b0 a2=3 a3=1 items=0 ppid=1 pid=5415 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:02.244000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:14:02.290761 kernel: audit: type=1327 audit(1761956042.244:1499): proctitle=737368643A20636F7265205B707269765D Nov 1 00:14:02.298000 audit[5415]: USER_START pid=5415 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:02.311000 audit[5417]: CRED_ACQ pid=5417 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:02.323140 kernel: audit: type=1105 audit(1761956042.298:1500): pid=5415 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:02.323270 kernel: audit: type=1103 audit(1761956042.311:1501): pid=5417 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:02.627674 sshd[5415]: pam_unix(sshd:session): session closed for user core Nov 1 00:14:02.630000 audit[5415]: USER_END pid=5415 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:02.646102 systemd[1]: session-24.scope: Deactivated successfully. Nov 1 00:14:02.647953 systemd[1]: sshd@23-172.31.24.47:22-147.75.109.163:53420.service: Deactivated successfully. Nov 1 00:14:02.649419 systemd-logind[1813]: Session 24 logged out. Waiting for processes to exit. Nov 1 00:14:02.630000 audit[5415]: CRED_DISP pid=5415 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:02.661440 kernel: audit: type=1106 audit(1761956042.630:1502): pid=5415 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:02.661556 kernel: audit: type=1104 audit(1761956042.630:1503): pid=5415 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:02.661883 systemd-logind[1813]: Removed session 24. Nov 1 00:14:02.647000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.24.47:22-147.75.109.163:53420 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:04.711000 audit[2677]: AVC avc: denied { watch } for pid=2677 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521019 scontext=system_u:system_r:svirt_lxc_net_t:s0:c413,c578 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:14:04.711000 audit[2677]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40021cbd60 a2=fc6 a3=0 items=0 ppid=2422 pid=2677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c413,c578 key=(null) Nov 1 00:14:04.711000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:14:04.718000 audit[2677]: AVC avc: denied { watch } for pid=2677 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521019 scontext=system_u:system_r:svirt_lxc_net_t:s0:c413,c578 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:14:04.718000 audit[2677]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40021cbd80 a2=fc6 a3=0 items=0 ppid=2422 pid=2677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c413,c578 key=(null) Nov 1 00:14:04.718000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:14:04.718000 audit[2677]: AVC avc: denied { watch } for pid=2677 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521019 scontext=system_u:system_r:svirt_lxc_net_t:s0:c413,c578 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:14:04.718000 audit[2677]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=400338dee0 a2=fc6 a3=0 items=0 ppid=2422 pid=2677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c413,c578 key=(null) Nov 1 00:14:04.718000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:14:04.718000 audit[2677]: AVC avc: denied { watch } for pid=2677 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521019 scontext=system_u:system_r:svirt_lxc_net_t:s0:c413,c578 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:14:04.718000 audit[2677]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=400338df00 a2=fc6 a3=0 items=0 ppid=2422 pid=2677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c413,c578 key=(null) Nov 1 00:14:04.718000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:14:05.940333 kubelet[2832]: E1101 00:14:05.938898 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-7qfc7" podUID="2c016bf7-bf29-4156-a534-853af2a9ae4f" Nov 1 00:14:06.145907 env[1820]: time="2025-11-01T00:14:06.144111728Z" level=info msg="StopPodSandbox for \"381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5\"" Nov 1 00:14:06.361685 env[1820]: 2025-11-01 00:14:06.266 [WARNING][5436] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--24--47-k8s-coredns--674b8bbfcf--x4xqs-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"5344d4ec-b790-4603-a008-c051a1d6febf", ResourceVersion:"1084", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 12, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-24-47", ContainerID:"c64dbd445b983da519eac043663c61984dcc589254e3211283a96c5f2cd1bb20", Pod:"coredns-674b8bbfcf-x4xqs", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.49.68/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali4b1ddad55d0", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:14:06.361685 env[1820]: 2025-11-01 00:14:06.267 [INFO][5436] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5" Nov 1 00:14:06.361685 env[1820]: 2025-11-01 00:14:06.267 [INFO][5436] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5" iface="eth0" netns="" Nov 1 00:14:06.361685 env[1820]: 2025-11-01 00:14:06.267 [INFO][5436] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5" Nov 1 00:14:06.361685 env[1820]: 2025-11-01 00:14:06.267 [INFO][5436] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5" Nov 1 00:14:06.361685 env[1820]: 2025-11-01 00:14:06.329 [INFO][5443] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5" HandleID="k8s-pod-network.381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5" Workload="ip--172--31--24--47-k8s-coredns--674b8bbfcf--x4xqs-eth0" Nov 1 00:14:06.361685 env[1820]: 2025-11-01 00:14:06.330 [INFO][5443] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:14:06.361685 env[1820]: 2025-11-01 00:14:06.330 [INFO][5443] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:14:06.361685 env[1820]: 2025-11-01 00:14:06.351 [WARNING][5443] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5" HandleID="k8s-pod-network.381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5" Workload="ip--172--31--24--47-k8s-coredns--674b8bbfcf--x4xqs-eth0" Nov 1 00:14:06.361685 env[1820]: 2025-11-01 00:14:06.351 [INFO][5443] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5" HandleID="k8s-pod-network.381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5" Workload="ip--172--31--24--47-k8s-coredns--674b8bbfcf--x4xqs-eth0" Nov 1 00:14:06.361685 env[1820]: 2025-11-01 00:14:06.356 [INFO][5443] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:14:06.361685 env[1820]: 2025-11-01 00:14:06.358 [INFO][5436] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5" Nov 1 00:14:06.363113 env[1820]: time="2025-11-01T00:14:06.363055096Z" level=info msg="TearDown network for sandbox \"381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5\" successfully" Nov 1 00:14:06.363306 env[1820]: time="2025-11-01T00:14:06.363269753Z" level=info msg="StopPodSandbox for \"381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5\" returns successfully" Nov 1 00:14:06.364924 env[1820]: time="2025-11-01T00:14:06.364858564Z" level=info msg="RemovePodSandbox for \"381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5\"" Nov 1 00:14:06.365143 env[1820]: time="2025-11-01T00:14:06.364926209Z" level=info msg="Forcibly stopping sandbox \"381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5\"" Nov 1 00:14:06.557230 env[1820]: 2025-11-01 00:14:06.474 [WARNING][5458] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--24--47-k8s-coredns--674b8bbfcf--x4xqs-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"5344d4ec-b790-4603-a008-c051a1d6febf", ResourceVersion:"1084", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 12, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-24-47", ContainerID:"c64dbd445b983da519eac043663c61984dcc589254e3211283a96c5f2cd1bb20", Pod:"coredns-674b8bbfcf-x4xqs", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.49.68/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali4b1ddad55d0", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:14:06.557230 env[1820]: 2025-11-01 00:14:06.474 [INFO][5458] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5" Nov 1 00:14:06.557230 env[1820]: 2025-11-01 00:14:06.474 [INFO][5458] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5" iface="eth0" netns="" Nov 1 00:14:06.557230 env[1820]: 2025-11-01 00:14:06.474 [INFO][5458] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5" Nov 1 00:14:06.557230 env[1820]: 2025-11-01 00:14:06.474 [INFO][5458] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5" Nov 1 00:14:06.557230 env[1820]: 2025-11-01 00:14:06.529 [INFO][5465] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5" HandleID="k8s-pod-network.381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5" Workload="ip--172--31--24--47-k8s-coredns--674b8bbfcf--x4xqs-eth0" Nov 1 00:14:06.557230 env[1820]: 2025-11-01 00:14:06.530 [INFO][5465] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:14:06.557230 env[1820]: 2025-11-01 00:14:06.530 [INFO][5465] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:14:06.557230 env[1820]: 2025-11-01 00:14:06.547 [WARNING][5465] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5" HandleID="k8s-pod-network.381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5" Workload="ip--172--31--24--47-k8s-coredns--674b8bbfcf--x4xqs-eth0" Nov 1 00:14:06.557230 env[1820]: 2025-11-01 00:14:06.548 [INFO][5465] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5" HandleID="k8s-pod-network.381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5" Workload="ip--172--31--24--47-k8s-coredns--674b8bbfcf--x4xqs-eth0" Nov 1 00:14:06.557230 env[1820]: 2025-11-01 00:14:06.551 [INFO][5465] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:14:06.557230 env[1820]: 2025-11-01 00:14:06.553 [INFO][5458] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5" Nov 1 00:14:06.558462 env[1820]: time="2025-11-01T00:14:06.558398542Z" level=info msg="TearDown network for sandbox \"381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5\" successfully" Nov 1 00:14:06.566469 env[1820]: time="2025-11-01T00:14:06.566399035Z" level=info msg="RemovePodSandbox \"381d6247336c3229152e9a36eaab5b22e343aa1c324a72d17f2a4492aeff1fc5\" returns successfully" Nov 1 00:14:06.567545 env[1820]: time="2025-11-01T00:14:06.567489699Z" level=info msg="StopPodSandbox for \"27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16\"" Nov 1 00:14:06.741746 env[1820]: 2025-11-01 00:14:06.664 [WARNING][5479] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--24--47-k8s-calico--apiserver--789667c9c4--fpxfk-eth0", GenerateName:"calico-apiserver-789667c9c4-", Namespace:"calico-apiserver", SelfLink:"", UID:"2015b9d0-1146-401a-9af6-fcdda8aedfda", ResourceVersion:"1466", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 12, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"789667c9c4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-24-47", ContainerID:"198c5147a2b766364fa6f0e8e9b0c55151848e6a014ea1a834e156f1f5031100", Pod:"calico-apiserver-789667c9c4-fpxfk", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.49.71/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calia901c24fd98", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:14:06.741746 env[1820]: 2025-11-01 00:14:06.665 [INFO][5479] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16" Nov 1 00:14:06.741746 env[1820]: 2025-11-01 00:14:06.665 [INFO][5479] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16" iface="eth0" netns="" Nov 1 00:14:06.741746 env[1820]: 2025-11-01 00:14:06.665 [INFO][5479] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16" Nov 1 00:14:06.741746 env[1820]: 2025-11-01 00:14:06.665 [INFO][5479] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16" Nov 1 00:14:06.741746 env[1820]: 2025-11-01 00:14:06.709 [INFO][5486] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16" HandleID="k8s-pod-network.27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16" Workload="ip--172--31--24--47-k8s-calico--apiserver--789667c9c4--fpxfk-eth0" Nov 1 00:14:06.741746 env[1820]: 2025-11-01 00:14:06.713 [INFO][5486] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:14:06.741746 env[1820]: 2025-11-01 00:14:06.713 [INFO][5486] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:14:06.741746 env[1820]: 2025-11-01 00:14:06.733 [WARNING][5486] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16" HandleID="k8s-pod-network.27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16" Workload="ip--172--31--24--47-k8s-calico--apiserver--789667c9c4--fpxfk-eth0" Nov 1 00:14:06.741746 env[1820]: 2025-11-01 00:14:06.733 [INFO][5486] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16" HandleID="k8s-pod-network.27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16" Workload="ip--172--31--24--47-k8s-calico--apiserver--789667c9c4--fpxfk-eth0" Nov 1 00:14:06.741746 env[1820]: 2025-11-01 00:14:06.736 [INFO][5486] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:14:06.741746 env[1820]: 2025-11-01 00:14:06.739 [INFO][5479] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16" Nov 1 00:14:06.742735 env[1820]: time="2025-11-01T00:14:06.741790659Z" level=info msg="TearDown network for sandbox \"27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16\" successfully" Nov 1 00:14:06.742735 env[1820]: time="2025-11-01T00:14:06.741837123Z" level=info msg="StopPodSandbox for \"27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16\" returns successfully" Nov 1 00:14:06.742867 env[1820]: time="2025-11-01T00:14:06.742737982Z" level=info msg="RemovePodSandbox for \"27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16\"" Nov 1 00:14:06.742867 env[1820]: time="2025-11-01T00:14:06.742786594Z" level=info msg="Forcibly stopping sandbox \"27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16\"" Nov 1 00:14:06.933416 env[1820]: 2025-11-01 00:14:06.826 [WARNING][5502] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--24--47-k8s-calico--apiserver--789667c9c4--fpxfk-eth0", GenerateName:"calico-apiserver-789667c9c4-", Namespace:"calico-apiserver", SelfLink:"", UID:"2015b9d0-1146-401a-9af6-fcdda8aedfda", ResourceVersion:"1466", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 12, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"789667c9c4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-24-47", ContainerID:"198c5147a2b766364fa6f0e8e9b0c55151848e6a014ea1a834e156f1f5031100", Pod:"calico-apiserver-789667c9c4-fpxfk", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.49.71/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calia901c24fd98", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:14:06.933416 env[1820]: 2025-11-01 00:14:06.827 [INFO][5502] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16" Nov 1 00:14:06.933416 env[1820]: 2025-11-01 00:14:06.827 [INFO][5502] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16" iface="eth0" netns="" Nov 1 00:14:06.933416 env[1820]: 2025-11-01 00:14:06.827 [INFO][5502] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16" Nov 1 00:14:06.933416 env[1820]: 2025-11-01 00:14:06.827 [INFO][5502] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16" Nov 1 00:14:06.933416 env[1820]: 2025-11-01 00:14:06.895 [INFO][5509] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16" HandleID="k8s-pod-network.27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16" Workload="ip--172--31--24--47-k8s-calico--apiserver--789667c9c4--fpxfk-eth0" Nov 1 00:14:06.933416 env[1820]: 2025-11-01 00:14:06.896 [INFO][5509] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:14:06.933416 env[1820]: 2025-11-01 00:14:06.896 [INFO][5509] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:14:06.933416 env[1820]: 2025-11-01 00:14:06.923 [WARNING][5509] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16" HandleID="k8s-pod-network.27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16" Workload="ip--172--31--24--47-k8s-calico--apiserver--789667c9c4--fpxfk-eth0" Nov 1 00:14:06.933416 env[1820]: 2025-11-01 00:14:06.923 [INFO][5509] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16" HandleID="k8s-pod-network.27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16" Workload="ip--172--31--24--47-k8s-calico--apiserver--789667c9c4--fpxfk-eth0" Nov 1 00:14:06.933416 env[1820]: 2025-11-01 00:14:06.928 [INFO][5509] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:14:06.933416 env[1820]: 2025-11-01 00:14:06.930 [INFO][5502] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16" Nov 1 00:14:06.934430 env[1820]: time="2025-11-01T00:14:06.933455563Z" level=info msg="TearDown network for sandbox \"27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16\" successfully" Nov 1 00:14:06.938180 env[1820]: time="2025-11-01T00:14:06.938104492Z" level=info msg="RemovePodSandbox \"27cb2f54b75b617812d700c4ff022602f50956bda4791fa01cbef5d20dadcc16\" returns successfully" Nov 1 00:14:06.939112 env[1820]: time="2025-11-01T00:14:06.939018359Z" level=info msg="StopPodSandbox for \"17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc\"" Nov 1 00:14:07.116556 env[1820]: 2025-11-01 00:14:07.037 [WARNING][5525] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--24--47-k8s-coredns--674b8bbfcf--zgm5l-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"7dfbc4c3-4aed-49cd-a78d-d346944385a4", ResourceVersion:"1169", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 12, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-24-47", ContainerID:"8dfb201cc5128b311c155977b680c217ef2c6ee95c94fbcf79e25f33dc6da9c5", Pod:"coredns-674b8bbfcf-zgm5l", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.49.70/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calid21f6a348b3", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:14:07.116556 env[1820]: 2025-11-01 00:14:07.038 [INFO][5525] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc" Nov 1 00:14:07.116556 env[1820]: 2025-11-01 00:14:07.038 [INFO][5525] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc" iface="eth0" netns="" Nov 1 00:14:07.116556 env[1820]: 2025-11-01 00:14:07.038 [INFO][5525] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc" Nov 1 00:14:07.116556 env[1820]: 2025-11-01 00:14:07.038 [INFO][5525] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc" Nov 1 00:14:07.116556 env[1820]: 2025-11-01 00:14:07.093 [INFO][5532] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc" HandleID="k8s-pod-network.17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc" Workload="ip--172--31--24--47-k8s-coredns--674b8bbfcf--zgm5l-eth0" Nov 1 00:14:07.116556 env[1820]: 2025-11-01 00:14:07.094 [INFO][5532] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:14:07.116556 env[1820]: 2025-11-01 00:14:07.094 [INFO][5532] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:14:07.116556 env[1820]: 2025-11-01 00:14:07.107 [WARNING][5532] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc" HandleID="k8s-pod-network.17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc" Workload="ip--172--31--24--47-k8s-coredns--674b8bbfcf--zgm5l-eth0" Nov 1 00:14:07.116556 env[1820]: 2025-11-01 00:14:07.108 [INFO][5532] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc" HandleID="k8s-pod-network.17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc" Workload="ip--172--31--24--47-k8s-coredns--674b8bbfcf--zgm5l-eth0" Nov 1 00:14:07.116556 env[1820]: 2025-11-01 00:14:07.111 [INFO][5532] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:14:07.116556 env[1820]: 2025-11-01 00:14:07.113 [INFO][5525] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc" Nov 1 00:14:07.118345 env[1820]: time="2025-11-01T00:14:07.116498238Z" level=info msg="TearDown network for sandbox \"17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc\" successfully" Nov 1 00:14:07.118516 env[1820]: time="2025-11-01T00:14:07.118319228Z" level=info msg="StopPodSandbox for \"17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc\" returns successfully" Nov 1 00:14:07.119681 env[1820]: time="2025-11-01T00:14:07.119591357Z" level=info msg="RemovePodSandbox for \"17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc\"" Nov 1 00:14:07.120045 env[1820]: time="2025-11-01T00:14:07.119951803Z" level=info msg="Forcibly stopping sandbox \"17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc\"" Nov 1 00:14:07.289560 env[1820]: 2025-11-01 00:14:07.200 [WARNING][5546] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--24--47-k8s-coredns--674b8bbfcf--zgm5l-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"7dfbc4c3-4aed-49cd-a78d-d346944385a4", ResourceVersion:"1169", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 12, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-24-47", ContainerID:"8dfb201cc5128b311c155977b680c217ef2c6ee95c94fbcf79e25f33dc6da9c5", Pod:"coredns-674b8bbfcf-zgm5l", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.49.70/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calid21f6a348b3", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:14:07.289560 env[1820]: 2025-11-01 00:14:07.201 [INFO][5546] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc" Nov 1 00:14:07.289560 env[1820]: 2025-11-01 00:14:07.201 [INFO][5546] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc" iface="eth0" netns="" Nov 1 00:14:07.289560 env[1820]: 2025-11-01 00:14:07.201 [INFO][5546] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc" Nov 1 00:14:07.289560 env[1820]: 2025-11-01 00:14:07.201 [INFO][5546] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc" Nov 1 00:14:07.289560 env[1820]: 2025-11-01 00:14:07.267 [INFO][5553] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc" HandleID="k8s-pod-network.17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc" Workload="ip--172--31--24--47-k8s-coredns--674b8bbfcf--zgm5l-eth0" Nov 1 00:14:07.289560 env[1820]: 2025-11-01 00:14:07.267 [INFO][5553] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:14:07.289560 env[1820]: 2025-11-01 00:14:07.267 [INFO][5553] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:14:07.289560 env[1820]: 2025-11-01 00:14:07.281 [WARNING][5553] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc" HandleID="k8s-pod-network.17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc" Workload="ip--172--31--24--47-k8s-coredns--674b8bbfcf--zgm5l-eth0" Nov 1 00:14:07.289560 env[1820]: 2025-11-01 00:14:07.281 [INFO][5553] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc" HandleID="k8s-pod-network.17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc" Workload="ip--172--31--24--47-k8s-coredns--674b8bbfcf--zgm5l-eth0" Nov 1 00:14:07.289560 env[1820]: 2025-11-01 00:14:07.284 [INFO][5553] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:14:07.289560 env[1820]: 2025-11-01 00:14:07.286 [INFO][5546] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc" Nov 1 00:14:07.290892 env[1820]: time="2025-11-01T00:14:07.289601219Z" level=info msg="TearDown network for sandbox \"17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc\" successfully" Nov 1 00:14:07.297213 env[1820]: time="2025-11-01T00:14:07.297113321Z" level=info msg="RemovePodSandbox \"17c40c0794f2af4b2b2378879ea399c778e84386efe7ae61e1da9d7cf936d8fc\" returns successfully" Nov 1 00:14:07.297900 env[1820]: time="2025-11-01T00:14:07.297838450Z" level=info msg="StopPodSandbox for \"f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13\"" Nov 1 00:14:07.522465 env[1820]: 2025-11-01 00:14:07.424 [WARNING][5569] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--24--47-k8s-calico--kube--controllers--5d8bd955b8--hbwc2-eth0", GenerateName:"calico-kube-controllers-5d8bd955b8-", Namespace:"calico-system", SelfLink:"", UID:"7f4cf6fd-6544-4217-95df-022c9368163b", ResourceVersion:"1454", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 12, 38, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"5d8bd955b8", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-24-47", ContainerID:"7a25da3305b0c4fe9010a2614994f697cbfd23c9707ee5555984fce046287b50", Pod:"calico-kube-controllers-5d8bd955b8-hbwc2", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.49.72/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali46a14ec6bdd", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:14:07.522465 env[1820]: 2025-11-01 00:14:07.425 [INFO][5569] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13" Nov 1 00:14:07.522465 env[1820]: 2025-11-01 00:14:07.425 [INFO][5569] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13" iface="eth0" netns="" Nov 1 00:14:07.522465 env[1820]: 2025-11-01 00:14:07.425 [INFO][5569] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13" Nov 1 00:14:07.522465 env[1820]: 2025-11-01 00:14:07.425 [INFO][5569] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13" Nov 1 00:14:07.522465 env[1820]: 2025-11-01 00:14:07.488 [INFO][5576] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13" HandleID="k8s-pod-network.f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13" Workload="ip--172--31--24--47-k8s-calico--kube--controllers--5d8bd955b8--hbwc2-eth0" Nov 1 00:14:07.522465 env[1820]: 2025-11-01 00:14:07.488 [INFO][5576] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:14:07.522465 env[1820]: 2025-11-01 00:14:07.488 [INFO][5576] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:14:07.522465 env[1820]: 2025-11-01 00:14:07.513 [WARNING][5576] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13" HandleID="k8s-pod-network.f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13" Workload="ip--172--31--24--47-k8s-calico--kube--controllers--5d8bd955b8--hbwc2-eth0" Nov 1 00:14:07.522465 env[1820]: 2025-11-01 00:14:07.514 [INFO][5576] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13" HandleID="k8s-pod-network.f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13" Workload="ip--172--31--24--47-k8s-calico--kube--controllers--5d8bd955b8--hbwc2-eth0" Nov 1 00:14:07.522465 env[1820]: 2025-11-01 00:14:07.517 [INFO][5576] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:14:07.522465 env[1820]: 2025-11-01 00:14:07.519 [INFO][5569] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13" Nov 1 00:14:07.523454 env[1820]: time="2025-11-01T00:14:07.522463668Z" level=info msg="TearDown network for sandbox \"f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13\" successfully" Nov 1 00:14:07.523454 env[1820]: time="2025-11-01T00:14:07.522508920Z" level=info msg="StopPodSandbox for \"f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13\" returns successfully" Nov 1 00:14:07.524230 env[1820]: time="2025-11-01T00:14:07.524161572Z" level=info msg="RemovePodSandbox for \"f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13\"" Nov 1 00:14:07.524389 env[1820]: time="2025-11-01T00:14:07.524228701Z" level=info msg="Forcibly stopping sandbox \"f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13\"" Nov 1 00:14:07.669000 kernel: kauditd_printk_skb: 13 callbacks suppressed Nov 1 00:14:07.669172 kernel: audit: type=1130 audit(1761956047.656:1509): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.24.47:22-147.75.109.163:53426 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:07.656000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.24.47:22-147.75.109.163:53426 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:07.657418 systemd[1]: Started sshd@24-172.31.24.47:22-147.75.109.163:53426.service. Nov 1 00:14:07.827494 env[1820]: 2025-11-01 00:14:07.635 [WARNING][5590] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--24--47-k8s-calico--kube--controllers--5d8bd955b8--hbwc2-eth0", GenerateName:"calico-kube-controllers-5d8bd955b8-", Namespace:"calico-system", SelfLink:"", UID:"7f4cf6fd-6544-4217-95df-022c9368163b", ResourceVersion:"1454", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 12, 38, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"5d8bd955b8", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-24-47", ContainerID:"7a25da3305b0c4fe9010a2614994f697cbfd23c9707ee5555984fce046287b50", Pod:"calico-kube-controllers-5d8bd955b8-hbwc2", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.49.72/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali46a14ec6bdd", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:14:07.827494 env[1820]: 2025-11-01 00:14:07.676 [INFO][5590] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13" Nov 1 00:14:07.827494 env[1820]: 2025-11-01 00:14:07.676 [INFO][5590] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13" iface="eth0" netns="" Nov 1 00:14:07.827494 env[1820]: 2025-11-01 00:14:07.676 [INFO][5590] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13" Nov 1 00:14:07.827494 env[1820]: 2025-11-01 00:14:07.676 [INFO][5590] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13" Nov 1 00:14:07.827494 env[1820]: 2025-11-01 00:14:07.773 [INFO][5599] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13" HandleID="k8s-pod-network.f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13" Workload="ip--172--31--24--47-k8s-calico--kube--controllers--5d8bd955b8--hbwc2-eth0" Nov 1 00:14:07.827494 env[1820]: 2025-11-01 00:14:07.773 [INFO][5599] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:14:07.827494 env[1820]: 2025-11-01 00:14:07.773 [INFO][5599] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:14:07.827494 env[1820]: 2025-11-01 00:14:07.802 [WARNING][5599] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13" HandleID="k8s-pod-network.f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13" Workload="ip--172--31--24--47-k8s-calico--kube--controllers--5d8bd955b8--hbwc2-eth0" Nov 1 00:14:07.827494 env[1820]: 2025-11-01 00:14:07.802 [INFO][5599] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13" HandleID="k8s-pod-network.f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13" Workload="ip--172--31--24--47-k8s-calico--kube--controllers--5d8bd955b8--hbwc2-eth0" Nov 1 00:14:07.827494 env[1820]: 2025-11-01 00:14:07.816 [INFO][5599] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:14:07.827494 env[1820]: 2025-11-01 00:14:07.823 [INFO][5590] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13" Nov 1 00:14:07.828646 env[1820]: time="2025-11-01T00:14:07.828589702Z" level=info msg="TearDown network for sandbox \"f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13\" successfully" Nov 1 00:14:07.839442 env[1820]: time="2025-11-01T00:14:07.839350899Z" level=info msg="RemovePodSandbox \"f984128da738df6e94e2430cda358f9bc2af52bb83457cd618343362c7b42c13\" returns successfully" Nov 1 00:14:07.840412 env[1820]: time="2025-11-01T00:14:07.840365231Z" level=info msg="StopPodSandbox for \"6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08\"" Nov 1 00:14:07.878000 audit[5597]: USER_ACCT pid=5597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:07.890506 sshd[5597]: Accepted publickey for core from 147.75.109.163 port 53426 ssh2: RSA SHA256:l10clL99NTgBLZDdAUsIsAniCj4DES+0hQanxvSOioM Nov 1 00:14:07.893124 kernel: audit: type=1101 audit(1761956047.878:1510): pid=5597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:07.893000 audit[5597]: CRED_ACQ pid=5597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:07.905330 sshd[5597]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:14:07.913331 kernel: audit: type=1103 audit(1761956047.893:1511): pid=5597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:07.913449 kernel: audit: type=1006 audit(1761956047.893:1512): pid=5597 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Nov 1 00:14:07.893000 audit[5597]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe467cdb0 a2=3 a3=1 items=0 ppid=1 pid=5597 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:07.926517 kernel: audit: type=1300 audit(1761956047.893:1512): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe467cdb0 a2=3 a3=1 items=0 ppid=1 pid=5597 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:07.893000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:14:07.931268 kernel: audit: type=1327 audit(1761956047.893:1512): proctitle=737368643A20636F7265205B707269765D Nov 1 00:14:07.935772 systemd[1]: Started session-25.scope. Nov 1 00:14:07.936925 systemd-logind[1813]: New session 25 of user core. Nov 1 00:14:07.954000 audit[5597]: USER_START pid=5597 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:07.963388 kubelet[2832]: E1101 00:14:07.963320 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-789667c9c4-fpxfk" podUID="2015b9d0-1146-401a-9af6-fcdda8aedfda" Nov 1 00:14:07.964331 kubelet[2832]: E1101 00:14:07.964280 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-5d8bd955b8-hbwc2" podUID="7f4cf6fd-6544-4217-95df-022c9368163b" Nov 1 00:14:07.960000 audit[5619]: CRED_ACQ pid=5619 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:07.995997 kernel: audit: type=1105 audit(1761956047.954:1513): pid=5597 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:07.996195 kernel: audit: type=1103 audit(1761956047.960:1514): pid=5619 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:08.282624 env[1820]: 2025-11-01 00:14:08.129 [WARNING][5615] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--24--47-k8s-goldmane--666569f655--h7lrq-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"e0c48ca1-c3ce-4df4-a9c4-ebf24818e57a", ResourceVersion:"1492", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 12, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-24-47", ContainerID:"f2d9b3fb2f8dedcfd229d89dabf38cdfe068b875257416ffe95bd86dd9fdd9b7", Pod:"goldmane-666569f655-h7lrq", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.49.69/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali32c22eab15c", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:14:08.282624 env[1820]: 2025-11-01 00:14:08.130 [INFO][5615] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08" Nov 1 00:14:08.282624 env[1820]: 2025-11-01 00:14:08.131 [INFO][5615] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08" iface="eth0" netns="" Nov 1 00:14:08.282624 env[1820]: 2025-11-01 00:14:08.131 [INFO][5615] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08" Nov 1 00:14:08.282624 env[1820]: 2025-11-01 00:14:08.132 [INFO][5615] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08" Nov 1 00:14:08.282624 env[1820]: 2025-11-01 00:14:08.229 [INFO][5629] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08" HandleID="k8s-pod-network.6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08" Workload="ip--172--31--24--47-k8s-goldmane--666569f655--h7lrq-eth0" Nov 1 00:14:08.282624 env[1820]: 2025-11-01 00:14:08.230 [INFO][5629] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:14:08.282624 env[1820]: 2025-11-01 00:14:08.230 [INFO][5629] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:14:08.282624 env[1820]: 2025-11-01 00:14:08.272 [WARNING][5629] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08" HandleID="k8s-pod-network.6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08" Workload="ip--172--31--24--47-k8s-goldmane--666569f655--h7lrq-eth0" Nov 1 00:14:08.282624 env[1820]: 2025-11-01 00:14:08.272 [INFO][5629] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08" HandleID="k8s-pod-network.6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08" Workload="ip--172--31--24--47-k8s-goldmane--666569f655--h7lrq-eth0" Nov 1 00:14:08.282624 env[1820]: 2025-11-01 00:14:08.277 [INFO][5629] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:14:08.282624 env[1820]: 2025-11-01 00:14:08.279 [INFO][5615] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08" Nov 1 00:14:08.283698 env[1820]: time="2025-11-01T00:14:08.283627878Z" level=info msg="TearDown network for sandbox \"6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08\" successfully" Nov 1 00:14:08.283837 env[1820]: time="2025-11-01T00:14:08.283804411Z" level=info msg="StopPodSandbox for \"6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08\" returns successfully" Nov 1 00:14:08.284918 env[1820]: time="2025-11-01T00:14:08.284863875Z" level=info msg="RemovePodSandbox for \"6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08\"" Nov 1 00:14:08.285414 env[1820]: time="2025-11-01T00:14:08.285315342Z" level=info msg="Forcibly stopping sandbox \"6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08\"" Nov 1 00:14:08.298730 sshd[5597]: pam_unix(sshd:session): session closed for user core Nov 1 00:14:08.300000 audit[5597]: USER_END pid=5597 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:08.315591 systemd[1]: sshd@24-172.31.24.47:22-147.75.109.163:53426.service: Deactivated successfully. Nov 1 00:14:08.317136 systemd[1]: session-25.scope: Deactivated successfully. Nov 1 00:14:08.318826 systemd-logind[1813]: Session 25 logged out. Waiting for processes to exit. Nov 1 00:14:08.300000 audit[5597]: CRED_DISP pid=5597 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:08.320568 systemd-logind[1813]: Removed session 25. Nov 1 00:14:08.330992 kernel: audit: type=1106 audit(1761956048.300:1515): pid=5597 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:08.331251 kernel: audit: type=1104 audit(1761956048.300:1516): pid=5597 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:08.315000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.24.47:22-147.75.109.163:53426 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:08.494378 env[1820]: 2025-11-01 00:14:08.405 [WARNING][5644] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--24--47-k8s-goldmane--666569f655--h7lrq-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"e0c48ca1-c3ce-4df4-a9c4-ebf24818e57a", ResourceVersion:"1492", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 12, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-24-47", ContainerID:"f2d9b3fb2f8dedcfd229d89dabf38cdfe068b875257416ffe95bd86dd9fdd9b7", Pod:"goldmane-666569f655-h7lrq", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.49.69/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali32c22eab15c", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:14:08.494378 env[1820]: 2025-11-01 00:14:08.405 [INFO][5644] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08" Nov 1 00:14:08.494378 env[1820]: 2025-11-01 00:14:08.405 [INFO][5644] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08" iface="eth0" netns="" Nov 1 00:14:08.494378 env[1820]: 2025-11-01 00:14:08.405 [INFO][5644] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08" Nov 1 00:14:08.494378 env[1820]: 2025-11-01 00:14:08.405 [INFO][5644] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08" Nov 1 00:14:08.494378 env[1820]: 2025-11-01 00:14:08.465 [INFO][5652] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08" HandleID="k8s-pod-network.6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08" Workload="ip--172--31--24--47-k8s-goldmane--666569f655--h7lrq-eth0" Nov 1 00:14:08.494378 env[1820]: 2025-11-01 00:14:08.465 [INFO][5652] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:14:08.494378 env[1820]: 2025-11-01 00:14:08.465 [INFO][5652] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:14:08.494378 env[1820]: 2025-11-01 00:14:08.481 [WARNING][5652] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08" HandleID="k8s-pod-network.6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08" Workload="ip--172--31--24--47-k8s-goldmane--666569f655--h7lrq-eth0" Nov 1 00:14:08.494378 env[1820]: 2025-11-01 00:14:08.481 [INFO][5652] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08" HandleID="k8s-pod-network.6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08" Workload="ip--172--31--24--47-k8s-goldmane--666569f655--h7lrq-eth0" Nov 1 00:14:08.494378 env[1820]: 2025-11-01 00:14:08.489 [INFO][5652] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:14:08.494378 env[1820]: 2025-11-01 00:14:08.491 [INFO][5644] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08" Nov 1 00:14:08.495934 env[1820]: time="2025-11-01T00:14:08.495880805Z" level=info msg="TearDown network for sandbox \"6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08\" successfully" Nov 1 00:14:08.503488 env[1820]: time="2025-11-01T00:14:08.503376550Z" level=info msg="RemovePodSandbox \"6dbbeb102ae4e7ec6850470f0cc9f320d3cf9519a950d754756d590998f04a08\" returns successfully" Nov 1 00:14:08.504851 env[1820]: time="2025-11-01T00:14:08.504786440Z" level=info msg="StopPodSandbox for \"b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308\"" Nov 1 00:14:08.701343 env[1820]: 2025-11-01 00:14:08.612 [WARNING][5666] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--24--47-k8s-calico--apiserver--789667c9c4--gltc6-eth0", GenerateName:"calico-apiserver-789667c9c4-", Namespace:"calico-apiserver", SelfLink:"", UID:"de7ca9fd-9d9e-4866-9cab-137a354c3eda", ResourceVersion:"1501", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 12, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"789667c9c4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-24-47", ContainerID:"f688505ab2e83e29a5ef4511d107b19bfd38cfe87de4d75441e13bf3dfbdfc6f", Pod:"calico-apiserver-789667c9c4-gltc6", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.49.67/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali8b02372fdd6", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:14:08.701343 env[1820]: 2025-11-01 00:14:08.613 [INFO][5666] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308" Nov 1 00:14:08.701343 env[1820]: 2025-11-01 00:14:08.613 [INFO][5666] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308" iface="eth0" netns="" Nov 1 00:14:08.701343 env[1820]: 2025-11-01 00:14:08.613 [INFO][5666] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308" Nov 1 00:14:08.701343 env[1820]: 2025-11-01 00:14:08.613 [INFO][5666] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308" Nov 1 00:14:08.701343 env[1820]: 2025-11-01 00:14:08.668 [INFO][5673] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308" HandleID="k8s-pod-network.b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308" Workload="ip--172--31--24--47-k8s-calico--apiserver--789667c9c4--gltc6-eth0" Nov 1 00:14:08.701343 env[1820]: 2025-11-01 00:14:08.669 [INFO][5673] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:14:08.701343 env[1820]: 2025-11-01 00:14:08.669 [INFO][5673] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:14:08.701343 env[1820]: 2025-11-01 00:14:08.689 [WARNING][5673] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308" HandleID="k8s-pod-network.b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308" Workload="ip--172--31--24--47-k8s-calico--apiserver--789667c9c4--gltc6-eth0" Nov 1 00:14:08.701343 env[1820]: 2025-11-01 00:14:08.689 [INFO][5673] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308" HandleID="k8s-pod-network.b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308" Workload="ip--172--31--24--47-k8s-calico--apiserver--789667c9c4--gltc6-eth0" Nov 1 00:14:08.701343 env[1820]: 2025-11-01 00:14:08.695 [INFO][5673] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:14:08.701343 env[1820]: 2025-11-01 00:14:08.698 [INFO][5666] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308" Nov 1 00:14:08.702427 env[1820]: time="2025-11-01T00:14:08.701378847Z" level=info msg="TearDown network for sandbox \"b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308\" successfully" Nov 1 00:14:08.702427 env[1820]: time="2025-11-01T00:14:08.701425755Z" level=info msg="StopPodSandbox for \"b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308\" returns successfully" Nov 1 00:14:08.702892 env[1820]: time="2025-11-01T00:14:08.702842761Z" level=info msg="RemovePodSandbox for \"b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308\"" Nov 1 00:14:08.703172 env[1820]: time="2025-11-01T00:14:08.703091211Z" level=info msg="Forcibly stopping sandbox \"b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308\"" Nov 1 00:14:08.901167 env[1820]: 2025-11-01 00:14:08.798 [WARNING][5687] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--24--47-k8s-calico--apiserver--789667c9c4--gltc6-eth0", GenerateName:"calico-apiserver-789667c9c4-", Namespace:"calico-apiserver", SelfLink:"", UID:"de7ca9fd-9d9e-4866-9cab-137a354c3eda", ResourceVersion:"1501", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 12, 27, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"789667c9c4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-24-47", ContainerID:"f688505ab2e83e29a5ef4511d107b19bfd38cfe87de4d75441e13bf3dfbdfc6f", Pod:"calico-apiserver-789667c9c4-gltc6", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.49.67/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali8b02372fdd6", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:14:08.901167 env[1820]: 2025-11-01 00:14:08.811 [INFO][5687] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308" Nov 1 00:14:08.901167 env[1820]: 2025-11-01 00:14:08.811 [INFO][5687] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308" iface="eth0" netns="" Nov 1 00:14:08.901167 env[1820]: 2025-11-01 00:14:08.811 [INFO][5687] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308" Nov 1 00:14:08.901167 env[1820]: 2025-11-01 00:14:08.811 [INFO][5687] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308" Nov 1 00:14:08.901167 env[1820]: 2025-11-01 00:14:08.870 [INFO][5694] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308" HandleID="k8s-pod-network.b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308" Workload="ip--172--31--24--47-k8s-calico--apiserver--789667c9c4--gltc6-eth0" Nov 1 00:14:08.901167 env[1820]: 2025-11-01 00:14:08.871 [INFO][5694] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:14:08.901167 env[1820]: 2025-11-01 00:14:08.871 [INFO][5694] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:14:08.901167 env[1820]: 2025-11-01 00:14:08.892 [WARNING][5694] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308" HandleID="k8s-pod-network.b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308" Workload="ip--172--31--24--47-k8s-calico--apiserver--789667c9c4--gltc6-eth0" Nov 1 00:14:08.901167 env[1820]: 2025-11-01 00:14:08.892 [INFO][5694] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308" HandleID="k8s-pod-network.b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308" Workload="ip--172--31--24--47-k8s-calico--apiserver--789667c9c4--gltc6-eth0" Nov 1 00:14:08.901167 env[1820]: 2025-11-01 00:14:08.896 [INFO][5694] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:14:08.901167 env[1820]: 2025-11-01 00:14:08.898 [INFO][5687] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308" Nov 1 00:14:08.902399 env[1820]: time="2025-11-01T00:14:08.902344409Z" level=info msg="TearDown network for sandbox \"b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308\" successfully" Nov 1 00:14:08.909499 env[1820]: time="2025-11-01T00:14:08.909432692Z" level=info msg="RemovePodSandbox \"b87f9b2edfff9c28da3b19bb0da0608f47291189f208f28d1f132406ad1b7308\" returns successfully" Nov 1 00:14:10.933384 kubelet[2832]: E1101 00:14:10.933323 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-h7lrq" podUID="e0c48ca1-c3ce-4df4-a9c4-ebf24818e57a" Nov 1 00:14:10.935874 kubelet[2832]: E1101 00:14:10.935798 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-58c6498fd4-zrpxf" podUID="b4871652-e36f-45a1-ab7f-b8d5032703a6" Nov 1 00:14:12.934850 kubelet[2832]: E1101 00:14:12.934780 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-789667c9c4-gltc6" podUID="de7ca9fd-9d9e-4866-9cab-137a354c3eda" Nov 1 00:14:13.327000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.24.47:22-147.75.109.163:51154 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:13.328366 systemd[1]: Started sshd@25-172.31.24.47:22-147.75.109.163:51154.service. Nov 1 00:14:13.330800 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:14:13.330932 kernel: audit: type=1130 audit(1761956053.327:1518): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.24.47:22-147.75.109.163:51154 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:13.512000 audit[5704]: USER_ACCT pid=5704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:13.515231 sshd[5704]: Accepted publickey for core from 147.75.109.163 port 51154 ssh2: RSA SHA256:l10clL99NTgBLZDdAUsIsAniCj4DES+0hQanxvSOioM Nov 1 00:14:13.525000 audit[5704]: CRED_ACQ pid=5704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:13.527504 sshd[5704]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:14:13.536434 kernel: audit: type=1101 audit(1761956053.512:1519): pid=5704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:13.536623 kernel: audit: type=1103 audit(1761956053.525:1520): pid=5704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:13.542963 kernel: audit: type=1006 audit(1761956053.525:1521): pid=5704 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Nov 1 00:14:13.525000 audit[5704]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffde75a250 a2=3 a3=1 items=0 ppid=1 pid=5704 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:13.554877 kernel: audit: type=1300 audit(1761956053.525:1521): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffde75a250 a2=3 a3=1 items=0 ppid=1 pid=5704 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:13.525000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:14:13.563731 kernel: audit: type=1327 audit(1761956053.525:1521): proctitle=737368643A20636F7265205B707269765D Nov 1 00:14:13.562659 systemd-logind[1813]: New session 26 of user core. Nov 1 00:14:13.562700 systemd[1]: Started session-26.scope. Nov 1 00:14:13.573000 audit[5704]: USER_START pid=5704 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:13.587000 audit[5706]: CRED_ACQ pid=5706 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:13.590093 kernel: audit: type=1105 audit(1761956053.573:1522): pid=5704 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:13.611017 kernel: audit: type=1103 audit(1761956053.587:1523): pid=5706 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:13.859558 sshd[5704]: pam_unix(sshd:session): session closed for user core Nov 1 00:14:13.862000 audit[5704]: USER_END pid=5704 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:13.877611 systemd[1]: sshd@25-172.31.24.47:22-147.75.109.163:51154.service: Deactivated successfully. Nov 1 00:14:13.879634 systemd[1]: session-26.scope: Deactivated successfully. Nov 1 00:14:13.862000 audit[5704]: CRED_DISP pid=5704 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:13.890518 kernel: audit: type=1106 audit(1761956053.862:1524): pid=5704 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:13.890634 kernel: audit: type=1104 audit(1761956053.862:1525): pid=5704 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:13.890646 systemd-logind[1813]: Session 26 logged out. Waiting for processes to exit. Nov 1 00:14:13.877000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.24.47:22-147.75.109.163:51154 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:13.893837 systemd-logind[1813]: Removed session 26. Nov 1 00:14:18.890004 systemd[1]: Started sshd@26-172.31.24.47:22-147.75.109.163:51168.service. Nov 1 00:14:18.904204 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:14:18.904372 kernel: audit: type=1130 audit(1761956058.891:1527): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.24.47:22-147.75.109.163:51168 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:18.891000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.24.47:22-147.75.109.163:51168 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:18.934687 kubelet[2832]: E1101 00:14:18.934607 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-7qfc7" podUID="2c016bf7-bf29-4156-a534-853af2a9ae4f" Nov 1 00:14:19.067000 audit[5717]: USER_ACCT pid=5717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:19.071872 sshd[5717]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:14:19.080141 sshd[5717]: Accepted publickey for core from 147.75.109.163 port 51168 ssh2: RSA SHA256:l10clL99NTgBLZDdAUsIsAniCj4DES+0hQanxvSOioM Nov 1 00:14:19.067000 audit[5717]: CRED_ACQ pid=5717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:19.091694 kernel: audit: type=1101 audit(1761956059.067:1528): pid=5717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:19.091851 kernel: audit: type=1103 audit(1761956059.067:1529): pid=5717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:19.098394 kernel: audit: type=1006 audit(1761956059.067:1530): pid=5717 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Nov 1 00:14:19.067000 audit[5717]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe836aa00 a2=3 a3=1 items=0 ppid=1 pid=5717 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:19.112866 systemd-logind[1813]: New session 27 of user core. Nov 1 00:14:19.114770 systemd[1]: Started session-27.scope. Nov 1 00:14:19.067000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:14:19.120084 kernel: audit: type=1300 audit(1761956059.067:1530): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe836aa00 a2=3 a3=1 items=0 ppid=1 pid=5717 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:19.120221 kernel: audit: type=1327 audit(1761956059.067:1530): proctitle=737368643A20636F7265205B707269765D Nov 1 00:14:19.129000 audit[5717]: USER_START pid=5717 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:19.145139 kernel: audit: type=1105 audit(1761956059.129:1531): pid=5717 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:19.149000 audit[5719]: CRED_ACQ pid=5719 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:19.161063 kernel: audit: type=1103 audit(1761956059.149:1532): pid=5719 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:19.422831 sshd[5717]: pam_unix(sshd:session): session closed for user core Nov 1 00:14:19.425000 audit[5717]: USER_END pid=5717 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:19.439686 systemd[1]: sshd@26-172.31.24.47:22-147.75.109.163:51168.service: Deactivated successfully. Nov 1 00:14:19.441841 systemd[1]: session-27.scope: Deactivated successfully. Nov 1 00:14:19.443879 systemd-logind[1813]: Session 27 logged out. Waiting for processes to exit. Nov 1 00:14:19.447253 systemd-logind[1813]: Removed session 27. Nov 1 00:14:19.425000 audit[5717]: CRED_DISP pid=5717 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:19.457587 kernel: audit: type=1106 audit(1761956059.425:1533): pid=5717 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:19.457742 kernel: audit: type=1104 audit(1761956059.425:1534): pid=5717 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:19.439000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.24.47:22-147.75.109.163:51168 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:19.935839 kubelet[2832]: E1101 00:14:19.935784 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-5d8bd955b8-hbwc2" podUID="7f4cf6fd-6544-4217-95df-022c9368163b" Nov 1 00:14:21.934311 kubelet[2832]: E1101 00:14:21.934205 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-58c6498fd4-zrpxf" podUID="b4871652-e36f-45a1-ab7f-b8d5032703a6" Nov 1 00:14:22.933210 kubelet[2832]: E1101 00:14:22.933096 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-789667c9c4-fpxfk" podUID="2015b9d0-1146-401a-9af6-fcdda8aedfda" Nov 1 00:14:22.933726 kubelet[2832]: E1101 00:14:22.933680 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-h7lrq" podUID="e0c48ca1-c3ce-4df4-a9c4-ebf24818e57a" Nov 1 00:14:24.461193 systemd[1]: Started sshd@27-172.31.24.47:22-147.75.109.163:49956.service. Nov 1 00:14:24.460000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.24.47:22-147.75.109.163:49956 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:24.463531 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:14:24.463632 kernel: audit: type=1130 audit(1761956064.460:1536): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.24.47:22-147.75.109.163:49956 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:24.646000 audit[5730]: USER_ACCT pid=5730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:24.649861 sshd[5730]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:14:24.658200 sshd[5730]: Accepted publickey for core from 147.75.109.163 port 49956 ssh2: RSA SHA256:l10clL99NTgBLZDdAUsIsAniCj4DES+0hQanxvSOioM Nov 1 00:14:24.646000 audit[5730]: CRED_ACQ pid=5730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:24.670621 kernel: audit: type=1101 audit(1761956064.646:1537): pid=5730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:24.670722 kernel: audit: type=1103 audit(1761956064.646:1538): pid=5730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:24.678432 kernel: audit: type=1006 audit(1761956064.646:1539): pid=5730 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Nov 1 00:14:24.646000 audit[5730]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe2f8eae0 a2=3 a3=1 items=0 ppid=1 pid=5730 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:24.682064 systemd-logind[1813]: New session 28 of user core. Nov 1 00:14:24.684761 systemd[1]: Started session-28.scope. Nov 1 00:14:24.646000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:14:24.701171 kernel: audit: type=1300 audit(1761956064.646:1539): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe2f8eae0 a2=3 a3=1 items=0 ppid=1 pid=5730 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:24.701342 kernel: audit: type=1327 audit(1761956064.646:1539): proctitle=737368643A20636F7265205B707269765D Nov 1 00:14:24.708000 audit[5730]: USER_START pid=5730 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:24.723275 kernel: audit: type=1105 audit(1761956064.708:1540): pid=5730 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:24.721000 audit[5732]: CRED_ACQ pid=5732 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:24.736014 kernel: audit: type=1103 audit(1761956064.721:1541): pid=5732 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:24.975092 sshd[5730]: pam_unix(sshd:session): session closed for user core Nov 1 00:14:24.976000 audit[5730]: USER_END pid=5730 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:24.991929 systemd[1]: sshd@27-172.31.24.47:22-147.75.109.163:49956.service: Deactivated successfully. Nov 1 00:14:24.993349 systemd[1]: session-28.scope: Deactivated successfully. Nov 1 00:14:24.976000 audit[5730]: CRED_DISP pid=5730 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:25.003693 kernel: audit: type=1106 audit(1761956064.976:1542): pid=5730 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:25.004171 kernel: audit: type=1104 audit(1761956064.976:1543): pid=5730 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Nov 1 00:14:24.991000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.24.47:22-147.75.109.163:49956 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:14:25.004185 systemd-logind[1813]: Session 28 logged out. Waiting for processes to exit. Nov 1 00:14:25.006406 systemd-logind[1813]: Removed session 28. Nov 1 00:14:27.932530 kubelet[2832]: E1101 00:14:27.932476 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-789667c9c4-gltc6" podUID="de7ca9fd-9d9e-4866-9cab-137a354c3eda" Nov 1 00:14:30.933199 env[1820]: time="2025-11-01T00:14:30.933141468Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Nov 1 00:14:31.186081 env[1820]: time="2025-11-01T00:14:31.185909393Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:14:31.188244 env[1820]: time="2025-11-01T00:14:31.188158749Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Nov 1 00:14:31.188557 kubelet[2832]: E1101 00:14:31.188491 2832 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:14:31.189124 kubelet[2832]: E1101 00:14:31.188562 2832 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:14:31.189124 kubelet[2832]: E1101 00:14:31.188736 2832 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.30.4,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-rj9qj,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-7qfc7_calico-system(2c016bf7-bf29-4156-a534-853af2a9ae4f): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Nov 1 00:14:31.191671 env[1820]: time="2025-11-01T00:14:31.191567518Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Nov 1 00:14:31.342339 systemd[1]: run-containerd-runc-k8s.io-79fd55566f956de9971ecfefc31477fdb4d8c3aea32e2854068956f298d16487-runc.PA89Yz.mount: Deactivated successfully. Nov 1 00:14:31.450800 env[1820]: time="2025-11-01T00:14:31.450620321Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:14:31.453051 env[1820]: time="2025-11-01T00:14:31.452931742Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Nov 1 00:14:31.453324 kubelet[2832]: E1101 00:14:31.453262 2832 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:14:31.453448 kubelet[2832]: E1101 00:14:31.453332 2832 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:14:31.453608 kubelet[2832]: E1101 00:14:31.453510 2832 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-rj9qj,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-7qfc7_calico-system(2c016bf7-bf29-4156-a534-853af2a9ae4f): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Nov 1 00:14:31.455145 kubelet[2832]: E1101 00:14:31.455060 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-7qfc7" podUID="2c016bf7-bf29-4156-a534-853af2a9ae4f" Nov 1 00:14:31.933863 kubelet[2832]: E1101 00:14:31.933788 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-5d8bd955b8-hbwc2" podUID="7f4cf6fd-6544-4217-95df-022c9368163b" Nov 1 00:14:33.934186 env[1820]: time="2025-11-01T00:14:33.934130573Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Nov 1 00:14:34.179690 env[1820]: time="2025-11-01T00:14:34.179629016Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:14:34.182181 env[1820]: time="2025-11-01T00:14:34.182105042Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Nov 1 00:14:34.182658 kubelet[2832]: E1101 00:14:34.182585 2832 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:14:34.183187 kubelet[2832]: E1101 00:14:34.182658 2832 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:14:34.183187 kubelet[2832]: E1101 00:14:34.182847 2832 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-q2n49,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-666569f655-h7lrq_calico-system(e0c48ca1-c3ce-4df4-a9c4-ebf24818e57a): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Nov 1 00:14:34.184145 kubelet[2832]: E1101 00:14:34.184093 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-h7lrq" podUID="e0c48ca1-c3ce-4df4-a9c4-ebf24818e57a" Nov 1 00:14:35.933886 env[1820]: time="2025-11-01T00:14:35.933681434Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Nov 1 00:14:36.187865 env[1820]: time="2025-11-01T00:14:36.187665932Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:14:36.189996 env[1820]: time="2025-11-01T00:14:36.189877284Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Nov 1 00:14:36.190363 kubelet[2832]: E1101 00:14:36.190295 2832 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:14:36.190884 kubelet[2832]: E1101 00:14:36.190366 2832 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:14:36.190884 kubelet[2832]: E1101 00:14:36.190536 2832 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.4,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:68ad8fca00514a76b38910a616d960e3,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-2m6c6,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-58c6498fd4-zrpxf_calico-system(b4871652-e36f-45a1-ab7f-b8d5032703a6): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Nov 1 00:14:36.193355 env[1820]: time="2025-11-01T00:14:36.193283245Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Nov 1 00:14:36.457738 env[1820]: time="2025-11-01T00:14:36.457588455Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:14:36.460394 env[1820]: time="2025-11-01T00:14:36.460322567Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Nov 1 00:14:36.460865 kubelet[2832]: E1101 00:14:36.460806 2832 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:14:36.461072 kubelet[2832]: E1101 00:14:36.460878 2832 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:14:36.461211 kubelet[2832]: E1101 00:14:36.461096 2832 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-2m6c6,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-58c6498fd4-zrpxf_calico-system(b4871652-e36f-45a1-ab7f-b8d5032703a6): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Nov 1 00:14:36.462462 kubelet[2832]: E1101 00:14:36.462359 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-58c6498fd4-zrpxf" podUID="b4871652-e36f-45a1-ab7f-b8d5032703a6" Nov 1 00:14:36.933311 env[1820]: time="2025-11-01T00:14:36.933261688Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:14:37.174480 env[1820]: time="2025-11-01T00:14:37.174416113Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:14:37.177297 env[1820]: time="2025-11-01T00:14:37.177224229Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:14:37.177730 kubelet[2832]: E1101 00:14:37.177661 2832 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:14:37.177895 kubelet[2832]: E1101 00:14:37.177733 2832 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:14:37.178060 kubelet[2832]: E1101 00:14:37.177931 2832 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-cdsgs,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-789667c9c4-fpxfk_calico-apiserver(2015b9d0-1146-401a-9af6-fcdda8aedfda): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:14:37.179518 kubelet[2832]: E1101 00:14:37.179470 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-789667c9c4-fpxfk" podUID="2015b9d0-1146-401a-9af6-fcdda8aedfda" Nov 1 00:14:39.109083 systemd[1]: cri-containerd-592da036570edb004405795feafef4e64fc4977bd977e9a0aa07c8ab685df86d.scope: Deactivated successfully. Nov 1 00:14:39.109665 systemd[1]: cri-containerd-592da036570edb004405795feafef4e64fc4977bd977e9a0aa07c8ab685df86d.scope: Consumed 5.646s CPU time. Nov 1 00:14:39.119312 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:14:39.119465 kernel: audit: type=1334 audit(1761956079.113:1545): prog-id=76 op=UNLOAD Nov 1 00:14:39.113000 audit: BPF prog-id=76 op=UNLOAD Nov 1 00:14:39.123367 kernel: audit: type=1334 audit(1761956079.113:1546): prog-id=99 op=UNLOAD Nov 1 00:14:39.113000 audit: BPF prog-id=99 op=UNLOAD Nov 1 00:14:39.154946 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-592da036570edb004405795feafef4e64fc4977bd977e9a0aa07c8ab685df86d-rootfs.mount: Deactivated successfully. Nov 1 00:14:39.188678 env[1820]: time="2025-11-01T00:14:39.188604701Z" level=info msg="shim disconnected" id=592da036570edb004405795feafef4e64fc4977bd977e9a0aa07c8ab685df86d Nov 1 00:14:39.189449 env[1820]: time="2025-11-01T00:14:39.188679474Z" level=warning msg="cleaning up after shim disconnected" id=592da036570edb004405795feafef4e64fc4977bd977e9a0aa07c8ab685df86d namespace=k8s.io Nov 1 00:14:39.189449 env[1820]: time="2025-11-01T00:14:39.188702598Z" level=info msg="cleaning up dead shim" Nov 1 00:14:39.202785 env[1820]: time="2025-11-01T00:14:39.202717441Z" level=warning msg="cleanup warnings time=\"2025-11-01T00:14:39Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5783 runtime=io.containerd.runc.v2\ntime=\"2025-11-01T00:14:39Z\" level=warning msg=\"failed to remove runc container\" error=\"runc did not terminate successfully: exit status 255: \" runtime=io.containerd.runc.v2\n" Nov 1 00:14:39.305888 systemd[1]: cri-containerd-3a6c03da9d59567fe132a7031691c407e495ce9523886c047000116d382a4cce.scope: Deactivated successfully. Nov 1 00:14:39.306516 systemd[1]: cri-containerd-3a6c03da9d59567fe132a7031691c407e495ce9523886c047000116d382a4cce.scope: Consumed 25.060s CPU time. Nov 1 00:14:39.305000 audit: BPF prog-id=117 op=UNLOAD Nov 1 00:14:39.312134 kernel: audit: type=1334 audit(1761956079.305:1547): prog-id=117 op=UNLOAD Nov 1 00:14:39.313000 audit: BPF prog-id=120 op=UNLOAD Nov 1 00:14:39.320014 kernel: audit: type=1334 audit(1761956079.313:1548): prog-id=120 op=UNLOAD Nov 1 00:14:39.357031 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-3a6c03da9d59567fe132a7031691c407e495ce9523886c047000116d382a4cce-rootfs.mount: Deactivated successfully. Nov 1 00:14:39.367406 env[1820]: time="2025-11-01T00:14:39.366477828Z" level=info msg="shim disconnected" id=3a6c03da9d59567fe132a7031691c407e495ce9523886c047000116d382a4cce Nov 1 00:14:39.367406 env[1820]: time="2025-11-01T00:14:39.366549193Z" level=warning msg="cleaning up after shim disconnected" id=3a6c03da9d59567fe132a7031691c407e495ce9523886c047000116d382a4cce namespace=k8s.io Nov 1 00:14:39.367406 env[1820]: time="2025-11-01T00:14:39.366572149Z" level=info msg="cleaning up dead shim" Nov 1 00:14:39.381142 env[1820]: time="2025-11-01T00:14:39.381074039Z" level=warning msg="cleanup warnings time=\"2025-11-01T00:14:39Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5808 runtime=io.containerd.runc.v2\n" Nov 1 00:14:39.774632 kubelet[2832]: I1101 00:14:39.774302 2832 scope.go:117] "RemoveContainer" containerID="592da036570edb004405795feafef4e64fc4977bd977e9a0aa07c8ab685df86d" Nov 1 00:14:39.777631 kubelet[2832]: I1101 00:14:39.777593 2832 scope.go:117] "RemoveContainer" containerID="3a6c03da9d59567fe132a7031691c407e495ce9523886c047000116d382a4cce" Nov 1 00:14:39.779330 env[1820]: time="2025-11-01T00:14:39.779233620Z" level=info msg="CreateContainer within sandbox \"cb2b33c8babd82ac0019f69977aa542317776cc4454b77089e6bcd900407766b\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Nov 1 00:14:39.784089 env[1820]: time="2025-11-01T00:14:39.783956711Z" level=info msg="CreateContainer within sandbox \"8eebe2e7cde327b6f9c376e11715037eeb56911e98cbc2ce260799bdd45c5d4a\" for container &ContainerMetadata{Name:tigera-operator,Attempt:1,}" Nov 1 00:14:39.806322 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2478150501.mount: Deactivated successfully. Nov 1 00:14:39.825814 env[1820]: time="2025-11-01T00:14:39.825727061Z" level=info msg="CreateContainer within sandbox \"cb2b33c8babd82ac0019f69977aa542317776cc4454b77089e6bcd900407766b\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"9e2c1c3ee3bdeafa00d529ff555db2fdc99af21ac14365f534aff710962d79c1\"" Nov 1 00:14:39.826733 env[1820]: time="2025-11-01T00:14:39.826666800Z" level=info msg="StartContainer for \"9e2c1c3ee3bdeafa00d529ff555db2fdc99af21ac14365f534aff710962d79c1\"" Nov 1 00:14:39.828591 env[1820]: time="2025-11-01T00:14:39.828536654Z" level=info msg="CreateContainer within sandbox \"8eebe2e7cde327b6f9c376e11715037eeb56911e98cbc2ce260799bdd45c5d4a\" for &ContainerMetadata{Name:tigera-operator,Attempt:1,} returns container id \"3fc087d066d1b50fc2370816c4d7b51206ff2ef235ae4aabcda8647b93011db4\"" Nov 1 00:14:39.830344 env[1820]: time="2025-11-01T00:14:39.830264822Z" level=info msg="StartContainer for \"3fc087d066d1b50fc2370816c4d7b51206ff2ef235ae4aabcda8647b93011db4\"" Nov 1 00:14:39.862753 systemd[1]: Started cri-containerd-9e2c1c3ee3bdeafa00d529ff555db2fdc99af21ac14365f534aff710962d79c1.scope. Nov 1 00:14:39.902336 systemd[1]: Started cri-containerd-3fc087d066d1b50fc2370816c4d7b51206ff2ef235ae4aabcda8647b93011db4.scope. Nov 1 00:14:39.931000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.940000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.951655 kernel: audit: type=1400 audit(1761956079.931:1549): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.951839 kernel: audit: type=1400 audit(1761956079.940:1550): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.960256 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Nov 1 00:14:39.960429 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Nov 1 00:14:39.960479 kernel: audit: audit_lost=14 audit_rate_limit=0 audit_backlog_limit=64 Nov 1 00:14:39.965029 kernel: audit: audit_lost=15 audit_rate_limit=0 audit_backlog_limit=64 Nov 1 00:14:39.940000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.940000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.940000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.940000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.940000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.940000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.940000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.940000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.940000 audit: BPF prog-id=204 op=LOAD Nov 1 00:14:39.951000 audit[5843]: AVC avc: denied { bpf } for pid=5843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.951000 audit[5843]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=2422 pid=5843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:39.951000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965326331633365653362646561666130306435323966663535356462 Nov 1 00:14:39.951000 audit[5843]: AVC avc: denied { perfmon } for pid=5843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.951000 audit[5843]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=2422 pid=5843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:39.951000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965326331633365653362646561666130306435323966663535356462 Nov 1 00:14:39.951000 audit[5843]: AVC avc: denied { bpf } for pid=5843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.951000 audit[5843]: AVC avc: denied { bpf } for pid=5843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.951000 audit[5843]: AVC avc: denied { bpf } for pid=5843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.951000 audit[5843]: AVC avc: denied { perfmon } for pid=5843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.951000 audit[5843]: AVC avc: denied { perfmon } for pid=5843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.951000 audit[5843]: AVC avc: denied { perfmon } for pid=5843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.951000 audit[5843]: AVC avc: denied { perfmon } for pid=5843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.951000 audit[5843]: AVC avc: denied { perfmon } for pid=5843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.951000 audit[5843]: AVC avc: denied { bpf } for pid=5843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.951000 audit[5843]: AVC avc: denied { bpf } for pid=5843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.951000 audit: BPF prog-id=205 op=LOAD Nov 1 00:14:39.951000 audit[5843]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=2422 pid=5843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:39.951000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965326331633365653362646561666130306435323966663535356462 Nov 1 00:14:39.954000 audit[5843]: AVC avc: denied { bpf } for pid=5843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.954000 audit[5843]: AVC avc: denied { bpf } for pid=5843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.954000 audit[5843]: AVC avc: denied { perfmon } for pid=5843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.954000 audit[5843]: AVC avc: denied { perfmon } for pid=5843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.954000 audit[5843]: AVC avc: denied { perfmon } for pid=5843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.954000 audit[5843]: AVC avc: denied { perfmon } for pid=5843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.954000 audit[5843]: AVC avc: denied { perfmon } for pid=5843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.954000 audit[5843]: AVC avc: denied { bpf } for pid=5843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.954000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.954000 audit[5843]: AVC avc: denied { bpf } for pid=5843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.954000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.954000 audit: BPF prog-id=206 op=LOAD Nov 1 00:14:39.954000 audit[5843]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=2422 pid=5843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:39.954000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965326331633365653362646561666130306435323966663535356462 Nov 1 00:14:39.954000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.954000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.954000 audit: BPF prog-id=206 op=UNLOAD Nov 1 00:14:39.954000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.954000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.954000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.954000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.954000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.954000 audit: BPF prog-id=205 op=UNLOAD Nov 1 00:14:39.954000 audit[5843]: AVC avc: denied { bpf } for pid=5843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.954000 audit[5843]: AVC avc: denied { bpf } for pid=5843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.954000 audit[5843]: AVC avc: denied { bpf } for pid=5843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.954000 audit[5843]: AVC avc: denied { perfmon } for pid=5843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.954000 audit[5843]: AVC avc: denied { perfmon } for pid=5843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.954000 audit[5843]: AVC avc: denied { perfmon } for pid=5843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.954000 audit[5843]: AVC avc: denied { perfmon } for pid=5843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.954000 audit[5843]: AVC avc: denied { perfmon } for pid=5843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.954000 audit[5843]: AVC avc: denied { bpf } for pid=5843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.954000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.966000 audit[5846]: AVC avc: denied { bpf } for pid=5846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.966000 audit[5846]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2891 pid=5846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:39.966000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366633038376430363664316235306663323337303831366334643762 Nov 1 00:14:39.966000 audit[5846]: AVC avc: denied { perfmon } for pid=5846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.966000 audit[5846]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2891 pid=5846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:39.966000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366633038376430363664316235306663323337303831366334643762 Nov 1 00:14:39.966000 audit[5846]: AVC avc: denied { bpf } for pid=5846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.966000 audit[5846]: AVC avc: denied { bpf } for pid=5846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.966000 audit[5846]: AVC avc: denied { bpf } for pid=5846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.966000 audit[5846]: AVC avc: denied { perfmon } for pid=5846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.966000 audit[5846]: AVC avc: denied { perfmon } for pid=5846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.966000 audit[5846]: AVC avc: denied { perfmon } for pid=5846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.966000 audit[5846]: AVC avc: denied { perfmon } for pid=5846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.966000 audit[5846]: AVC avc: denied { perfmon } for pid=5846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.966000 audit[5846]: AVC avc: denied { bpf } for pid=5846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.966000 audit[5846]: AVC avc: denied { bpf } for pid=5846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.966000 audit: BPF prog-id=209 op=LOAD Nov 1 00:14:39.966000 audit[5846]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2891 pid=5846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:39.966000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366633038376430363664316235306663323337303831366334643762 Nov 1 00:14:39.966000 audit[5846]: AVC avc: denied { bpf } for pid=5846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.966000 audit[5846]: AVC avc: denied { bpf } for pid=5846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.966000 audit[5846]: AVC avc: denied { perfmon } for pid=5846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.966000 audit[5846]: AVC avc: denied { perfmon } for pid=5846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.966000 audit[5846]: AVC avc: denied { perfmon } for pid=5846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.966000 audit[5846]: AVC avc: denied { perfmon } for pid=5846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.966000 audit[5846]: AVC avc: denied { perfmon } for pid=5846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.966000 audit[5846]: AVC avc: denied { bpf } for pid=5846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.966000 audit[5846]: AVC avc: denied { bpf } for pid=5846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.966000 audit: BPF prog-id=210 op=LOAD Nov 1 00:14:39.966000 audit[5846]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2891 pid=5846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:39.966000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366633038376430363664316235306663323337303831366334643762 Nov 1 00:14:39.966000 audit: BPF prog-id=210 op=UNLOAD Nov 1 00:14:39.966000 audit: BPF prog-id=209 op=UNLOAD Nov 1 00:14:39.966000 audit[5846]: AVC avc: denied { bpf } for pid=5846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.966000 audit[5846]: AVC avc: denied { bpf } for pid=5846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.966000 audit[5846]: AVC avc: denied { bpf } for pid=5846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.966000 audit[5846]: AVC avc: denied { perfmon } for pid=5846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.966000 audit[5846]: AVC avc: denied { perfmon } for pid=5846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.966000 audit[5846]: AVC avc: denied { perfmon } for pid=5846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.966000 audit[5846]: AVC avc: denied { perfmon } for pid=5846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.966000 audit[5846]: AVC avc: denied { perfmon } for pid=5846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.966000 audit[5846]: AVC avc: denied { bpf } for pid=5846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.966000 audit[5846]: AVC avc: denied { bpf } for pid=5846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:39.966000 audit: BPF prog-id=211 op=LOAD Nov 1 00:14:39.966000 audit[5846]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2891 pid=5846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:39.966000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366633038376430363664316235306663323337303831366334643762 Nov 1 00:14:39.954000 audit: BPF prog-id=208 op=LOAD Nov 1 00:14:39.954000 audit[5843]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=2422 pid=5843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:39.954000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965326331633365653362646561666130306435323966663535356462 Nov 1 00:14:40.023643 env[1820]: time="2025-11-01T00:14:40.023555338Z" level=info msg="StartContainer for \"3fc087d066d1b50fc2370816c4d7b51206ff2ef235ae4aabcda8647b93011db4\" returns successfully" Nov 1 00:14:40.063083 env[1820]: time="2025-11-01T00:14:40.058840097Z" level=info msg="StartContainer for \"9e2c1c3ee3bdeafa00d529ff555db2fdc99af21ac14365f534aff710962d79c1\" returns successfully" Nov 1 00:14:41.933040 env[1820]: time="2025-11-01T00:14:41.932702493Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:14:42.216480 env[1820]: time="2025-11-01T00:14:42.216299877Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:14:42.219091 env[1820]: time="2025-11-01T00:14:42.219007445Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:14:42.219630 kubelet[2832]: E1101 00:14:42.219555 2832 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:14:42.220303 kubelet[2832]: E1101 00:14:42.220249 2832 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:14:42.220757 kubelet[2832]: E1101 00:14:42.220642 2832 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-lgxsj,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-789667c9c4-gltc6_calico-apiserver(de7ca9fd-9d9e-4866-9cab-137a354c3eda): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:14:42.222202 kubelet[2832]: E1101 00:14:42.222133 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-789667c9c4-gltc6" podUID="de7ca9fd-9d9e-4866-9cab-137a354c3eda" Nov 1 00:14:43.566431 systemd[1]: cri-containerd-ac2251f6cda5e2c338b2a8ae0a705626977a5c12d24a134935e589a0637a59d6.scope: Deactivated successfully. Nov 1 00:14:43.567008 systemd[1]: cri-containerd-ac2251f6cda5e2c338b2a8ae0a705626977a5c12d24a134935e589a0637a59d6.scope: Consumed 6.001s CPU time. Nov 1 00:14:43.569000 audit: BPF prog-id=80 op=UNLOAD Nov 1 00:14:43.569000 audit: BPF prog-id=105 op=UNLOAD Nov 1 00:14:43.598000 audit[5866]: AVC avc: denied { watch } for pid=5866 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521025 scontext=system_u:system_r:svirt_lxc_net_t:s0:c413,c578 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:14:43.598000 audit[5866]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000c1ecf0 a2=fc6 a3=0 items=0 ppid=2422 pid=5866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c413,c578 key=(null) Nov 1 00:14:43.598000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:14:43.598000 audit[5866]: AVC avc: denied { watch } for pid=5866 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521019 scontext=system_u:system_r:svirt_lxc_net_t:s0:c413,c578 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:14:43.598000 audit[5866]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=400084fb60 a2=fc6 a3=0 items=0 ppid=2422 pid=5866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c413,c578 key=(null) Nov 1 00:14:43.598000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:14:43.612350 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-ac2251f6cda5e2c338b2a8ae0a705626977a5c12d24a134935e589a0637a59d6-rootfs.mount: Deactivated successfully. Nov 1 00:14:43.647516 env[1820]: time="2025-11-01T00:14:43.647449767Z" level=info msg="shim disconnected" id=ac2251f6cda5e2c338b2a8ae0a705626977a5c12d24a134935e589a0637a59d6 Nov 1 00:14:43.648301 env[1820]: time="2025-11-01T00:14:43.648248589Z" level=warning msg="cleaning up after shim disconnected" id=ac2251f6cda5e2c338b2a8ae0a705626977a5c12d24a134935e589a0637a59d6 namespace=k8s.io Nov 1 00:14:43.648445 env[1820]: time="2025-11-01T00:14:43.648416818Z" level=info msg="cleaning up dead shim" Nov 1 00:14:43.663610 env[1820]: time="2025-11-01T00:14:43.663528457Z" level=warning msg="cleanup warnings time=\"2025-11-01T00:14:43Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5930 runtime=io.containerd.runc.v2\n" Nov 1 00:14:43.798145 kubelet[2832]: I1101 00:14:43.798109 2832 scope.go:117] "RemoveContainer" containerID="ac2251f6cda5e2c338b2a8ae0a705626977a5c12d24a134935e589a0637a59d6" Nov 1 00:14:43.801752 env[1820]: time="2025-11-01T00:14:43.801695347Z" level=info msg="CreateContainer within sandbox \"0871af23484a5245fb4a26ef65385dbb88ffc456a8b518b862a684acf865b7e6\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" Nov 1 00:14:43.833751 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3788175611.mount: Deactivated successfully. Nov 1 00:14:43.848926 env[1820]: time="2025-11-01T00:14:43.848783296Z" level=info msg="CreateContainer within sandbox \"0871af23484a5245fb4a26ef65385dbb88ffc456a8b518b862a684acf865b7e6\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"c028f0e4557526b3914d8a435bf97cebfb88d47b0bb1ccbbfe0524cd25da94a0\"" Nov 1 00:14:43.849841 env[1820]: time="2025-11-01T00:14:43.849797244Z" level=info msg="StartContainer for \"c028f0e4557526b3914d8a435bf97cebfb88d47b0bb1ccbbfe0524cd25da94a0\"" Nov 1 00:14:43.887371 systemd[1]: Started cri-containerd-c028f0e4557526b3914d8a435bf97cebfb88d47b0bb1ccbbfe0524cd25da94a0.scope. Nov 1 00:14:43.929000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.929000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.929000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.929000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.929000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.929000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.929000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.929000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.929000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.930000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.930000 audit: BPF prog-id=212 op=LOAD Nov 1 00:14:43.932000 audit[5950]: AVC avc: denied { bpf } for pid=5950 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.932000 audit[5950]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2486 pid=5950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.932000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330323866306534353537353236623339313464386134333562663937 Nov 1 00:14:43.932000 audit[5950]: AVC avc: denied { perfmon } for pid=5950 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.932000 audit[5950]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2486 pid=5950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.932000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330323866306534353537353236623339313464386134333562663937 Nov 1 00:14:43.933000 audit[5950]: AVC avc: denied { bpf } for pid=5950 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.933000 audit[5950]: AVC avc: denied { bpf } for pid=5950 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.933000 audit[5950]: AVC avc: denied { bpf } for pid=5950 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.933000 audit[5950]: AVC avc: denied { perfmon } for pid=5950 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.933000 audit[5950]: AVC avc: denied { perfmon } for pid=5950 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.933000 audit[5950]: AVC avc: denied { perfmon } for pid=5950 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.933000 audit[5950]: AVC avc: denied { perfmon } for pid=5950 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.933000 audit[5950]: AVC avc: denied { perfmon } for pid=5950 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.933000 audit[5950]: AVC avc: denied { bpf } for pid=5950 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.933000 audit[5950]: AVC avc: denied { bpf } for pid=5950 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.933000 audit: BPF prog-id=213 op=LOAD Nov 1 00:14:43.933000 audit[5950]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2486 pid=5950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.933000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330323866306534353537353236623339313464386134333562663937 Nov 1 00:14:43.936000 audit[5950]: AVC avc: denied { bpf } for pid=5950 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.936000 audit[5950]: AVC avc: denied { bpf } for pid=5950 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.936000 audit[5950]: AVC avc: denied { perfmon } for pid=5950 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.936000 audit[5950]: AVC avc: denied { perfmon } for pid=5950 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.936000 audit[5950]: AVC avc: denied { perfmon } for pid=5950 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.936000 audit[5950]: AVC avc: denied { perfmon } for pid=5950 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.936000 audit[5950]: AVC avc: denied { perfmon } for pid=5950 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.936000 audit[5950]: AVC avc: denied { bpf } for pid=5950 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.936000 audit[5950]: AVC avc: denied { bpf } for pid=5950 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.936000 audit: BPF prog-id=214 op=LOAD Nov 1 00:14:43.936000 audit[5950]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2486 pid=5950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.936000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330323866306534353537353236623339313464386134333562663937 Nov 1 00:14:43.938000 audit: BPF prog-id=214 op=UNLOAD Nov 1 00:14:43.938000 audit: BPF prog-id=213 op=UNLOAD Nov 1 00:14:43.938000 audit[5950]: AVC avc: denied { bpf } for pid=5950 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.938000 audit[5950]: AVC avc: denied { bpf } for pid=5950 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.938000 audit[5950]: AVC avc: denied { bpf } for pid=5950 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.938000 audit[5950]: AVC avc: denied { perfmon } for pid=5950 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.938000 audit[5950]: AVC avc: denied { perfmon } for pid=5950 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.938000 audit[5950]: AVC avc: denied { perfmon } for pid=5950 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.938000 audit[5950]: AVC avc: denied { perfmon } for pid=5950 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.938000 audit[5950]: AVC avc: denied { perfmon } for pid=5950 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.938000 audit[5950]: AVC avc: denied { bpf } for pid=5950 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.938000 audit[5950]: AVC avc: denied { bpf } for pid=5950 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:14:43.938000 audit: BPF prog-id=215 op=LOAD Nov 1 00:14:43.938000 audit[5950]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2486 pid=5950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:14:43.938000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330323866306534353537353236623339313464386134333562663937 Nov 1 00:14:43.987468 env[1820]: time="2025-11-01T00:14:43.987388921Z" level=info msg="StartContainer for \"c028f0e4557526b3914d8a435bf97cebfb88d47b0bb1ccbbfe0524cd25da94a0\" returns successfully" Nov 1 00:14:44.933596 env[1820]: time="2025-11-01T00:14:44.933496733Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Nov 1 00:14:45.190528 env[1820]: time="2025-11-01T00:14:45.190350495Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:14:45.193133 env[1820]: time="2025-11-01T00:14:45.193039942Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Nov 1 00:14:45.193624 kubelet[2832]: E1101 00:14:45.193579 2832 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:14:45.194283 kubelet[2832]: E1101 00:14:45.194229 2832 kuberuntime_image.go:42] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:14:45.194688 kubelet[2832]: E1101 00:14:45.194607 2832 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,loadbalancer,ValueFrom:nil,},EnvVar{Name:DISABLE_KUBE_CONTROLLERS_CONFIG_API,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:CA_CRT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/cert.pem,SubPath:ca-bundle.crt,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-7jnvr,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*999,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-kube-controllers-5d8bd955b8-hbwc2_calico-system(7f4cf6fd-6544-4217-95df-022c9368163b): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Nov 1 00:14:45.196116 kubelet[2832]: E1101 00:14:45.196070 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-5d8bd955b8-hbwc2" podUID="7f4cf6fd-6544-4217-95df-022c9368163b" Nov 1 00:14:45.935781 kubelet[2832]: E1101 00:14:45.935719 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-7qfc7" podUID="2c016bf7-bf29-4156-a534-853af2a9ae4f" Nov 1 00:14:46.933666 kubelet[2832]: E1101 00:14:46.933613 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-h7lrq" podUID="e0c48ca1-c3ce-4df4-a9c4-ebf24818e57a" Nov 1 00:14:47.292583 kubelet[2832]: E1101 00:14:47.292413 2832 controller.go:195] "Failed to update lease" err="Put \"https://172.31.24.47:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-24-47?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Nov 1 00:14:47.933850 kubelet[2832]: E1101 00:14:47.933789 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-58c6498fd4-zrpxf" podUID="b4871652-e36f-45a1-ab7f-b8d5032703a6" Nov 1 00:14:48.933327 kubelet[2832]: E1101 00:14:48.933276 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-789667c9c4-fpxfk" podUID="2015b9d0-1146-401a-9af6-fcdda8aedfda" Nov 1 00:14:51.541996 systemd[1]: cri-containerd-3fc087d066d1b50fc2370816c4d7b51206ff2ef235ae4aabcda8647b93011db4.scope: Deactivated successfully. Nov 1 00:14:51.541000 audit: BPF prog-id=207 op=UNLOAD Nov 1 00:14:51.545210 kernel: kauditd_printk_skb: 177 callbacks suppressed Nov 1 00:14:51.545350 kernel: audit: type=1334 audit(1761956091.541:1606): prog-id=207 op=UNLOAD Nov 1 00:14:51.552469 kernel: audit: type=1334 audit(1761956091.548:1607): prog-id=211 op=UNLOAD Nov 1 00:14:51.548000 audit: BPF prog-id=211 op=UNLOAD Nov 1 00:14:51.580402 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-3fc087d066d1b50fc2370816c4d7b51206ff2ef235ae4aabcda8647b93011db4-rootfs.mount: Deactivated successfully. Nov 1 00:14:51.608868 env[1820]: time="2025-11-01T00:14:51.608802895Z" level=info msg="shim disconnected" id=3fc087d066d1b50fc2370816c4d7b51206ff2ef235ae4aabcda8647b93011db4 Nov 1 00:14:51.609638 env[1820]: time="2025-11-01T00:14:51.609597565Z" level=warning msg="cleaning up after shim disconnected" id=3fc087d066d1b50fc2370816c4d7b51206ff2ef235ae4aabcda8647b93011db4 namespace=k8s.io Nov 1 00:14:51.609767 env[1820]: time="2025-11-01T00:14:51.609738446Z" level=info msg="cleaning up dead shim" Nov 1 00:14:51.623769 env[1820]: time="2025-11-01T00:14:51.623711973Z" level=warning msg="cleanup warnings time=\"2025-11-01T00:14:51Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5993 runtime=io.containerd.runc.v2\n" Nov 1 00:14:51.826792 kubelet[2832]: I1101 00:14:51.826639 2832 scope.go:117] "RemoveContainer" containerID="3a6c03da9d59567fe132a7031691c407e495ce9523886c047000116d382a4cce" Nov 1 00:14:51.827710 kubelet[2832]: I1101 00:14:51.827655 2832 scope.go:117] "RemoveContainer" containerID="3fc087d066d1b50fc2370816c4d7b51206ff2ef235ae4aabcda8647b93011db4" Nov 1 00:14:51.827954 kubelet[2832]: E1101 00:14:51.827902 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"tigera-operator\" with CrashLoopBackOff: \"back-off 10s restarting failed container=tigera-operator pod=tigera-operator-7dcd859c48-7snjl_tigera-operator(f5f33cb3-9e4e-41a3-87a2-6d67a470c4f6)\"" pod="tigera-operator/tigera-operator-7dcd859c48-7snjl" podUID="f5f33cb3-9e4e-41a3-87a2-6d67a470c4f6" Nov 1 00:14:51.830475 env[1820]: time="2025-11-01T00:14:51.830416505Z" level=info msg="RemoveContainer for \"3a6c03da9d59567fe132a7031691c407e495ce9523886c047000116d382a4cce\"" Nov 1 00:14:51.837406 env[1820]: time="2025-11-01T00:14:51.837320684Z" level=info msg="RemoveContainer for \"3a6c03da9d59567fe132a7031691c407e495ce9523886c047000116d382a4cce\" returns successfully" Nov 1 00:14:52.933167 kubelet[2832]: E1101 00:14:52.933116 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-789667c9c4-gltc6" podUID="de7ca9fd-9d9e-4866-9cab-137a354c3eda" Nov 1 00:14:56.932740 kubelet[2832]: E1101 00:14:56.932661 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-5d8bd955b8-hbwc2" podUID="7f4cf6fd-6544-4217-95df-022c9368163b" Nov 1 00:14:57.292943 kubelet[2832]: E1101 00:14:57.292791 2832 controller.go:195] "Failed to update lease" err="Put \"https://172.31.24.47:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-24-47?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Nov 1 00:14:58.482000 audit[2700]: AVC avc: denied { watch } for pid=2700 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521025 scontext=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:14:58.482000 audit[2700]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=400ff837d0 a2=fc6 a3=0 items=0 ppid=2459 pid=2700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 key=(null) Nov 1 00:14:58.494148 kernel: audit: type=1400 audit(1761956098.482:1608): avc: denied { watch } for pid=2700 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521025 scontext=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:14:58.482000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32342E3437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:14:58.507031 kernel: audit: type=1300 audit(1761956098.482:1608): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=400ff837d0 a2=fc6 a3=0 items=0 ppid=2459 pid=2700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 key=(null) Nov 1 00:14:58.483000 audit[2700]: AVC avc: denied { watch } for pid=2700 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521019 scontext=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:14:58.518136 kernel: audit: type=1327 audit(1761956098.482:1608): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32342E3437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:14:58.483000 audit[2700]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=400538f920 a2=fc6 a3=0 items=0 ppid=2459 pid=2700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 key=(null) Nov 1 00:14:58.528143 kernel: audit: type=1400 audit(1761956098.483:1609): avc: denied { watch } for pid=2700 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521019 scontext=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:14:58.483000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32342E3437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:14:58.551247 kernel: audit: type=1300 audit(1761956098.483:1609): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=400538f920 a2=fc6 a3=0 items=0 ppid=2459 pid=2700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 key=(null) Nov 1 00:14:58.551322 kernel: audit: type=1327 audit(1761956098.483:1609): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32342E3437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:14:58.486000 audit[2700]: AVC avc: denied { watch } for pid=2700 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521021 scontext=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:14:58.561463 kernel: audit: type=1400 audit(1761956098.486:1610): avc: denied { watch } for pid=2700 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521021 scontext=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:14:58.486000 audit[2700]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=400ee6b500 a2=fc6 a3=0 items=0 ppid=2459 pid=2700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 key=(null) Nov 1 00:14:58.574071 kernel: audit: type=1300 audit(1761956098.486:1610): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=400ee6b500 a2=fc6 a3=0 items=0 ppid=2459 pid=2700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 key=(null) Nov 1 00:14:58.486000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32342E3437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:14:58.584726 kernel: audit: type=1327 audit(1761956098.486:1610): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32342E3437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:14:58.494000 audit[2700]: AVC avc: denied { watch } for pid=2700 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521027 scontext=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:14:58.494000 audit[2700]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=400ee6b5f0 a2=fc6 a3=0 items=0 ppid=2459 pid=2700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 key=(null) Nov 1 00:14:58.494000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32342E3437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:14:58.500000 audit[2700]: AVC avc: denied { watch } for pid=2700 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521019 scontext=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:14:58.500000 audit[2700]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=40075ae000 a2=fc6 a3=0 items=0 ppid=2459 pid=2700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 key=(null) Nov 1 00:14:58.500000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32342E3437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:14:58.501000 audit[2700]: AVC avc: denied { watch } for pid=2700 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521025 scontext=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:14:58.501000 audit[2700]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=400ee6b6b0 a2=fc6 a3=0 items=0 ppid=2459 pid=2700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 key=(null) Nov 1 00:14:58.501000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32342E3437002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:14:58.596032 kernel: audit: type=1400 audit(1761956098.494:1611): avc: denied { watch } for pid=2700 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521027 scontext=system_u:system_r:svirt_lxc_net_t:s0:c289,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:14:58.934329 kubelet[2832]: E1101 00:14:58.934229 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-7qfc7" podUID="2c016bf7-bf29-4156-a534-853af2a9ae4f" Nov 1 00:14:58.935220 kubelet[2832]: E1101 00:14:58.935170 2832 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-h7lrq" podUID="e0c48ca1-c3ce-4df4-a9c4-ebf24818e57a"